tencent cloud

Web Application Firewall

Release Notes and Announcements
Release Notes
Product Announcement
Security Advisory
User Guide
Product Introduction
Overview
Product Category
Strengths
Scenarios
Plans and Editions
Supported Regions
Basic Concepts
Purchase Guide
Billing Overview
Purchase Guide
WAF Plan Upgrade Method
Renewing Connections
Payment Overdue
Refund
Getting Started
Getting Started
FAQs for Beginners
Operation Guide
Overview
Connection Management
Security Operations
Protection Policies
Service Settings
Practical Tutorial
WAF CCP Overview
Bot Management
API Security
Integration
Protection Configuration
API Documentation
History
Introduction
API Category
Making API Requests
Asset Management APIs
Billing APIs
Protection Settings APIs
Other APIs
IP Management APIs
Integration APIs
Log Service APIs
Security Overview APIs
Rule Engine APIs
Data Types
Error Codes
FAQS
Product Consultation
Connection
Usage
Permissions
Sandbox Isolation Status
Service Level Agreement
WAF Policy
Privacy Policy
Data Processing And Security Agreement
Contact Us
Glossary

CreateOwaspWhiteRule

PDF
聚焦模式
字号
最后更新时间: 2025-10-30 22:08:30

1. API Description

Domain name for API request: waf.intl.tencentcloudapi.com.

This API is used to add a rule engine allowlist.

A maximum of 20 requests can be initiated per second for this API.

We recommend you to use API Explorer
Try it
API Explorer provides a range of capabilities, including online call, signature authentication, SDK code generation, and API quick search. It enables you to view the request, response, and auto-generated examples.

2. Input Parameters

The following request parameter list only provides API request parameters and some common parameters. For the complete common parameter list, see Common Request Parameters.

Parameter Name Required Type Description
Action Yes String Common Params. The value used for this API: CreateOwaspWhiteRule.
Version Yes String Common Params. The value used for this API: 2018-01-25.
Region Yes String Common Params. For more information, please see the list of regions supported by the product. This API only supports: ap-guangzhou, ap-seoul, ap-singapore.
Name Yes String Rule name
Domain Yes String Domain name
Strategies.N Yes Array of Strategy Rule-Based matching policy list.
Ids.N Yes Array of Integer ID list of allowlisted rules.
Type Yes Integer Allowlist type. valid values: 0 (allowlisting by specific rule ID), 1 (allowlisting by rule type).
JobType Yes String Rule execution mode: TimedJob indicates scheduled execution. CronJob indicates periodic execution.
JobDateTime Yes JobDateTime Scheduled task configuration
ExpireTime Yes Integer If the JobDateTime field is not set, this field is used. 0 means permanent, other values indicate the cutoff time for scheduled effect (unit: seconds).
Status No Integer Rule status. valid values: 0 (disabled), 1 (enabled). enabled by default.

3. Output Parameters

Parameter Name Type Description
RuleId Integer Rule ID
RequestId String The unique request ID, generated by the server, will be returned for every request (if the request fails to reach the server for other reasons, the request will not obtain a RequestId). RequestId is required for locating a problem.

4. Example

Example1 Adding to the Allowlist

Input Example

POST / HTTP/1.1
Host: waf.intl.tencentcloudapi.com
Content-Type: application/json
X-TC-Action: CreateOwaspWhiteRule
<Common request parameters>

{
    "Name": "Test allowlist",
    "Domain": "owasp.saas3.testwaf.com",
    "Strategies": [
        {
            "Field": "IP",
            "CompareFunc": "eq",
            "Content": "1.1.1.1",
            "Arg": "GET"
        }
    ],
    "Ids": [
        16
    ],
    "Type": 1,
    "JobType": "TimedJob",
    "JobDateTime": {
        "Timed": [
            {
                "StartDateTime": 0,
                "EndDateTime": 0
            }
        ],
        "TimeTZone": "UTC+8\t"
    },
    "ExpireTime": 0,
    "Status": 1
}

Output Example

{
    "Response": {
        "RuleId": "23123145",
        "RequestId": "01006b52-0313-4771-83eb-968d7b592dfa"
    }
}

5. Developer Resources

SDK

TencentCloud API 3.0 integrates SDKs that support various programming languages to make it easier for you to call APIs.

Command Line Interface

6. Error Code

The following only lists the error codes related to the API business logic. For other error codes, see Common Error Codes.

Error Code Description
AuthFailure CAM signature/authentication error.
DryRunOperation DryRun operation means the request will be successful, but the DryRun parameter is passed.
FailedOperation Operation failed.
InternalError Internal error.
InvalidParameter Parameter error.
InvalidParameter.InvalidCertificate Invalid certificate content.
InvalidParameter.QueryCertBySSLIDFailed Failed to query certificate by ID.
InvalidParameterValue Invalid parameter value.
InvalidParameterValue.InvalidRequest InvalidRequest
LimitExceeded The quota limit is exceeded.
MissingParameter Parameters are missing
OperationDenied Operation denied.
RequestLimitExceeded Too frequent requests
ResourceInUse Resources are occupied.
ResourceInsufficient Insufficient resources.
ResourceNotFound Resources do not exist.
ResourceUnavailable Resources are unavailable.
ResourcesSoldOut Resources are sold out.
UnauthorizedOperation Unauthorized operation.
UnknownParameter Unknown parameter.
UnsupportedOperation The operation is not supported.

帮助和支持

本页内容是否解决了您的问题?

填写满意度调查问卷,共创更好文档体验。

文档反馈