Cloud Advisor overview
- Print
- PDF
Cloud Advisor overview
- Print
- PDF
Article summary
Did you find this summary helpful?
Thank you for your feedback
Cloud Advisor is a management product that checks your resources and helps the resources operate at a stable status.
Common settings
API URL
https://cloud-advisor.apigw.ntruss.com/api/v1/
Request headers
Header | Description |
---|---|
x-ncp-lang | A value for multilingual processing of API response values. (Default value: ko-KR) ko-KR: 한국어 en-US : English ja-JP : 日本語 zh-CN : 中文(简体) |
x-ncp-apigw-timestamp | Time elapsed in milliseconds since January 1, 1970, 00:00:00 UTC If the time differs from that of the API Gateway server by 5 minutes or more, then the request is considered invalid |
x-ncp-iam-access-key | This is the access key ID issued by the portal or Sub Account |
x-ncp-apigw-signature-v2 | Signature encrypted with the secret key mapped with the access key ID HmacSHA256 is used as the HMAC encryption algorithm |
- To request the Cloud Advisor API, you need to create an authentication key for the NAVER Cloud Platform account and sub account, and an authentication value.
- When requesting the Cloud Advisor API, the results of the check items of the NCP account and sub account delivered through the header are replied to.
- For information on creating authentication keys and request headers, see Ncloud API Guide > Call API guide.
Response format
Field name | Type | Required | Description |
---|---|---|---|
result | string | Requirement status | SUCCESS / FAIL |
contents | object | Optional | Processing result data upon a successful request |
error | object | Optional | Errors and messages on request failure |
error.errorCode | string | Optional | Errors |
error.message | string | Optional | Error message |
An example of a response format
- An example of success
{
"result": "SUCCESS",
"contents": [
{
"categoryCode": "SECURITY",
"categoryName": "Security"
},
{
"categoryCode": "COST",
"categoryName": "Cost&high availability"
}
]
}
- An example of failure
{
"result": "FAIL"
"error": {
"errorCode": "API_CHECKITEM_NOT_FOUND",
"message": "The checklist does not exist.(API_CHECKITEM_NOT_FOUND); Field error"
}
}
Response code
Response codes include response codes specific to the Cloud Advisor service and common service errors. For common service errors, see Ncloud API Guide > 3. Call > Failure guide.
The messages and descriptions for each response code specific to the Cloud Advisor service are as follows:
HttpStatusCode | ErrorCode | Message |
---|---|---|
200 | - | Request handling successful |
400 | MISSING_REQUIRED_PARAM_ERROR | The required parameter is missing. |
400 | INVALID_PARAM_VALUE_ERROR | The value of the input parameter is invalid. |
401 | NO_AUTHENTICATION_INFORMATION | The server failed to authenticate the request. |
403 | SUBACCOUNT_PERMISSION_DENIED | The sub account does not have permission to access this feature. |
404 | CATEGORY_NOT_FOUND | The category does not exist. |
404 | CHECKITEM_NOT_FOUND | The checklist does not exist. |
500 | API_UNKNOWN_SERVER_ERROR | Unknown error has occurred. |
Category offering and checklist
Currently, Cloud Advisor only provides a checklist in the Security and Cost & High Availability category. More categories and checklists will continue to be added later. categoryCode and itemCode included in the Cloud Advisor API path are as follows:
{categoryCode}
categoryCode | Description |
---|---|
SECURITY | Security category |
COST | Cost & high availability category |
{itemCode}
categoryCode | itemCode | Checklist | Description |
---|---|---|---|
SECURITY | SUB_ACCOUNT_ACCESSKEY | Sub account access key management | Checks the lifespan of the access key added to sub account. |
SECURITY | SUB_ACCOUNT_USE | Sub account use | Checks whether the sub account is used. |
SECURITY | SUB_ACCOUNT_PASSWORD | Sub account password management | Checks how many days the password for the sub account has been in use. |
SECURITY | SUB_ACCOUNT_SECONDARY | Sub account 2-factor authentication status | Checks if the 2-factor authentication is configured on the sub account. |
SECURITY | MAIN_ACCOUNT_ACCESSKEY | Main account access key management | Checks how many days the access key for the main account has been in use. |
SECURITY | MAIN_ACCOUNT_PASSWORD | Main account password management | Checks how many days the password for the main account has been in use. |
SECURITY | MAIN_ACCOUNT_SECONDARY | Main account 2-factor authentication status | Checks whether or not the main account has 2-factor authentication settings. |
SECURITY | LOAD_BALANCER_LISTENER | Load Balancer listener security management | Checks whether or not the VPC LoadBalancer (Application, Network Proxy) includes a listener that performs the recommended encrypted data transmission. |
SECURITY | OBJECT_STORAGE_BUCKET | Object Storage bucket authorization | Checks the ACL of the customer's entire bucket and displays a warning if it is open to other customers. |
SECURITY | DNS_SPF | Global DNS record SPF MX check | Checks if SPF and TXT records exist for an MX record. |
SECURITY | DNS_TTL | Global DNS record TTL check | Checks if the TTL of a record set connected to a domain is higher than the recommended TTL. |
SECURITY | DNS_AUTHORITY | Global DNS Authority NS check | Checks that a domain registrar or DNS is using the correct Global DNS name server. |
SECURITY | ACG_PORT | ACG port management | Checks if any of the ACG rules have an Any Open rule for a particular port. |
SECURITY | CLOUD_DB_MYSQL_PORT | Cloud DB MYSQL default port check | Checks the cloud DB for MySQL DB server port. |
COST | CLOVA_OCR_UNUSED_RESOURCES | Unused Resource - CLOVA OCR | Checks for CLOVA OCR domains that are unused after creation. |
COST | CLOVA_DUBBING_UNUSED_RESOURCES | Unused Resource - CLOVA Dubbing | Checks for CLOVA Dubbing domains that are unused after creation. |
COST | IDLE_RESOURCE_VM | Idle Resource - Server | Checks for seemingly unused servers with low usage amounts. |
COST | IDLE_RESOURCE_LB | Idle Resource - Load Balancer | Checks for seemingly unused Load Balancers with low usage amounts. |
COST | HIGH_UTILIZATION_VM | High Utilization - Server | Checks for servers maintaining high usage amounts. |
COST | HIGH_UTILIZATION_MYSQL | High Utilization - Cloud DB for MySQL | Checks for DB servers of Cloud DB for MySQL maintaining high usage amounts. |
COST | HIGH_UTILIZATION_REDIS | High Utilization - Cloud DB for Redis | Checks for DB servers of Cloud DB for Redis maintaining high usage amounts. |
COST | HIGH_UTILIZATION_MSSQL | High Utilization - Cloud DB for MSSQL | Checks for DB servers of Cloud DB for MSSQL maintaining high usage amounts. |
COST | HIGH_UTILIZATION_MONGO | High Utilization - Cloud DB for MongoDB | Checks for DB servers of Cloud DB for MongoDB maintaining high usage amounts. |
COST | OBJECT_STORAGE_MULTIPART | Incomplete Multi-Part Object in Object Storage | Checks for incomplete Multi-Part Object in the bucket. |
Was this article helpful?