openapi: '3.1.1'
info:
  title: Aembit Cloud API
  version: v1
servers:
  - url: 'https://{tenant}.aembit.io'
    variables:
      tenant:
        default: tenant
        description: Aembit Tenant ID
paths:
  /api/v1/access-conditions:
    get:
      tags:
        - Access Condition
      summary: Get a page of Access Conditions
      description: Retrieve a page of Aembit Access Conditions.
      operationId: get-access-conditions
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: group-by
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Access Conditions
          content:
            application/json:
              schema:
                description: Page of Access Conditions
                $ref: '#/components/schemas/AccessConditionDTOAccessConditionListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - Access Condition
      summary: Create an Access Condition
      description: Create an Aembit Access Condition which can then be associated with an Access Policy.
      operationId: post-access-condition
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: AccessConditionDTO
        content:
          application/json:
            schema:
              description: DTO of an individual Access Condition for enforcement during Access Policy evaluation
              $ref: '#/components/schemas/AccessConditionDTO'
      responses:
        '201':
          description: Successfully created Access Condition
          content:
            application/json:
              schema:
                description: DTO of an individual Access Condition for enforcement during Access Policy evaluation
                $ref: '#/components/schemas/AccessConditionDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Access Condition
      summary: Update a single Access Condition
      description: Update a specific Access Condition identified by its ID.
      operationId: put-access-condition
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: AccessConditionDTO
        content:
          application/json:
            schema:
              description: DTO of an individual Access Condition for enforcement during Access Policy evaluation
              $ref: '#/components/schemas/AccessConditionDTO'
      responses:
        '200':
          description: Successfully updated Access Condition
          content:
            application/json:
              schema:
                description: DTO of an individual Access Condition for enforcement during Access Policy evaluation
                $ref: '#/components/schemas/AccessConditionDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/access-conditions/{id}':
    get:
      tags:
        - Access Condition
      summary: Get the identified Access Condition
      description: Get the Access Condition identified by its ID.
      operationId: get-access-condition
      parameters:
        - name: id
          in: path
          description: ID of Access Condition
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Access Condition
          content:
            application/json:
              schema:
                description: DTO of an individual Access Condition for enforcement during Access Policy evaluation
                $ref: '#/components/schemas/AccessConditionDTO'
        '204':
          description: Access Condition Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - Access Condition
      summary: Delete a single Access Condition
      description: Delete a specific Access Condition identified by its ID.
      operationId: delete-access-condition
      parameters:
        - name: id
          in: path
          description: ID of Access Condition
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '204':
          description: Deleted the Access Condition
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '404':
          description: Not Found
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - Access Condition
      summary: Patch a single Access Condition
      description: Patch a specific Access Condition identified by its ID.
      operationId: patch-access-condition
      parameters:
        - name: id
          in: path
          description: ID of Access Condition
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: AccessConditionPatchDTO
        content:
          application/json:
            schema:
              description: Patch Request DTO for individual Access Condition
              $ref: '#/components/schemas/AccessConditionPatchDTO'
      responses:
        '200':
          description: Successfully updated Access Condition
          content:
            application/json:
              schema:
                description: DTO of an individual Access Condition for enforcement during Access Policy evaluation
                $ref: '#/components/schemas/AccessConditionDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v2/access-conditions:
    get:
      tags:
        - Access Condition v2
      summary: Get a page of Access Conditions
      description: Retrieve a page of Aembit Access Conditions.
      operationId: get-access-conditions2
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: group-by
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Access Conditions
          content:
            application/json:
              schema:
                description: Page of Access Conditions
                $ref: '#/components/schemas/AccessConditionV2DTOAccessConditionListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - Access Condition v2
      summary: Create an Access Condition
      description: Create an Aembit Access Condition which can then be associated with an Access Policy.
      operationId: post-access-condition2
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: AccessConditionV2DTO
        content:
          application/json:
            schema:
              oneOf:
                - $ref: '#/components/schemas/AccessConditionV2DTO'
                - $ref: '#/components/schemas/CrowdStrikeAccessConditionDTO'
                - $ref: '#/components/schemas/WizAccessConditionDTO'
                - $ref: '#/components/schemas/GeoIPAccessConditionDTO'
                - $ref: '#/components/schemas/TimeAccessConditionDTO'
      responses:
        '201':
          description: Successfully created Access Condition
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/AccessConditionV2DTO'
                  - $ref: '#/components/schemas/CrowdStrikeAccessConditionDTO'
                  - $ref: '#/components/schemas/WizAccessConditionDTO'
                  - $ref: '#/components/schemas/GeoIPAccessConditionDTO'
                  - $ref: '#/components/schemas/TimeAccessConditionDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Access Condition v2
      summary: Update a single Access Condition
      description: Update a specific Access Condition identified by its ID.
      operationId: put-access-condition2
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: AccessConditionDTO
        content:
          application/json:
            schema:
              oneOf:
                - $ref: '#/components/schemas/AccessConditionV2DTO'
                - $ref: '#/components/schemas/CrowdStrikeAccessConditionDTO'
                - $ref: '#/components/schemas/WizAccessConditionDTO'
                - $ref: '#/components/schemas/GeoIPAccessConditionDTO'
                - $ref: '#/components/schemas/TimeAccessConditionDTO'
      responses:
        '200':
          description: Successfully updated Access Condition
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/AccessConditionV2DTO'
                  - $ref: '#/components/schemas/CrowdStrikeAccessConditionDTO'
                  - $ref: '#/components/schemas/WizAccessConditionDTO'
                  - $ref: '#/components/schemas/GeoIPAccessConditionDTO'
                  - $ref: '#/components/schemas/TimeAccessConditionDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v2/access-conditions/{id}':
    get:
      tags:
        - Access Condition v2
      summary: Get the identified Access Condition
      description: Get the Access Condition identified by its ID.
      operationId: get-access-condition2
      parameters:
        - name: id
          in: path
          description: ID of Access Condition
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Access Condition
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/AccessConditionV2DTO'
                  - $ref: '#/components/schemas/CrowdStrikeAccessConditionDTO'
                  - $ref: '#/components/schemas/WizAccessConditionDTO'
                  - $ref: '#/components/schemas/GeoIPAccessConditionDTO'
                  - $ref: '#/components/schemas/TimeAccessConditionDTO'
        '204':
          description: Access Condition Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - Access Condition v2
      summary: Delete a single Access Condition
      description: Delete a specific Access Condition identified by its ID.
      operationId: delete-access-condition2
      parameters:
        - name: id
          in: path
          description: ID of Access Condition
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '204':
          description: Deleted the Access Condition
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '404':
          description: Not Found
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - Access Condition v2
      summary: Patch a single Access Condition
      description: Patch a specific Access Condition identified by its ID.
      operationId: patch-access-condition2
      parameters:
        - name: id
          in: path
          description: ID of Access Condition
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: AccessConditionPatchDTO
        content:
          application/json:
            schema:
              description: Patch Request DTO for individual Access Condition
              $ref: '#/components/schemas/AccessConditionPatchDTO'
      responses:
        '200':
          description: Successfully updated Access Condition
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/AccessConditionV2DTO'
                  - $ref: '#/components/schemas/CrowdStrikeAccessConditionDTO'
                  - $ref: '#/components/schemas/WizAccessConditionDTO'
                  - $ref: '#/components/schemas/GeoIPAccessConditionDTO'
                  - $ref: '#/components/schemas/TimeAccessConditionDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/access-policies/{id}':
    get:
      tags:
        - Access Policy (Deprecated)
      summary: Get the identified Access Policy
      description: Get the Access Policy identified by its ID.
      operationId: get-access-policy
      parameters:
        - name: id
          in: path
          description: ID of Access Policy
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Access Policy
          content:
            application/json:
              schema:
                description: Individual Access Policy
                $ref: '#/components/schemas/PolicyExternalDTO'
        '204':
          description: Access Policy Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - Access Policy (Deprecated)
      summary: Delete an Access Policy
      description: Delete an Access Policy.
