Docs

Virtual Private Cloud

Document

Updates and announcements

What's New

Overview

What is Virtual Private Cloud

Regions and Availability Zones

Getting Started

Network planning

Quick start

Building an IPv4 VPC

Building an IPv4&IPv6 VPC

User Guide

VPC

Creating a VPC

Viewing VPC details

Enabling/Disabling IPv6

Adding/Deleting a secondary CIDR block

Joining Cloud Enterprise Network

Custom Private DNS

Deleting a Virtual Private Cloud

Shared VPC

Shared VPC Overview

Shared VPC Quick Start

Managing a shared VPC

Subnet

Creating a subnet

Changing a route table

Enabling/Disabling IPv6

Deleting a subnet

Route Table

Route table overview

Creating a route table

Associating/Disassociating a subnet

Associating/disassociating an IPv4 Gateway

Deleting a route table

Route entry

Managing a route entry

Publishing/withdrawing routes in CEN

Subnet route table use cases

Network interface

Network interface overview

Creating a secondary network interface

Attaching/Detaching a secondary network interface

Updating a network interface security group

Configuring a secondary network interface for ECS

Associating/Disassociating an EIP

Configuring source/destination address check

Enabling/Disabling the deletion with ECS instance

Deleting a network interface

IP address

IP address overview

Adding or releasing the private IPv4/IPv6 addresses

Configuring private IPv4 addresses for Elastic Compute Service instances

Configuring a private IPv6 address for ECS

Adding/Removing an IP prefix delegation

Security group

Security group overview

Default Security Group

Common security group VS CIDR-Only security group

Creating a security group

Cloning a security group

Associating/Disassociating a network interface

Deleting a security group

Security group rule

Adding a security group rule

Managing a security group rule

Batch import/export security group rules

Security group use cases

Network Access Control List

Network ACL overview

Creating a Network ACL

Adding/Deleting a Network ACL rule

Associating/Disassociating a subnet

Batch import/export network ACL rules

Deleting a Network ACL

Network Access Control List use cases

Prefix List

Prefix List overview

Creating a prefix list

Modifying max entries

Adding/Deleting a prefix list entry

Deleting a prefix list

HAVIP

High-Availability Virtual IP Address overview

Creating a HAVIP

Associating/Disassociating cloud resources

Deleting a HAVIP

Building a high-availability primary-secondary cluster using HaVip and Keepalived

Flow log

Flow log overview

Flow Log billing instruction

Flow Log Getting started

Creating a flow log

Configuring index

Analyzing a flow log

Editing the sampling interval of the flow log

Starting/Stopping a flow log

Deleting a flow log

Flow log use cases

Traffic Mirror

Traffic Mirror Overview

Traffic Mirror billing

Getting started

Managing Traffic Mirror Session

Managing Traffic Mirror Target

Managing Traffic Mirror Filter

Traffic Mirror analysis example

IPv4 gateway

IPv4 Gateway Overview

Quick Start

Creating an IPv4 Gateway

Associating/Disassociating a VPC

Disabling/Enabling an IPv4 Gateway

Deleting IPv4 Gateway

EIP Cross-Region Disaster Recovery

Project and Tag

IAM

Viewing resource topology

Best Practices

Configuring SNAT server

Access control in VPC

Configuring subnet IPv4 address shortage alert

Using a VPC secondary CIDR block to implement EIP direct

API

Call method

VPC

CreateVpc - Creating a VPC

ModifyVpcAttributes - Modifying the VPC information

DescribeVpcs - Querying a VPC list

DescribeVpcAttributes - Querying the VPC details

DeleteVpc - Deleting a VPC

AssociateVpcCidrBlock - Adding a secondary CIDR block

DisassociateVpcCidrBlock - Deleting a secondary CIDR block

Subnet

CreateSubnet - Creating a subnet

ModifySubnetAttributes - Modifying the subnet information

DescribeSubnets - Querying a subnet list

DescribeSubnetAttributes - Querying the subnet details

DeleteSubnet - Deleting a subnet

Route Table

CreateRouteTable - Creating a route table

ModifyRouteTableAttributes - Modifying the route table information

DescribeRouteTableList - Querying a route table list

AssociateRouteTable - Attaching a route table

DisassociateRouteTable - Disassociating a route table

DeleteRouteTable - Deleting a route table

CreateRouteEntry - Creating a route entry

DescribeRouteEntryList - Querying a route entry list

ModifyRouteEntry - Modifying a route entry

DeleteRouteEntry - Deleting a route entry

Network interface

CreateNetworkInterface - Creating a network interface

ModifyNetworkInterfaceAttributes - Modifying the network interface information

DescribeNetworkInterfaces - Querying a network interface list

DescribeNetworkInterfaceAttributes - Querying the details of the network interface

