Security

huawei-cloud-dcs-query

Query Huawei Cloud DCS (Distributed Cache Service) instances, configurations, backups, slow logs, big key/hot key scan tasks, migration tasks, ACL accounts, IP whitelists, tags, quotas, and instance statistics. Provides read-only inspection capabilities for daily operations, performance troubleshooting, and compliance auditing. Triggers include: DCS query, list DCS instances, check Redis instance status, view cache configuration, backup records, slow logs, big key analysis, hot key analysis, migration task, ACL account, IP whitelist, instance quota, list DCS, query DCS, show DCS, DCS instance, Redis instance, 分布式缓存, DCS查询, DCS实例查询, 缓存实例.

What it does

The skill document

Huawei Cloud DCS Query Skill

Overview

This skill provides comprehensive read-only query capabilities for Huawei Cloud DCS (Distributed Cache Service, i.e. managed Redis / Memcached). It covers instance listing and detail inspection, parameter configuration review, backup/restore records, slow log analysis, and big key / hot key scan tasks. It also covers migration task tracking, ACL / whitelist inspection, tag and quota queries, and running-instance statistics.

Architecture:

Agent → hcloud CLI (primary) → Huawei Cloud DCS API
       ↘ Python SDK (fallback) ↗

Applicable Scenarios:

Daily DCS instance health inspection
Cache performance troubleshooting (slow log / big key / hot key analysis)
Backup policy and restore record verification
Instance configuration audit and compliance check
Migration task status tracking
ACL account and IP whitelist security review
Quota and tag inventory

Prerequisites

hcloud CLI installed and authenticated — See references/cli-installation-guide.md
Python 3.8+ with huaweicloudsdkdcs package (SDK fallback)
Huawei Cloud AK/SK configured via environment variables or hcloud configure set
IAM permissions — DCS ReadOnlyAccess or finer-grained policy — See references/iam-policies.md

Workflow

Identify query scope — Determine which DCS aspect to inspect (instances, configurations, backups, logs, scan tasks, migration, ACL, whitelist, quota, tags)
Execute query — Run the appropriate CLI command (primary) or SDK call (fallback)
Review results — Analyze output for anomalies, performance issues, or compliance gaps
Report findings — Summarize key observations and recommendations

Core Commands

Instance Queries

Purpose	Command
List all DCS instances	`hcloud DCS ListInstances --cli-region={region}`
List instances with filter	`hcloud DCS ListInstances --cli-region={region} --name={name} [--status={status}] [--limit={limit}] [--offset={offset}]`
Show instance details	`hcloud DCS ShowInstance --cli-region={region} --instance_id={instance_id}`
List instance status counts	`hcloud DCS ListNumberOfInstancesInDifferentStatus --cli-region={region}`
List running instance statistics	`hcloud DCS ListStatisticsOfRunningInstances --cli-region={region}`
List available AZs	`hcloud DCS ListAvailableZones --cli-region={region}`
List maintenance windows	`hcloud DCS ListMaintenanceWindows --cli-region={region}`
Show tenant quota	`hcloud DCS ShowQuotaOfTenant --cli-region={region}`
List group replication info	`hcloud DCS ListGroupReplicationInfo --cli-region={region} --instance_id={instance_id}`

Configuration Queries

Purpose	Command
List instance configuration parameters	`hcloud DCS ListConfigurations --cli-region={region} --instance_id={instance_id}`
List configuration change history	`hcloud DCS ListConfigHistories --cli-region={region} --instance_id={instance_id} [--limit={limit}]`

Backup / Restore Queries

Purpose	Command
List backup records	`hcloud DCS ListBackupRecords --cli-region={region} --instance_id={instance_id} [--limit={limit}]`
List restore records	`hcloud DCS ListRestoreRecords --cli-region={region} --instance_id={instance_id} [--limit={limit}]`

Log Queries

Purpose	Command
List slow logs	`hcloud DCS ListSlowlog --cli-region={region} --instance_id={instance_id} --start_time={start_time} --end_time={end_time} [--limit={limit}]`
List Redis run logs	`hcloud DCS ListRedislog --cli-region={region} --instance_id={instance_id} --log_type=run [--limit={limit}]`