      operationId: delete-access-policy
      parameters:
        - name: id
          in: path
          description: ID of Access Policy
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '204':
          description: Deleted the Access Policy
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - Access Policy (Deprecated)
      summary: Patch an Access Policy
      description: Patch an Access Policy.
      operationId: patch-access-policy
      parameters:
        - name: id
          in: path
          description: ID of Access Policy
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: PolicyPatchDTO
        content:
          application/json:
            schema:
              description: Patch request for an Access Policy
              $ref: '#/components/schemas/PolicyPatchDTO'
      responses:
        '200':
          description: Patched Access Policy
          content:
            application/json:
              schema:
                description: Individual Access Policy
                $ref: '#/components/schemas/PolicyDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/access-policies/getByWorkloadIds/{clientWorkloadId}/{serverWorkloadId}':
    get:
      tags:
        - Access Policy (Deprecated)
      summary: Get the identified Access Policy
      description: Get the Access Policy identified by a Client and Server Workload.
      operationId: get-access-policy-by-workloads
      parameters:
        - name: clientWorkloadId
          in: path
          description: ID of Client Workload
          required: true
          schema:
            type: string
            format: uuid
        - name: serverWorkloadId
          in: path
          description: ID of Server Workload
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Access Policy
          content:
            application/json:
              schema:
                description: Individual Access Policy
                $ref: '#/components/schemas/PolicyExternalDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/access-policies:
    get:
      tags:
        - Access Policy (Deprecated)
      summary: Get a page of Access Policies
      description: Retrieve a page of Access Policies.
      operationId: get-access-policies
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          description: Filter returned access policies using either a string or a key:value combination
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: group-by
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Access Policies
          content:
            application/json:
              schema:
                description: Page of Access Policies
                $ref: '#/components/schemas/PolicyListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - Access Policy (Deprecated)
      summary: Create an Access Policy
      description: Create an Access Policy.
      operationId: post-access-policy
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: PolicyDTO
        content:
          application/json:
            schema:
              description: Individual Access Policy
              $ref: '#/components/schemas/PolicyDTO'
      responses:
        '200':
          description: Created Access Policy
          content:
            application/json:
              schema:
                description: Individual Access Policy
                $ref: '#/components/schemas/PolicyDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Access Policy (Deprecated)
      summary: Update an Access Policy
      description: Update an Access Policy.
      operationId: put-access-policy
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: PolicyDTO
        content:
          application/json:
            schema:
              description: Individual Access Policy
              $ref: '#/components/schemas/PolicyDTO'
      responses:
        '200':
          description: Updated Access Policy
          content:
            application/json:
              schema:
                description: Individual Access Policy
                $ref: '#/components/schemas/PolicyDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/access-policies/{id}/notes':
    post:
      tags:
        - Access Policy (Deprecated)
      summary: Add a note to an Access Policy
      description: Add a note to an Access Policy.
      operationId: post-access-policy-note
      parameters:
        - name: id
          in: path
          description: ID of Access Policy
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: PolicyNoteDTO
        content:
          application/json:
            schema:
              description: Individual Note created for an Access Policy
              $ref: '#/components/schemas/PolicyNoteDTO'
      responses:
        '201':
          description: Note added to an Access Policy
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v2/access-policies/{id}':
    get:
      tags:
        - Access Policy v2
      summary: Get the identified Access Policy
      description: Get the Access Policy identified by its ID.
      operationId: get-access-policy-v2
      parameters:
        - name: id
          in: path
          description: ID of Access Policy
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Access Policy
          content:
            application/json:
              schema:
                description: Individual Access Policy
                $ref: '#/components/schemas/GetPolicyDTO'
        '204':
          description: Access Policy Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - Access Policy v2
      summary: Delete an Access Policy
      description: Delete an Access Policy.
      operationId: delete-access-policy-v2
      parameters:
        - name: id
          in: path
          description: ID of Access Policy
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '204':
          description: Deleted the Access Policy
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '404':
          description: Not Found
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - Access Policy v2
      summary: Patch an Access Policy
      description: Patch an Access Policy.
      operationId: patch-access-policy-v2
      parameters:
        - name: id
          in: path
          description: ID of Access Policy
          required: true
          schema:
            type: string
            format: uuid
      requestBody:
        description: PatchPolicyV2DTO
        content:
          application/json:
            schema:
              description: Patch request for an Access Policy
              $ref: '#/components/schemas/PatchPolicyV2DTO'
      responses:
        '200':
          description: Patched Access Policy
          content:
            application/json:
              schema:
                description: Create/Update Access Policy
                $ref: '#/components/schemas/CreatePolicyDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v2/access-policies/getByWorkloadIds/{clientWorkloadId}/{serverWorkloadId}':
    get:
      tags:
        - Access Policy v2
      summary: Get the identified Access Policy
      description: Get the Access Policy identified by a Client and Server Workload.
      operationId: get-access-policy-by-workloads-v2
      parameters:
        - name: clientWorkloadId
          in: path
          description: ID of Client Workload
          required: true
          schema:
            type: string
            format: uuid
        - name: serverWorkloadId
          in: path
          description: ID of Server Workload
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Access Policy
          content:
            application/json:
              schema:
                description: Individual Access Policy
                $ref: '#/components/schemas/GetPolicyDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v2/access-policies:
    get:
      tags:
        - Access Policy v2
      summary: Get a page of Access Policies
      description: Retrieve a page of Access Policies.
      operationId: get-access-policies-v2
      parameters:
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          description: Filter returned access policies using either a string or a key:value combination
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ModifiedAt desc
        - name: group-by
          in: query
          schema:
            type: string
            default: ''
        - name: query
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Access Policies
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetPolicyDTOListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - Access Policy v2
      summary: Create an Access Policy
      description: Create an Access Policy.
      operationId: post-access-policy-v2
      requestBody:
        description: CreatePolicyDTO
        content:
          application/json:
            schema:
              description: Create/Update Access Policy
              $ref: '#/components/schemas/CreatePolicyDTO'
      responses:
        '200':
          description: Created Access Policy
          content:
            application/json:
              schema:
                description: Create/Update Access Policy
                $ref: '#/components/schemas/CreatePolicyDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Access Policy v2
      summary: Update an Access Policy
      description: Update an Access Policy.
      operationId: put-access-policy-v2
      requestBody:
        description: CreatePolicyDTO
        content:
          application/json:
            schema:
              description: Create/Update Access Policy
              $ref: '#/components/schemas/CreatePolicyDTO'
      responses:
        '200':
          description: Updated Access Policy
          content:
            application/json:
              schema:
                description: Create/Update Access Policy
                $ref: '#/components/schemas/CreatePolicyDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v2/access-policies/{id}/notes':
    post:
      tags:
        - Access Policy v2
      summary: Add a note to an Access Policy
      description: Add a note to an Access Policy.
      operationId: post-access-policy-note-v2
      parameters:
        - name: id
          in: path
          description: ID of Access Policy
          required: true
          schema:
            type: string
            format: uuid
      requestBody:
        description: PolicyNoteDTO
        content:
          application/json:
            schema:
              description: Individual Note created for an Access Policy
              $ref: '#/components/schemas/PolicyNoteDTO'
      responses:
        '201':
          description: Note added to an Access Policy
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    get:
      tags:
        - Access Policy v2
      summary: Gets notes for an Access Policy
      description: Retrieves note information for an Access Policy.
      operationId: get-access-policy-notes-v2
      parameters:
        - name: id
          in: path
          description: ID of Access Policy
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Page of Access Policy Notes
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PolicyNoteDTOListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v2/access-policies/{id}/credential-mappings':
    get:
      tags:
        - Access Policy v2
      summary: Gets a credential mappings of Access Policy
      description: Retrieves credential mappings of Access Policy.
      operationId: get-access-policy-credential-mappings-v2
      parameters:
        - name: id
          in: path
          description: ID of Access Policy
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Page of Credential Mappings
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/PolicyNoteDTOListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/agent-controllers:
    get:
      tags:
        - Agent Controller
      summary: Get a page of Agent Controllers
      description: Get a page of Agent Controllers.