AttachNetworkInterface - Attaching a network interface

DetachNetworkInterface - Detaching a secondary network interface

DeleteNetworkInterface - Deleting a network interface

AssignPrivateIpAddresses - Allocating a secondary private IP address

UnassignPrivateIpAddresses - Deleting a secondary private IP address

AssignIpv6Addresses - Allocating the private IPv6 address

UnassignIpv6Addresses - Deleting an IPv6 private IP address

Security Group

CreateSecurityGroup - Creating a security group

ModifySecurityGroupAttributes - Modifying the security group information

DescribeSecurityGroups - Querying a security group list

DeleteSecurityGroup - Deleting a security group

AuthorizeSecurityGroupIngress - Adding an inbound security group rule

AuthorizeSecurityGroupEgress - Adding an outbound security group rule

DescribeSecurityGroupAttributes - Querying the details of security group

ModifySecurityGroupRuleDescriptionsIngress - Modifying the description of inbound security group rules

ModifySecurityGroupRuleDescriptionsEgress - Modifying the description of outbound security group rules

RevokeSecurityGroupIngress - Deleting an inbound security group rule

RevokeSecurityGroupEgress - Deleting an outbound security group rule

Prefix list

CreatePrefixList - Creating a prefix list instance

ModifyPrefixList - Updating a prefix list instance

DescribePrefixLists - Querying the prefix list instance

DescribePrefixListAssociations - Querying the prefix list association

DescribePrefixListEntries - Querying specified prefix list information

DeletePrefixList - Deleting a prefix list instance

HAVIP

CreateHaVip - Creating a high-availability virtual IP

ModifyHaVipAttributes - Modifying a HaVip

DescribeHaVips - Querying a HAVIP

AssociateHaVip - Associating a HaVip

DisassociateHaVip - Disassociating the HaVip

DeleteHaVip - Deleting a HaVip

Flow log

CreateFlowLog - Creating a VPC flow log

ModifyFlowLogAttribute - Modifying a VPC flow log instance

DescribeFlowLogs - Querying a flow log instance

DeleteFlowLog - Deleting a VPC flow log

ActiveFlowLog - Enabling a VPC flow log

DeactiveFlowLog - Disabling a VPC flow log

Network ACL

CreateNetworkAcl - Creating a Network ACL

ModifyNetworkAclAttributes - Modifying Network ACL information

DescribeNetworkAcls - Querying a network ACL list

DescribeNetworkAclAttributes - Querying Network ACL details

UpdateNetworkAclEntries - Updating an outbound/inbound ACL rule

AssociateNetworkAcl - Network ACL associated resources

DisassociateNetworkAcl - Disassociating resources from Network ACL

DeleteNetworkAcl - Deleting a Network ACL

Traffic mirror target

CreateTrafficMirrorTarget - Creating a traffic mirror target

ModifyTrafficMirrorTargetAttributes - Updating a traffic mirror target

DescribeTrafficMirrorTargets - Querying a traffic mirror target

DeleteTrafficMirrorTarget - Deleting a traffic mirror target

CreateTrafficMirrorFilter - Creating a filter instance

ModifyTrafficMirrorFilterAttributes - Updating a mirror filter attribute

DescribeTrafficMirrorFilters - Querying a mirror filter list

ModifyTrafficMirrorFilterRuleAttributes - Updating the filter rule attribute

DeleteTrafficMirrorFilter - Deleting a filter instance

CreateTrafficMirrorFilterRule - Creating a filter rule instance

DeleteTrafficMirrorFilterRule - Deleting a filter rule instance

ModifyTrafficMirrorSessionAttributes - Updating a traffic mirror session attribute

CreateTrafficMirrorSession - Creating a mirror session instance

DescribeTrafficMirrorSessions - Querying a mirror session list

DeleteTrafficMirrorSession - Deleting a traffic mirror session instance

IPv4 Gateway

CreateIpv4Gateway - Creating an IPv4 gateway instance

DeleteIpv4Gateway - Deleting an IPv4 gateway instance

DescribeIpv4Gateways - Querying an IPv4 gateway instance list

ModifyIpv4Gateway - Editing an IPv4 Gateway instance

AttachIpv4Gateway - Attaching an IPv4 gateway instance

DetachIpv4Gateway - Disassociating an IPv4 gateway

EnableIpv4Gateway - Enabling an IPv4 Gateway instance

DisableIpv4Gateway - Disabling an IPv4 gateway instance

Tag

TagResources - Adding a custom tag

UntagResources - Detaching a user tag

ListTagsForResources - Querying the tag list

Billing

SDK reference

VPC SDK overview

Viewing an SDK sample code

FAQ

Virtual Private Cloud FAQ

Subnet FAQ

Network Interface FAQ

Route Table FAQ

Security Group FAQ

Network ACL FAQ

High-Availability Virtual IP Address FAQ

Flow Log FAQ

API FAQ

Documentation

Virtual Private Cloud

User Guide

IAM

Policy examples

Copy page

Download PDF

IAM

Policy examples

Copy page

Download PDF

Policy examples

Last updated: 2026.05.14 15:10:01

Public security network record in Beijing: No. 11010802032137