---
title: "Update cloud scan"
source_url: https://dev.digicert.com/certcentral-apis/discovery-api/cloud-scan/update-cloud-scan.html
api_method: POST
api_endpoint: "/apicontroller/v1/scan/updateCloudScan"
api_url: "https://daas.digicert.com/apicontroller/v1/scan/updateCloudScan"
---

**POST** `https://daas.digicert.com/apicontroller/v1/scan/updateCloudScan`

Use this endpoint to update or modify the cloud scan settings.

## Related topic

For more information on cloud scan, see <a href="https://docs.digicert.com/en/certcentral/certificate-tools/discovery-cloud-scan-service.html" target="_blank" rel="noopener noreferrer">Discovery cloud scan service</a>.

## Example requests and responses

## cURL

```bash
curl --location --request POST 'https://daas.digicert.com/apicontroller/v1/scan/updateCloudScan' \
--header 'X-DC-DEVKEY: {{api_key}}' \
--header 'Content-Type: application/json' \
--data-raw '{
    "cloudScanSurveyConfigDTO": {
        "ipInclusionList": "yahoo.com",
        "ipExclusionList": "",
        "isExtraTlsProtocolsScan": false,
        "includedPorts": [
            "443"
        ]
    },
    "accountId": 1419609,
    "divisionId": 304778,
    "action": "saveAndRunNow"
}'
```

## 200 OK

```json
{
    "error": null,
    "data": "Cloud scan updated successfully."
}
```

## Request parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Req/Opt</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>cloudScanSurveyConfigDTO</td>
<td>required</td>
<td>object</td>
<td>Object container for cloud scan configuration details.</td>
</tr>
<tr>
<td>.. ipInclusionList</td>
<td>required</td>
<td>string</td>
<td>IPs to include in the cloud scan. This can be a comma-separated list.<br>Supported formats are individual IPs, IP range, CIDR, and FQDNs.<br><strong>Example for IP format:</strong> <code>104.20.67.46</code><br><strong>Example for FQDN format:</strong> <code>digicert.com</code><br><strong>Note:</strong>Loopback IP "127.0.0.1" is not allowed to scan.</td>
</tr>
<tr>
<td>.. ipExclusionList</td>
<td>required</td>
<td>string</td>
<td>IPs to exclude in the cloud scan. This can be a comma-separated list.<br>Supported formats are individual IPs, IP range, CIDR, and FQDNs.<br><strong>Example for IP format:</strong> <code>104.20.67.46</code><br><strong>Example for FQDN format:</strong> <code>digicert.com</code><br><strong>Note:</strong>Loopback IP "127.0.0.1" is not allowed to scan.</td>
</tr>
<tr>
<td>.. isExtraTlsProtocolsScan</td>
<td>optional</td>
<td>boolean</td>
<td>If <code>true</code>, the protocols scan will be enabled for SSLv2, SSLv3 and TLSv1.1. If <code>false</code>, default protocols scan will be enabled.<br>Default protocols scan are TLSv1.3, TLSv1.2 and TLSv1.</td>
</tr>
<tr>
<td>.. includedPorts</td>
<td>required</td>
<td>array</td>
<td>Ports to include in the cloud scan. It can be individual ports or port range.</td>
</tr>
<tr>
<td>accountId</td>
<td>required</td>
<td>string</td>
<td>Account ID.</td>
</tr>
<tr>
<td>divisionId</td>
<td>required</td>
<td>integer</td>
<td>Division ID.</td>
</tr>
<tr>
<td>action</td>
<td>optional</td>
<td>string</td>
<td>Action performed to update the cloud scan.</td>
</tr>
</tbody>
</table>

## Response parameters

<table class="params-table">
<thead>
<tr>
<th>Name</th>
<th>Type</th>
<th>Description</th>
</tr>
</thead>
<tbody>
<tr>
<td>error</td>
<td>object</td>
<td>Includes the error code, if any.</td>
</tr>
<tr>
<td>data</td>
<td>string</td>
<td>Message for cloud scan updated with the next scheduled run.</td>
</tr>
</tbody>
</table>