      operationId: get-agent-controllers
      parameters:
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: group-by
          in: query
          schema:
            type: string
            default: ''
        - name: check-tls-type
          in: query
          schema:
            type: boolean
            default: false
      responses:
        '200':
          description: Page of Agent Controllers
          content:
            application/json:
              schema:
                description: Page of Agent Controllers for Agent Proxy management
                $ref: '#/components/schemas/AgentControllerListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - Agent Controller
      summary: Create an Agent Controller
      description: Create an Agent Controller.
      operationId: post-agent-controller
      requestBody:
        description: AgentControllerDTO
        content:
          application/json:
            schema:
              description: DTO of an individual Agent Controller for Agent Proxy management
              $ref: '#/components/schemas/AgentControllerDTO'
      responses:
        '201':
          description: Created Agent Controller
          content:
            application/json:
              schema:
                description: DTO of an individual Agent Controller for Agent Proxy management
                $ref: '#/components/schemas/AgentControllerDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Agent Controller
      summary: Update an Agent Controller
      description: Update an Agent Controller.
      operationId: put-agent-controller
      requestBody:
        description: AgentControllerDTO
        content:
          application/json:
            schema:
              description: DTO of an individual Agent Controller for Agent Proxy management
              $ref: '#/components/schemas/AgentControllerDTO'
      responses:
        '200':
          description: Updated Agent Controller
          content:
            application/json:
              schema:
                description: DTO of an individual Agent Controller for Agent Proxy management
                $ref: '#/components/schemas/AgentControllerDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/agent-controllers/{id}':
    get:
      tags:
        - Agent Controller
      summary: Get an Agent Controller
      description: Get an Agent Controller identified by its ID.
      operationId: get-agent-controller
      parameters:
        - name: id
          in: path
          description: ID of Agent Controller
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Agent Controller
          content:
            application/json:
              schema:
                description: DTO of an individual Agent Controller for Agent Proxy management
                $ref: '#/components/schemas/AgentControllerDTO'
        '204':
          description: Agent Controller Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - Agent Controller
      summary: Patch an Agent Controller
      description: Patch an Agent Controller identified by its ID.
      operationId: patch-agent-controller
      parameters:
        - name: id
          in: path
          description: ID of Agent Controller
          required: true
          schema:
            type: string
            format: uuid
      requestBody:
        description: AgentControllerPatchDTO
        content:
          application/json:
            schema:
              description: Patch Request DTO for individual Agent Controller
              $ref: '#/components/schemas/AgentControllerPatchDTO'
      responses:
        '200':
          description: Patched Agent Controller
          content:
            application/json:
              schema:
                description: DTO of an individual Agent Controller for Agent Proxy management
                $ref: '#/components/schemas/AgentControllerDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - Agent Controller
      summary: Delete an Agent Controller
      description: Delete an Agent Controller identified by its ID.
      operationId: delete-agent-controller
      parameters:
        - name: id
          in: path
          description: ID of Agent Controller
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '201':
          description: Successfully deleted Agent Controller
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/agent-controllers/{agentControllerExternalId}/device-code':
    post:
      tags:
        - Agent Controller
      summary: Generate a Device Code for an Agent Controller
      description: Generate a Device Code for an Agent Controller.
      operationId: post-agent-controller-device-code
      parameters:
        - name: agentControllerExternalId
          in: path
          description: ID of Agent Controller
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '201':
          description: Agent Controller Device Code
          content:
            application/json:
              schema:
                description: DTO of an individual Agent Controller Device Code
                $ref: '#/components/schemas/AgentControllerDeviceCodeDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/audit-logs:
    get:
      tags:
        - Audit Log
      summary: Get a page of Audit Log events
      description: Get a page of Audit Log events.
      operationId: get-audit-logs
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: search
          in: query
          schema:
            type: string
            default: ''
        - name: span-last-minutes
          in: query
          schema:
            type: integer
            format: int64
            default: 0
        - name: span-last-days
          in: query
          schema:
            type: integer
            format: int32
            default: 30
        - name: start-date
          in: query
          schema:
            type: string
            format: date-time
        - name: end-date
          in: query
          schema:
            type: string
            format: date-time
        - name: category
          in: query
          schema:
            type: string
            default: ''
        - name: severity
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Audit Logs
          content:
            application/json:
              schema:
                description: Page of Aembit Audit Logs
                $ref: '#/components/schemas/AuditLogListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/audit-logs/{id}':
    get:
      tags:
        - Audit Log
      summary: Get an Audit Log event
      description: Get an Audit Log event identified by its ID.
      operationId: get-audit-log
      parameters:
        - name: id
          in: path
          description: ID of Audit Log
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Audit Log
          content:
            application/json:
              schema:
                description: DTO for an individual Aembit Audit Log
                $ref: '#/components/schemas/AuditLogDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/authorization-events:
    get:
      tags:
        - Access Authorization Event
      summary: Get a page of Access Authorization Events
      description: Get a page of Access Authorization Events.
      operationId: get-access-authorization-events
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: search
          in: query
          schema:
            type: string
            default: ''
        - name: span-last-minutes
          in: query
          schema:
            type: integer
            format: int64
            default: 0
        - name: span-last-hours
          in: query
          schema:
            type: integer
            format: int32
            default: 24
        - name: start-date
          in: query
          schema:
            type: string
            format: date-time
        - name: end-date
          in: query
          schema:
            type: string
            format: date-time
        - name: severity
          in: query
          schema:
            type: string
            default: ''
        - name: event-type
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Access Authorization Events
          content:
            application/json:
              schema:
                description: Page of Aembit Access Authorization Events
                $ref: '#/components/schemas/AuthorizationEventListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/authorization-events/{id}':
    get:
      tags:
        - Access Authorization Event
      summary: Get an Access Authorization Event
      description: Get an Access Authorization Event identified by its ID.
      operationId: get-access-authorization-event
      parameters:
        - name: id
          in: path
          description: ID of Access Authorization Event
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Access Authorization Event
          content:
            application/json:
              schema:
                description: An individual Aembit Access Authorization Event
                $ref: '#/components/schemas/AuthorizationEventDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/compliance-settings:
    get:
      tags:
        - Compliance
        - Policy
      summary: Gets global compliance settings
      description: Gets global compliance settings which control the rules for creating access policy and other entities
      operationId: get-compliance-settings
      responses:
        '200':
          description: A list of compliance settings
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/SettingDTO'
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Compliance
        - Policy
      summary: Updates a global compliance setting
      description: Updates a global compliance setting
      operationId: update-compliance-setting
      requestBody:
        description: SettingDTO
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SettingDTO'
      responses:
        '200':
          description: Successfully updated a compliance setting
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SettingDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/content-security/{id}':
    get:
      tags:
        - Content Security
      summary: Get a Content Security
      description: Get a Content Security identified by its ID.
      operationId: get-content-security
      parameters:
        - name: id
          in: path
          description: ID of Content Security
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Content Security
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/ContentSecurityDTO'
                  - $ref: '#/components/schemas/CrowdStrikeAIDRContentSecurityDTO'
                description: Individual Content Security
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - Content Security
      summary: Delete a Content Security
      description: Delete a Content Security identified by its ID.
      operationId: delete-content-security
      parameters:
        - name: id
          in: path
          description: ID of Content Security
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '204':
          description: Successfully deleted Content Security
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - Content Security
      summary: Patch a Content Security
      description: Patch a Content Security identified by its ID.
      operationId: patch-content-security
      parameters:
        - name: id
          in: path
          description: ID of Content Security
          required: true
          schema:
            type: string
            format: uuid
      requestBody:
        description: ContentSecurityPatchDTO
        content:
          application/json:
            schema:
              description: Patch request for an individual Content Security
              $ref: '#/components/schemas/ContentSecurityPatchDTO'
      responses:
        '200':
          description: Patched Content Security
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/ContentSecurityDTO'
                  - $ref: '#/components/schemas/CrowdStrikeAIDRContentSecurityDTO'
                description: Individual Content Security
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/content-security:
    get:
      tags:
        - Content Security
      summary: Get a page of Content Security
      description: Get a page of Content Security.