Big Key / Hot Key Scan Queries

Purpose	Command
List big key scan tasks	`hcloud DCS ListBigkeyScanTasks --cli-region={region} --instance_id={instance_id} [--status={status}]`
Show big key autoscan config	`hcloud DCS ShowBigkeyAutoscanConfig --cli-region={region} --instance_id={instance_id}`
List hot key scan tasks	`hcloud DCS ListHotKeyScanTasks --cli-region={region} --instance_id={instance_id} [--status={status}]`
Show hot key autoscan config	`hcloud DCS ShowHotkeyAutoscanConfig --cli-region={region} --instance_id={instance_id}`
List diagnosis tasks	`hcloud DCS ListDiagnosisTasks --cli-region={region} --instance_id={instance_id}`

Migration Queries

Purpose	Command
List migration tasks	`hcloud DCS ListMigrationTask --cli-region={region} [--name={name}]`
Show migration task detail	`hcloud DCS ShowMigrationTask --cli-region={region} --task_id={task_id}`

Security Queries (ACL / Whitelist)

Purpose	Command
List ACL accounts	`hcloud DCS ListAclAccounts --cli-region={region} --instance_id={instance_id}`
Show IP whitelist	`hcloud DCS ShowIpWhitelist --cli-region={region} --instance_id={instance_id}`

Tag Queries

Purpose	Command
List tenant-level tags	`hcloud DCS ListTagsOfTenant --cli-region={region}`
Show instance tags	`hcloud DCS ShowTags --cli-region={region} --instance_id={instance_id}`

SDK Fallback Examples

When CLI is unavailable, use the Python SDK:

import os
from huaweicloudsdkcore.auth.credentials import BasicCredentials
from huaweicloudsdkdcs.v2.region.dcs_region import DcsRegion
from huaweicloudsdkdcs.v2 import dcs_client
from huaweicloudsdkdcs.v2.model import ListInstancesRequest

credentials = BasicCredentials() \
    .with_ak(os.getenv("HUAWEI_ACCESS_KEY")) \
    .with_sk(os.getenv("HUAWEI_SECRET_KEY")) \
    .with_project_id("{project_id}")

client = dcs_client.DcsClient.new_builder() \
    .with_credentials(credentials) \
    .with_region(DcsRegion.value_of("{region}")) \
    .build()

request = ListInstancesRequest()
request.limit = 100
response = client.list_instances(request)

Parameter Confirmation

Parameter	Required	Description	Example
`{region}`	Yes	Huawei Cloud region	`cn-north-4`
`{instance_id}`	Conditional	DCS instance ID (required for detail/config/backup/log/scan/ACL/whitelist/tag commands)	`51bb645e-d27f-465d-8192-c912d134756c`
`{task_id}`	Conditional	Migration task ID (required for ShowMigrationTask)	`ff808082...`
`{start_time}` / `{end_time}`	Conditional	Time range for slow log queries, Unix millisecond timestamps (UTC)	`1598803200000` / `1599494399000`
`{name}`	No	Instance or migration task name filter	`dcs-eval-client`
`{status}`	No	Instance or scan task status filter	`RUNNING`
`{limit}`	No	Maximum records to return	`100`
`{offset}`	No	Page offset	`0`
`{project_id}`	Conditional	Project ID (required for SDK/API)	`0a1234b56c78d9ef`

Reference Documents

CLI Installation Guide
IAM Policies
Verification Method
Data Flow Diagram
Acceptance Criteria

KooCLI Command Format Standard

hcloud DCS  --cli-region= [--key=value ...]

