cwp — Cloud Workload Protection
cwp · 2018-02-28

CreateBaselineStrategy

POST

Create a baseline policy based on the policy information.

Wire call

Converge Cloud is RPC over HTTP. There is one path — / — and the action travels in the X-TC-Action header. The /cwp/CreateBaselineStrategy path used in the OpenAPI document is a documentation convenience so each action is addressable; it is not a route on the server.

curl
curl -sS https://cwp.api3.convergecloud.com/ \
  -H 'Authorization: TC3-HMAC-SHA256 Credential=<SecretId>/<YYYY-MM-DD>/cwp/tc3_request, SignedHeaders=content-type;host;x-tc-action, Signature=<sig>' \
  -H 'Content-Type: application/json; charset=utf-8' \
  -H 'Host: cwp.api3.convergecloud.com' \
  -H 'X-TC-Action: CreateBaselineStrategy' \
  -H 'X-TC-Version: 2018-02-28' \
  -H 'X-TC-Timestamp: <unix-seconds>' \
  -H 'X-TC-Region: luzon' \
  -d '{}'

Request parameters

FieldTypeRequiredDescription
StrategyNamestringYesPolicy name
ScanCycleintegerYesCheck cycle, indicating the number of days between checks. Example: 2, indicating that the check is carried out every 2 days.
ScanAtstringYesTime for a periodic check. The scan task is issued at this time. Example: "22:00", indicating that the task is issued at 22:00.
CategoryIdsstring[]YesArray of selected baseline IDs under this policy. Example: [1,3,5,7]
IsGlobalintegerYesWhether all servers are scanned. 1: yes; 0: no. If the value is 1, all Professional Edition hosts are scanned.
MachineTypestringYesCloud host type:
RegionCodestringYesHost region. Example: "ap-guangzhou"
Quuidsstring[]NoHost ID array. Example: ["quuid1","quuid2"]

Response

Fields are returned inside the Response envelope. Converge Cloud answers HTTP 200 for errors as well as successes, so read Response.Error rather than the status code — and test for the presence of that object, because Code is occasionally the empty string.

FieldTypeDescription
RequestIdstringThe unique request ID, generated by the server, will be returned for every request (if the request fails to reach the server for other reasons, the request will not obtain a RequestId). RequestId is required for locating a problem.
Success
{
  "Response": {
    // action-specific fields,
    "RequestId": "…"
  }
}
Error
{
  "Response": {
    "Error": { "Code": "…", "Message": "…" },
    "RequestId": "…"
  }
}

Try it

CredentialThe key never leaves this tab — it signs the request here. The signed request goes to /api-relay/cwp.
Request bodyvalid JSONPOST cwp.api3.convergecloud.com · CreateBaselineStrategy
Recorded example response — captured 2026-09-16
{
  "Response": {
    "RequestId": "08b3b56e-0690-7459-ed45-713ca128da5d"
  }
}

Behaviour

Returns only a RequestId. The created strategy is not identified in the response; list strategies with DescribeBaselineStrategyList to find it.