      operationId: get-content-security-list
      parameters:
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: group-by
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Content Security
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ContentSecurityDTOListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - Content Security
      summary: Create a Content Security
      description: Create a Content Security.
      operationId: post-content-security
      requestBody:
        description: ContentSecurityDTO
        content:
          application/json:
            schema:
              oneOf:
                - $ref: '#/components/schemas/ContentSecurityDTO'
                - $ref: '#/components/schemas/CrowdStrikeAIDRContentSecurityDTO'
              description: Individual Content Security
      responses:
        '201':
          description: Created Content Security
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/ContentSecurityDTO'
                  - $ref: '#/components/schemas/CrowdStrikeAIDRContentSecurityDTO'
                description: Individual Content Security
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Content Security
      summary: Update a Content Security
      description: Update a Content Security.
      operationId: put-content-security
      requestBody:
        description: ContentSecurityDTO
        content:
          application/json:
            schema:
              oneOf:
                - $ref: '#/components/schemas/ContentSecurityDTO'
                - $ref: '#/components/schemas/CrowdStrikeAIDRContentSecurityDTO'
              description: Individual Content Security
      responses:
        '200':
          description: Updated Content Security
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/ContentSecurityDTO'
                  - $ref: '#/components/schemas/CrowdStrikeAIDRContentSecurityDTO'
                description: Individual Content Security
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/credential-providers/{id}':
    get:
      tags:
        - Credential Provider (Deprecated)
      summary: Get a Credential Provider
      description: Get a Credential Provider identified by its ID.
      operationId: get-credential-provider
      parameters:
        - name: id
          in: path
          description: ID of Credential Provider
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Credential Provider
          content:
            application/json:
              schema:
                description: Individual Credential Provider
                $ref: '#/components/schemas/CredentialProviderUIDTO'
        '204':
          description: Credential Provider Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - Credential Provider (Deprecated)
      summary: Delete a Credential Provider
      description: Delete a Credential Provider identified by its ID.
      operationId: delete-credential-provider
      parameters:
        - name: id
          in: path
          description: ID of Credential Provider
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '204':
          description: Deleted Credential Provider
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - Credential Provider (Deprecated)
      summary: Patch a Credential Provider
      description: Patch a Credential Provider.
      operationId: patch-credential-provider
      parameters:
        - name: id
          in: path
          description: ID of Credential Provider
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: CredentialProviderPatchDTO
        content:
          application/json:
            schema:
              description: Patch request for an individual Credential Provider
              $ref: '#/components/schemas/CredentialProviderPatchDTO'
      responses:
        '201':
          description: Patched Credential Provider
          content:
            application/json:
              schema:
                description: Individual Credential Provider
                $ref: '#/components/schemas/CredentialProviderUIDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/credential-providers/{id}/authorize':
    get:
      tags:
        - Credential Provider (Deprecated)
      summary: Get a Credential Provider Authorization URL
      description: Get a Credential Provider Authorization URL identified by the Credential Provider ID.
      operationId: get-credential-provider-authorization
      parameters:
        - name: id
          in: path
          description: ID of Credential Provider
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '302':
          description: Redirects to the Credential Provider Authorization URL
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/credential-providers:
    get:
      tags:
        - Credential Provider (Deprecated)
      summary: Get a page of Credential Providers
      description: Get a page of Credential Providers.
      operationId: get-credential-providers
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: group-by
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Credential Providers
          content:
            application/json:
              schema:
                description: Page of Credential Providers
                $ref: '#/components/schemas/CredentialProviderUIDTOCredentialProviderListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - Credential Provider (Deprecated)
      summary: Create a Credential Provider
      description: Create a Credential Provider.
      operationId: post-credential-provider
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: CredentialProviderDTO
        content:
          application/json:
            schema:
              description: Individual Credential Provider
              $ref: '#/components/schemas/CredentialProviderDTO'
      responses:
        '201':
          description: Created Credential Provider
          content:
            application/json:
              schema:
                description: Individual Credential Provider
                $ref: '#/components/schemas/CredentialProviderUIDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Credential Provider (Deprecated)
      summary: Update a Credential Provider
      description: Update a Credential Provider.
      operationId: put-credential-provider
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: CredentialProviderDTO
        content:
          application/json:
            schema:
              description: Individual Credential Provider
              $ref: '#/components/schemas/CredentialProviderDTO'
      responses:
        '201':
          description: Updated Credential Provider
          content:
            application/json:
              schema:
                description: Individual Credential Provider
                $ref: '#/components/schemas/CredentialProviderUIDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/credential-providers/{id}/verification':
    get:
      tags:
        - Credential Provider (Deprecated)
      summary: Verify the Credential Provider
      description: Verify the Credential Provider will successfully return a credential.
      operationId: get-credential-provider-verification
      parameters:
        - name: id
          in: path
          description: ID of Credential Provider
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Details on the verification of a Credential Provider
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/credential-integrations/{id}':
    get:
      tags:
        - Credential Provider Integration
      summary: Get a Credential Provider Integration
      description: Get a Credential Provider Integration identified by its ID.
      operationId: get-credential-provider-integration
      parameters:
        - name: id
          in: path
          description: ID of Credential Provider Integration
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Credential Provider Integration
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/CredentialProviderIntegrationDTO'
                  - $ref: '#/components/schemas/GitLabCredentialProviderIntegrationDTO'
                  - $ref: '#/components/schemas/AwsIamRoleCpiDTO'
                  - $ref: '#/components/schemas/AzureEntraFederationCredentialProviderIntegrationDTO'
                description: Individual Credential Provider Integration
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - Credential Provider Integration
      summary: Delete a Credential Provider Integration
      description: Delete a Credential Provider Integration identified by its ID.
      operationId: delete-credential-provider-integration
      parameters:
        - name: id
          in: path
          description: ID of Credential Provider Integration
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '204':
          description: Successfully deleted Credential Provider Integration
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '404':
          description: Not Found
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - Credential Provider Integration
      summary: Patch a Credential Provider Integration
      description: Patch a Credential Provider Integration identified by its ID.
      operationId: patch-credential-provider-integration
      parameters:
        - name: id
          in: path
          description: ID of Credential Provider Integration
          required: true
          schema:
            type: string
            format: uuid
      requestBody:
        description: CredentialProviderIntegrationPatchDTO
        content:
          application/json:
            schema:
              description: Patch Request for an individual Credential Provider Integration
              $ref: '#/components/schemas/CredentialProviderIntegrationPatchDTO'
      responses:
        '200':
          description: Patched Credential Provider Integration
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/CredentialProviderIntegrationDTO'
                  - $ref: '#/components/schemas/GitLabCredentialProviderIntegrationDTO'
                  - $ref: '#/components/schemas/AwsIamRoleCpiDTO'
                  - $ref: '#/components/schemas/AzureEntraFederationCredentialProviderIntegrationDTO'
                description: Individual Credential Provider Integration
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/credential-integrations:
    get:
      tags:
        - Credential Provider Integration
      summary: Get a page of Credential Provider Integrations
      description: Get a page of Credential Provider Integrations.
      operationId: get-credential-provider-integrations
      parameters:
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: group-by
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Credential Provider Integrations
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ListCredentialProviderIntegrationDTOListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - Credential Provider Integration
      summary: Create a Credential Provider Integration
      description: Create a Credential Provider Integration.