Feature	Description	Example
Service name	`DCS`	`hcloud DCS ListInstances`
Operation name	PascalCase	`ListInstances`, `ShowInstance`
Region parameter	`--cli-region=`	`--cli-region=cn-north-4`
Simple parameter	`--key=value`	`--instance_id=xxx`

Related skills

huawei-cloud-dcs-list

Query Huawei Cloud DCS (Distributed Cache Service) instance names and list all managed Redis/Memcached instances across a region. Provides read-only name lookup, name filtering, status-based filtering, and instance ID lookup for inventory reporting and daily inspection. Triggers include: DCS list, list DCS instances, query DCS names, DCS instance name, find DCS instance, DCS name lookup, DCS instance list, Redis instance names, cache instance names, DCS inventory, 查询DCS名称, DCS实例名称, 缓存实例名称, DCS列表, DCS实例列表, 查询缓存实例名称.

huawei-cloud-dcs-count

Count the number of Huawei Cloud DCS (Distributed Cache Service) instances — managed Redis and Memcached — in a region and output the count. Returns the authoritative instance_num from the ListInstances API, so the reported number is always exact regardless of page size. Supports counting all instances, counting Redis-only (or Memcached-only) instances via the per-engine breakdown, filtering by status (RUNNING, FROZEN, etc.), and a per-status count breakdown via ListNumberOfInstancesInDifferentStatus. Read-only — never creates, modifies or deletes any resource. Use for Redis/DCS instance inventory, daily inspection, or cost review. Triggers include: count Redis, Redis count, DCS instance count, how many Redis instances, number of Redis instances, Redis数量, DCS实例数量, Redis实例数量, 查询Redis数量, 查询redis数量, 缓存实例数量, DCS数量, 统计Redis实例数, redis实例个数.

huawei-cloud-ecs-query

Queries Huawei Cloud ECS (Elastic Cloud Server) resources in read-only mode. Covers ECS instances, flavors, keypairs, quotas, server groups, block devices, NICs, VNC console, launch templates, recycle bin, scheduled events, and tags. No write operations. Use this skill when the user needs to query ECS instance details, list flavors, check server status, view block devices, or inspect ECS resource attributes. Triggers include: 查询ECS, ECS实例查询, 云服务器查询, 弹性云服务器, ECS规格, ECS配额, 云服务器列表, ECS详情, query ECS, list ECS servers, show server details, ECS flavors, ECS quotas, ECS keypairs, server groups, block devices, ECS inventory, cloud server list, ecs list, ecs query, ecs show.

huawei-cloud-dds-list

Query the list of Huawei Cloud DDS (Document Database Service, 文档数据库服务) instances under the current tenant / project and return the DDS instance NAMES. By default the skill prints only the instance names (one per line); with extra flags it also returns id, status, mode, datastore engine, version and created time. Supports filtering by instance name, id, mode (Sharding/ReplicaSet/Single), datastore type (DDS-Community/DDS-Enhanced), VPC and subnet, plus pagination via limit/offset. Uses the KooCLI command `hcloud DDS ListInstances --cli-region={region}` (primary) or the huaweicloudsdkdds Python SDK (fallback). Read-only — never creates, modifies, deletes, restarts or stops any DDS instance. Use this skill whenever the user wants to list/inspect the DDS instances of the tenant or query the DDS instance name list, e.g. for database inventory, daily inspection, or cost review. Triggers include: "list DDS", "DDS list", "query DDS names", "DDS实例列表", "查询DDS", "DDS实例名称", "dds list", "how many

1 installs

huawei-cloud-computing-query

Read-only query of Huawei Cloud ECS, BMS, IMS, and AS resources via local Python scripts.

by huaweicloud-skills-team2 installs

huawei-cloud-rds-list

Query the list of Huawei Cloud RDS (Relational Database Service, 云数据库) instances under the current tenant / project and return the RDS instance NAMES. By default the skill prints only the instance names (one per line); with extra flags it also returns id, status, engine type, flavor, private IPs and created time. Supports filtering by instance name, id, type (Single/Ha/Replica), datastore engine (MySQL/PostgreSQL/SQLServer/MariaDB) and VPC, plus pagination via limit/offset. Uses the KooCLI command `hcloud RDS ListInstances --cli-region={region}` (primary) or the huaweicloudsdkrds Python SDK (fallback). Read-only — never creates, modifies, deletes, restarts or stops any RDS instance. Use this skill whenever the user wants to list/inspect the RDS instances of the tenant or query the RDS instance name list, e.g. for database inventory, daily inspection, or cost review. Triggers include: "list RDS", "RDS list", "query RDS names", "RDS实例列表", "查询RDS", "RDS实例名称", "rds list", "how many RDS", "