      operationId: post-credential-provider-integration
      requestBody:
        description: CredentialProviderIntegrationDTO
        content:
          application/json:
            schema:
              oneOf:
                - $ref: '#/components/schemas/CredentialProviderIntegrationDTO'
                - $ref: '#/components/schemas/GitLabCredentialProviderIntegrationDTO'
                - $ref: '#/components/schemas/AwsIamRoleCpiDTO'
                - $ref: '#/components/schemas/AzureEntraFederationCredentialProviderIntegrationDTO'
              description: Individual Credential Provider Integration
      responses:
        '201':
          description: Created Credential Provider Integration
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/CredentialProviderIntegrationDTO'
                  - $ref: '#/components/schemas/GitLabCredentialProviderIntegrationDTO'
                  - $ref: '#/components/schemas/AwsIamRoleCpiDTO'
                  - $ref: '#/components/schemas/AzureEntraFederationCredentialProviderIntegrationDTO'
                description: Individual Credential Provider Integration
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Credential Provider Integration
      summary: Update a Credential Provider Integration
      description: Update a Credential Provider Integration.
      operationId: put-credential-provider-integration
      requestBody:
        description: CredentialProviderIntegrationDTO
        content:
          application/json:
            schema:
              oneOf:
                - $ref: '#/components/schemas/CredentialProviderIntegrationDTO'
                - $ref: '#/components/schemas/GitLabCredentialProviderIntegrationDTO'
                - $ref: '#/components/schemas/AwsIamRoleCpiDTO'
                - $ref: '#/components/schemas/AzureEntraFederationCredentialProviderIntegrationDTO'
              description: Individual Credential Provider Integration
      responses:
        '200':
          description: Updated Credential Provider Integration
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/CredentialProviderIntegrationDTO'
                  - $ref: '#/components/schemas/GitLabCredentialProviderIntegrationDTO'
                  - $ref: '#/components/schemas/AwsIamRoleCpiDTO'
                  - $ref: '#/components/schemas/AzureEntraFederationCredentialProviderIntegrationDTO'
                description: Individual Credential Provider Integration
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '404':
          description: Not Found
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/credential-integrations/list/{type}':
    get:
      tags:
        - Credential Provider Integration
      summary: Get a list of Credential Provider Integrations by type
      description: Get a list of Credential Provider Integrations by type. The most common usage is to populate a dropdown or selection list in the UI.
      operationId: get-credential-provider-integration-list
      parameters:
        - name: type
          in: path
          description: Type of Credential Provider Integration
          required: true
          schema:
            $ref: '#/components/schemas/CredentialProviderIntegrationType'
      responses:
        '200':
          description: List of Credential Provider Integrations
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/GuidStringKeyValuePairDto'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v2/credential-providers:
    post:
      tags:
        - Credential Provider v2
      summary: Create a Credential Provider
      description: Create a Credential Provider.
      operationId: post-credential-provider2
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: CredentialProviderV2DTO
        content:
          application/json:
            schema:
              oneOf:
                - $ref: '#/components/schemas/CredentialProviderV2DTO'
                - $ref: '#/components/schemas/CPTypeAembitAccessTokenV2DTO'
                - $ref: '#/components/schemas/CPTypeApiKeyUIV2DTO'
                - $ref: '#/components/schemas/CPAwsStsV2DTO'
                - $ref: '#/components/schemas/CPTypeAzureEntraFederationV2DTO'
                - $ref: '#/components/schemas/CPTypeAzureKeyVaultValueDTO'
                - $ref: '#/components/schemas/CPTypeClaudeWifV2DTO'
                - $ref: '#/components/schemas/CPTypeGoogleWorkflowIDFederationV2DTO'
                - $ref: '#/components/schemas/CPGitLabManagedAccountDTO'
                - $ref: '#/components/schemas/CPTypeOAuth2AuthorizationCodeUIV2DTO'
                - $ref: '#/components/schemas/CPTypeOAuth2ClientCredentialsUIV2DTO'
                - $ref: '#/components/schemas/CPTypeOpenAiWifV2DTO'
                - $ref: '#/components/schemas/CPTypeJWTTokenV2DTO'
                - $ref: '#/components/schemas/CPTypeUsernamePasswordUIV2DTO'
                - $ref: '#/components/schemas/CPTypeVaultClientTokenV2DTO'
      responses:
        '201':
          description: Created Credential Provider
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/CredentialProviderV2DTO'
                  - $ref: '#/components/schemas/CPTypeAembitAccessTokenV2DTO'
                  - $ref: '#/components/schemas/CPTypeApiKeyUIV2DTO'
                  - $ref: '#/components/schemas/CPAwsStsV2DTO'
                  - $ref: '#/components/schemas/CPTypeAzureEntraFederationV2DTO'
                  - $ref: '#/components/schemas/CPTypeAzureKeyVaultValueDTO'
                  - $ref: '#/components/schemas/CPTypeClaudeWifV2DTO'
                  - $ref: '#/components/schemas/CPTypeGoogleWorkflowIDFederationV2DTO'
                  - $ref: '#/components/schemas/CPGitLabManagedAccountDTO'
                  - $ref: '#/components/schemas/CPTypeOAuth2AuthorizationCodeUIV2DTO'
                  - $ref: '#/components/schemas/CPTypeOAuth2ClientCredentialsUIV2DTO'
                  - $ref: '#/components/schemas/CPTypeOpenAiWifV2DTO'
                  - $ref: '#/components/schemas/CPTypeJWTTokenV2DTO'
                  - $ref: '#/components/schemas/CPTypeUsernamePasswordUIV2DTO'
                  - $ref: '#/components/schemas/CPTypeVaultClientTokenV2DTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Credential Provider v2
      summary: Update a Credential Provider
      description: Update a Credential Provider.
      operationId: put-credential-provider2
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: CredentialProviderV2DTO
        content:
          application/json:
            schema:
              oneOf:
                - $ref: '#/components/schemas/CredentialProviderV2DTO'
                - $ref: '#/components/schemas/CPTypeAembitAccessTokenV2DTO'
                - $ref: '#/components/schemas/CPTypeApiKeyUIV2DTO'
                - $ref: '#/components/schemas/CPAwsStsV2DTO'
                - $ref: '#/components/schemas/CPTypeAzureEntraFederationV2DTO'
                - $ref: '#/components/schemas/CPTypeAzureKeyVaultValueDTO'
                - $ref: '#/components/schemas/CPTypeClaudeWifV2DTO'
                - $ref: '#/components/schemas/CPTypeGoogleWorkflowIDFederationV2DTO'
                - $ref: '#/components/schemas/CPGitLabManagedAccountDTO'
                - $ref: '#/components/schemas/CPTypeOAuth2AuthorizationCodeUIV2DTO'
                - $ref: '#/components/schemas/CPTypeOAuth2ClientCredentialsUIV2DTO'
                - $ref: '#/components/schemas/CPTypeOpenAiWifV2DTO'
                - $ref: '#/components/schemas/CPTypeJWTTokenV2DTO'
                - $ref: '#/components/schemas/CPTypeUsernamePasswordUIV2DTO'
                - $ref: '#/components/schemas/CPTypeVaultClientTokenV2DTO'
      responses:
        '200':
          description: Updated Credential Provider
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/CredentialProviderV2DTO'
                  - $ref: '#/components/schemas/CPTypeAembitAccessTokenV2DTO'
                  - $ref: '#/components/schemas/CPTypeApiKeyUIV2DTO'
                  - $ref: '#/components/schemas/CPAwsStsV2DTO'
                  - $ref: '#/components/schemas/CPTypeAzureEntraFederationV2DTO'
                  - $ref: '#/components/schemas/CPTypeAzureKeyVaultValueDTO'
                  - $ref: '#/components/schemas/CPTypeClaudeWifV2DTO'
                  - $ref: '#/components/schemas/CPTypeGoogleWorkflowIDFederationV2DTO'
                  - $ref: '#/components/schemas/CPGitLabManagedAccountDTO'
                  - $ref: '#/components/schemas/CPTypeOAuth2AuthorizationCodeUIV2DTO'
                  - $ref: '#/components/schemas/CPTypeOAuth2ClientCredentialsUIV2DTO'
                  - $ref: '#/components/schemas/CPTypeOpenAiWifV2DTO'
                  - $ref: '#/components/schemas/CPTypeJWTTokenV2DTO'
                  - $ref: '#/components/schemas/CPTypeUsernamePasswordUIV2DTO'
                  - $ref: '#/components/schemas/CPTypeVaultClientTokenV2DTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    get:
      tags:
        - Credential Provider v2
      summary: Get a page of Credential Providers
      description: Get a page of Credential Providers.
      operationId: get-credential-providers-v2
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: group-by
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Credential Providers
          content:
            application/json:
              schema:
                description: Page of Credential Providers
                $ref: '#/components/schemas/CredentialProviderV2DTOCredentialProviderListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v2/credential-providers/{id}':
    get:
      tags:
        - Credential Provider v2
      summary: Get a Credential Provider
      description: Get a Credential Provider identified by its ID.
      operationId: get-credential-provider2
      parameters:
        - name: id
          in: path
          description: ID of Credential Provider
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Credential Provider
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/CredentialProviderV2DTO'
                  - $ref: '#/components/schemas/CPTypeAembitAccessTokenV2DTO'
                  - $ref: '#/components/schemas/CPTypeApiKeyUIV2DTO'
                  - $ref: '#/components/schemas/CPAwsStsV2DTO'
                  - $ref: '#/components/schemas/CPTypeAzureEntraFederationV2DTO'
                  - $ref: '#/components/schemas/CPTypeAzureKeyVaultValueDTO'
                  - $ref: '#/components/schemas/CPTypeClaudeWifV2DTO'
                  - $ref: '#/components/schemas/CPTypeGoogleWorkflowIDFederationV2DTO'
                  - $ref: '#/components/schemas/CPGitLabManagedAccountDTO'
                  - $ref: '#/components/schemas/CPTypeOAuth2AuthorizationCodeUIV2DTO'
                  - $ref: '#/components/schemas/CPTypeOAuth2ClientCredentialsUIV2DTO'
                  - $ref: '#/components/schemas/CPTypeOpenAiWifV2DTO'
                  - $ref: '#/components/schemas/CPTypeJWTTokenV2DTO'
                  - $ref: '#/components/schemas/CPTypeUsernamePasswordUIV2DTO'
                  - $ref: '#/components/schemas/CPTypeVaultClientTokenV2DTO'
        '204':
          description: Credential Provider Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - Credential Provider v2
      summary: Delete a Credential Provider
      description: Delete a Credential Provider identified by its ID.
      operationId: delete-credential-provider2
      parameters:
        - name: id
          in: path
          description: ID of Credential Provider
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '204':
          description: Deleted Credential Provider
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '404':
          description: Not Found
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - Credential Provider v2
      summary: Patch a Credential Provider
      description: Patch a Credential Provider.
      operationId: patch-credential-provider-v2
      parameters:
        - name: id
          in: path
          description: ID of Credential Provider
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: CredentialProviderPatchDTO
        content:
          application/json:
            schema:
              description: Patch request for an individual Credential Provider
              $ref: '#/components/schemas/CredentialProviderPatchDTO'
      responses:
        '200':
          description: Patched Credential Provider
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/CredentialProviderV2DTO'
                  - $ref: '#/components/schemas/CPTypeAembitAccessTokenV2DTO'
                  - $ref: '#/components/schemas/CPTypeApiKeyUIV2DTO'
                  - $ref: '#/components/schemas/CPAwsStsV2DTO'
                  - $ref: '#/components/schemas/CPTypeAzureEntraFederationV2DTO'
                  - $ref: '#/components/schemas/CPTypeAzureKeyVaultValueDTO'
                  - $ref: '#/components/schemas/CPTypeClaudeWifV2DTO'
                  - $ref: '#/components/schemas/CPTypeGoogleWorkflowIDFederationV2DTO'
                  - $ref: '#/components/schemas/CPGitLabManagedAccountDTO'
                  - $ref: '#/components/schemas/CPTypeOAuth2AuthorizationCodeUIV2DTO'
                  - $ref: '#/components/schemas/CPTypeOAuth2ClientCredentialsUIV2DTO'
                  - $ref: '#/components/schemas/CPTypeOpenAiWifV2DTO'
                  - $ref: '#/components/schemas/CPTypeJWTTokenV2DTO'
                  - $ref: '#/components/schemas/CPTypeUsernamePasswordUIV2DTO'
                  - $ref: '#/components/schemas/CPTypeVaultClientTokenV2DTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v2/credential-providers/{id}/verification':
    get:
      tags:
        - Credential Provider v2
      summary: Verify the Credential Provider
      description: Verify the Credential Provider will successfully return a credential.
      operationId: get-credential-provider-verification-v2
      parameters:
        - name: id
          in: path
          description: ID of Credential Provider
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Details on the verification of a Credential Provider
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v2/credential-providers/{id}/authorize':
    get:
      tags:
        - Credential Provider v2
      summary: Get a Credential Provider Authorization URL
      description: Get a Credential Provider Authorization URL identified by the Credential Provider ID.
      operationId: get-credential-provider-authorization-v2
      parameters:
        - name: id
          in: path
          description: ID of Credential Provider
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '302':
          description: Redirects to the Credential Provider Authorization URL
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/discovery-integrations:
    get:
      tags:
        - DiscoveryIntegration
      summary: Get a page of Integrations
      description: Get a page of Integrations.
      operationId: get-discovery-integrations
      parameters:
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Integrations
          content:
            application/json:
              schema:
                description: Page of Integrations
                $ref: '#/components/schemas/DiscoveryIntegrationListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - DiscoveryIntegration
      summary: Create an Integration
      description: Create an Integration.
      operationId: post-discovery-integration
      requestBody:
        description: DiscoveryIntegrationDTO
        content:
          application/json:
            schema:
              description: Integration details for 3rd party data used by Discovery
              $ref: '#/components/schemas/DiscoveryIntegrationDTO'
      responses:
        '201':
          description: Created Integration
          content:
            application/json:
              schema:
                description: Integration details for 3rd party data used by Discovery
                $ref: '#/components/schemas/DiscoveryIntegrationDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - DiscoveryIntegration
      summary: Update an Integration
      description: Update an Integration.
      operationId: put-discovery-integration
      requestBody:
        description: DiscoveryIntegrationDTO
        content:
          application/json:
            schema:
              description: Integration details for 3rd party data used by Discovery
              $ref: '#/components/schemas/DiscoveryIntegrationDTO'
      responses:
        '200':
          description: Updated Integration
          content:
            application/json:
              schema:
                description: Integration details for 3rd party data used by Discovery
                $ref: '#/components/schemas/DiscoveryIntegrationDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/discovery-integrations/{id}':
    get:
      tags:
        - DiscoveryIntegration
      summary: Get an Integration
      description: Get an Integration.
      operationId: get-discovery-integration
      parameters:
        - name: id
          in: path
          description: ID of Integration
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Integration
          content:
            application/json:
              schema:
                description: Integration details for 3rd party data used by Discovery
                $ref: '#/components/schemas/DiscoveryIntegrationDTO'
        '204':
          description: Integration Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - DiscoveryIntegration
      summary: Delete an Integration
      description: Delete an Integration as identified by its ID.
      operationId: delete-discovery-integration
      parameters:
        - name: id
          in: path
          description: ID of Integration
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Successfully deleted Integration
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - DiscoveryIntegration
      summary: Patch an Integration
      description: Patch an Integration as identified by its ID.
      operationId: patch-discovery-integration
      parameters:
        - name: id
          in: path
          description: ID of Integration
          required: true
          schema:
            type: string
            format: uuid
      requestBody:
        description: DiscoveryIntegrationPatchDTO
        content:
          application/json:
            schema:
              description: Patch request for an individual Integration
              $ref: '#/components/schemas/DiscoveryIntegrationPatchDTO'
      responses:
        '200':
          description: Patched Integration
          content:
            application/json:
              schema:
                description: Integration details for 3rd party data used by Discovery
                $ref: '#/components/schemas/DiscoveryIntegrationDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/alpha/server-workload-drafts/{id}':
    get:
      tags:
        - DiscoveryServerWorkloadDraft
      parameters:
        - name: id
          in: path
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: OK
  /api/v1/workload-events:
    get:
      tags:
        - Workload Event
      summary: Get a page of Workload Events
      description: Get a page of Workload Events.
      operationId: get-workload-events
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: search
          in: query
          schema:
            type: string
            default: ''
        - name: span-last-minutes
          in: query
          schema:
            type: integer
            format: int32
            default: 0
        - name: span-last-hours
          in: query
          schema:
            type: integer
            format: int32
            default: 24
        - name: start-date
          in: query
          schema:
            type: string
            format: date-time
        - name: end-date
          in: query
          schema:
            type: string
            format: date-time
        - name: application-protocol
          in: query
          schema:
            type: string
            default: ''
        - name: severity
          in: query
          schema:
            type: string
            default: ''
        - name: source-workload
          in: query
          schema:
            type: array
            items:
              type: string
              format: uuid
        - name: target-workload
          in: query
          schema:
            type: array
            items:
              type: string
              format: uuid
        - name: user-id
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Workload Events
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EventListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/workload-events/{id}':
    get:
      tags:
        - Workload Event
      summary: Get a Workload Event
      description: Get a Workload Event.
      operationId: get-workload-event
      parameters:
        - name: id
          in: path
          description: ID of Workload Event
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Workload Event
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/EventDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/health:
    get:
      tags:
        - Health
      summary: Aembit Cloud API Health
      description: Get the health of the Aembit Cloud API.
      operationId: get-health
      responses:
        '200':
          description: API Health
          content:
            application/json:
              schema:
                description: Aembit Health Status
                $ref: '#/components/schemas/HealthDTO'
  /api/v1/integrations:
    get:
      tags:
        - Integration
      summary: Get a page of Integrations
      description: Get a page of Integrations.
      operationId: get-integrations
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Integrations
          content:
            application/json:
              schema:
                description: Page of Integrations
                $ref: '#/components/schemas/IntegrationDTOIntegrationListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - Integration
      summary: Create an Integration
      description: Create an Integration.
      operationId: post-integration
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: IntegrationDTO
        content:
          application/json:
            schema:
              description: Integration details for 3rd party data used by Access Conditions
              $ref: '#/components/schemas/IntegrationDTO'
      responses:
        '201':
          description: Created Integration
          content:
            application/json:
              schema:
                description: Integration details for 3rd party data used by Access Conditions
                $ref: '#/components/schemas/IntegrationDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Integration
      summary: Update an Integration
      description: Update an Integration.
      operationId: put-integration
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: IntegrationDTO
        content:
          application/json:
            schema:
              description: Integration details for 3rd party data used by Access Conditions
              $ref: '#/components/schemas/IntegrationDTO'
      responses:
        '200':
          description: Updated Integration
          content:
            application/json:
              schema:
                description: Integration details for 3rd party data used by Access Conditions
                $ref: '#/components/schemas/IntegrationDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/integrations/{id}':
    get:
      tags:
        - Integration
      summary: Get an Integration
      description: Get an Integration.
      operationId: get-integration
      parameters:
        - name: id
          in: path
          description: ID of Integration
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Integration
          content:
            application/json:
              schema:
                description: Integration details for 3rd party data used by Access Conditions
                $ref: '#/components/schemas/IntegrationDTO'
        '204':
          description: Integration Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - Integration
      summary: Delete an Integration
      description: Delete an Integration as identified by its ID.
      operationId: delete-integration
      parameters:
        - name: id
          in: path
          description: ID of Integration
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Successfully deleted Integration
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - Integration
      summary: Patch an Integration
      description: Patch an Integration as identified by its ID.
      operationId: patch-integration
      parameters:
        - name: id
          in: path
          description: ID of Integration
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: IntegrationPatchDTO
        content:
          application/json:
            schema:
              description: Patch request for an individual Integration
              $ref: '#/components/schemas/IntegrationPatchDTO'
      responses:
        '200':
          description: Patched Integration
          content:
            application/json:
              schema:
                description: Integration details for 3rd party data used by Access Conditions
                $ref: '#/components/schemas/IntegrationDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v2/integrations:
    get:
      tags:
        - Integration v2
      summary: Get a page of Integrations
      description: Get a page of Integrations.
      operationId: get-integrations2
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Integrations
          content:
            application/json:
              schema:
                description: Page of Integrations
                $ref: '#/components/schemas/IntegrationV2DTOIntegrationListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - Integration v2
      summary: Create an Integration
      description: Create an Integration.
      operationId: post-integration2
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: IntegrationV2DTO
        content:
          application/json:
            schema:
              oneOf:
                - $ref: '#/components/schemas/IntegrationV2DTO'
                - $ref: '#/components/schemas/CrowdStrikeIntegrationDTO'
                - $ref: '#/components/schemas/WizIntegrationDTO'
                - $ref: '#/components/schemas/GeoIPIntegrationDTO'
                - $ref: '#/components/schemas/TimeIntegrationDTO'
              description: Integration details for 3rd party data used by Access Conditions
      responses:
        '201':
          description: Created Integration
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/IntegrationV2DTO'
                  - $ref: '#/components/schemas/CrowdStrikeIntegrationDTO'
                  - $ref: '#/components/schemas/WizIntegrationDTO'
                  - $ref: '#/components/schemas/GeoIPIntegrationDTO'
                  - $ref: '#/components/schemas/TimeIntegrationDTO'
                description: Integration details for 3rd party data used by Access Conditions
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Integration v2
      summary: Update an Integration
      description: Update an Integration.
      operationId: put-integration2
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: IntegrationV2DTO
        content:
          application/json:
            schema:
              oneOf:
                - $ref: '#/components/schemas/IntegrationV2DTO'
                - $ref: '#/components/schemas/CrowdStrikeIntegrationDTO'
                - $ref: '#/components/schemas/WizIntegrationDTO'
                - $ref: '#/components/schemas/GeoIPIntegrationDTO'
                - $ref: '#/components/schemas/TimeIntegrationDTO'
              description: Integration details for 3rd party data used by Access Conditions
      responses:
        '200':
          description: Updated Integration
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/IntegrationV2DTO'
                  - $ref: '#/components/schemas/CrowdStrikeIntegrationDTO'
                  - $ref: '#/components/schemas/WizIntegrationDTO'
                  - $ref: '#/components/schemas/GeoIPIntegrationDTO'
                  - $ref: '#/components/schemas/TimeIntegrationDTO'
                description: Integration details for 3rd party data used by Access Conditions
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v2/integrations/{id}':
    get:
      tags:
        - Integration v2
      summary: Get an Integration
      description: Get an Integration.
      operationId: get-integration2
      parameters:
        - name: id
          in: path
          description: ID of Integration
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Integration
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/IntegrationV2DTO'
                  - $ref: '#/components/schemas/CrowdStrikeIntegrationDTO'
                  - $ref: '#/components/schemas/WizIntegrationDTO'
                  - $ref: '#/components/schemas/GeoIPIntegrationDTO'
                  - $ref: '#/components/schemas/TimeIntegrationDTO'
                description: Integration details for 3rd party data used by Access Conditions
        '204':
          description: Integration Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - Integration v2
      summary: Delete an Integration
      description: Delete an Integration as identified by its ID.
      operationId: delete-integration2
      parameters:
        - name: id
          in: path
          description: ID of Integration
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Successfully deleted Integration
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - Integration v2
      summary: Patch an Integration
      description: Patch an Integration as identified by its ID.
      operationId: patch-integration2
      parameters:
        - name: id
          in: path
          description: ID of Integration
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: IntegrationPatchDTO
        content:
          application/json:
            schema:
              description: Patch request for an individual Integration
              $ref: '#/components/schemas/IntegrationPatchDTO'
      responses:
        '200':
          description: Patched Integration
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/IntegrationV2DTO'
                  - $ref: '#/components/schemas/CrowdStrikeIntegrationDTO'
                  - $ref: '#/components/schemas/WizIntegrationDTO'
                  - $ref: '#/components/schemas/GeoIPIntegrationDTO'
                  - $ref: '#/components/schemas/TimeIntegrationDTO'
                description: Integration details for 3rd party data used by Access Conditions
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/log-streams:
    get:
      tags:
        - Log Stream
      summary: Get a page of Log Streams
      description: Get a page of Log Streams.
      operationId: get-log-streams
      parameters:
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Log Streams
          content:
            application/json:
              schema:
                description: Page of Log Streams
                $ref: '#/components/schemas/LogStreamListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - Log Stream
      summary: Create a Log Stream
      description: Create a Log Stream.
      operationId: post-log-stream
      requestBody:
        description: LogStreamDTO
        content:
          application/json:
            schema:
              oneOf:
                - $ref: '#/components/schemas/LogStreamAWSS3DestinationDTO'
                - $ref: '#/components/schemas/LogStreamGCSBucketDestinationDTO'
                - $ref: '#/components/schemas/LogStreamCrowdstrikeDestinationDTO'
                - $ref: '#/components/schemas/LogStreamSplunkDestinationDTO'
              description: Individual Log Stream
      responses:
        '201':
          description: Created Log Stream
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/LogStreamAWSS3DestinationDTO'
                  - $ref: '#/components/schemas/LogStreamGCSBucketDestinationDTO'
                  - $ref: '#/components/schemas/LogStreamCrowdstrikeDestinationDTO'
                  - $ref: '#/components/schemas/LogStreamSplunkDestinationDTO'
                description: Individual Log Stream
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Log Stream
      summary: Update a Log Stream
      description: Update a Log Stream.
      operationId: put-log-stream
      requestBody:
        description: LogStreamDTO
        content:
          application/json:
            schema:
              oneOf:
                - $ref: '#/components/schemas/LogStreamAWSS3DestinationDTO'
                - $ref: '#/components/schemas/LogStreamGCSBucketDestinationDTO'
                - $ref: '#/components/schemas/LogStreamCrowdstrikeDestinationDTO'
                - $ref: '#/components/schemas/LogStreamSplunkDestinationDTO'
              description: Individual Log Stream
      responses:
        '200':
          description: Updated Log Stream
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/LogStreamAWSS3DestinationDTO'
                  - $ref: '#/components/schemas/LogStreamGCSBucketDestinationDTO'
                  - $ref: '#/components/schemas/LogStreamCrowdstrikeDestinationDTO'
                  - $ref: '#/components/schemas/LogStreamSplunkDestinationDTO'
                description: Individual Log Stream
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/log-streams/{id}':
    get:
      tags:
        - Log Stream
      summary: Get a Log Stream
      description: Get a Log Stream identified by its ID.
      operationId: get-log-stream
      parameters:
        - name: id
          in: path
          description: ID of Log Stream
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Log Stream
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/LogStreamAWSS3DestinationDTO'
                  - $ref: '#/components/schemas/LogStreamGCSBucketDestinationDTO'
                  - $ref: '#/components/schemas/LogStreamCrowdstrikeDestinationDTO'
                  - $ref: '#/components/schemas/LogStreamSplunkDestinationDTO'
                description: Individual Log Stream
        '204':
          description: Log Stream Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - Log Stream
      summary: Delete a Log Stream
      description: Delete a Log Stream identified by its ID.
      operationId: delete-log-stream
      parameters:
        - name: id
          in: path
          description: ID of Log Stream
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '204':
          description: Successfully deleted Log Stream
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - Log Stream
      summary: Patch a Log Stream
      description: Patch a Log Stream identified by its ID.
      operationId: patch-log-stream
      parameters:
        - name: id
          in: path
          description: ID of Log Stream
          required: true
          schema:
            type: string
            format: uuid
      requestBody:
        description: LogStreamPatchDTO
        content:
          application/json:
            schema:
              description: Patch Request for an individual of Log Stream
              $ref: '#/components/schemas/LogStreamPatchDTO'
      responses:
        '200':
          description: Patched Log Stream
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/LogStreamAWSS3DestinationDTO'
                  - $ref: '#/components/schemas/LogStreamGCSBucketDestinationDTO'
                  - $ref: '#/components/schemas/LogStreamCrowdstrikeDestinationDTO'
                  - $ref: '#/components/schemas/LogStreamSplunkDestinationDTO'
                description: Individual Log Stream
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/resource-sets/{id}':
    get:
      tags:
        - Resource Set
      summary: Get a Resource Set
      description: Get a Resource Set identified by its ID.
      operationId: get-resource-set
      parameters:
        - name: id
          in: path
          description: ID of Resource Set
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Resource Set
          content:
            application/json:
              schema:
                description: Individual Resource Set
                $ref: '#/components/schemas/ResourceSetDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - Resource Set
      summary: Patch a Resource Set
      description: Patch a Resource Set identified by its ID.
      operationId: patch-resource-set
      parameters:
        - name: id
          in: path
          description: ID of Resource Set
          required: true
          schema:
            type: string
            format: uuid
      requestBody:
        description: ResourceSetPatchDTO
        content:
          application/json:
            schema:
              description: Patch Request for an Individual Resource Set
              $ref: '#/components/schemas/ResourceSetPatchDTO'
      responses:
        '200':
          description: Patched Resource Set
          content:
            application/json:
              schema:
                description: Individual Resource Set
                $ref: '#/components/schemas/ResourceSetDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - Resource Set
      summary: Delete a Resource Set
      description: Delete a Resource Set identified by its ID.
      operationId: delete-resource-set-integration
      parameters:
        - name: id
          in: path
          description: ID of Resource Set
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '204':
          description: Successfully deleted Resource Set
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '404':
          description: Not Found
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/resource-sets:
    get:
      tags:
        - Resource Set
      summary: Get a page of Resource Sets
      description: Get a page of Resource Sets.
      operationId: get-resource-sets
      parameters:
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: group-by
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Resource Sets
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ResourceSetDTOListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - Resource Set
      summary: Create a Resource Set
      description: Create a Resource Set.
      operationId: post-resource-set
      requestBody:
        description: ResourceSetDTO
        content:
          application/json:
            schema:
              description: Individual Resource Set
              $ref: '#/components/schemas/ResourceSetDTO'
      responses:
        '201':
          description: Created Resource Set
          content:
            application/json:
              schema:
                description: Individual Resource Set
                $ref: '#/components/schemas/ResourceSetDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Resource Set
      summary: Update a Resource Set
      description: Update a Resource Set.
      operationId: put-resource-set
      requestBody:
        description: ResourceSetDTO
        content:
          application/json:
            schema:
              description: Individual Resource Set
              $ref: '#/components/schemas/ResourceSetDTO'
      responses:
        '200':
          description: Updated Resource Set
          content:
            application/json:
              schema:
                description: Individual Resource Set
                $ref: '#/components/schemas/ResourceSetDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/roles:
    get:
      tags:
        - Role
      summary: Get a page of Roles
      description: Get a page of Roles.
      operationId: get-roles
      parameters:
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: group-by
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Roles
          content:
            application/json:
              schema:
                description: Page of Roles
                $ref: '#/components/schemas/RoleListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - Role
      summary: Create a new Role
      description: Create a new Role.
      operationId: post-role
      requestBody:
        description: RoleDTO
        content:
          application/json:
            schema:
              description: Individual Role
              $ref: '#/components/schemas/RoleDTO'
      responses:
        '201':
          description: Created Role
          content:
            application/json:
              schema:
                description: Individual Role
                $ref: '#/components/schemas/RoleDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Role
      summary: Update a Role
      description: Update a Role.
      operationId: put-role
      requestBody:
        description: RoleDTO
        content:
          application/json:
            schema:
              description: Individual Role
              $ref: '#/components/schemas/RoleDTO'
      responses:
        '200':
          description: Updated Role
          content:
            application/json:
              schema:
                description: Individual Role
                $ref: '#/components/schemas/RoleDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/roles/{id}':
    get:
      tags:
        - Role
      summary: Get a Role
      description: Get a Role identified by its ID.
      operationId: get-role
      parameters:
        - name: id
          in: path
          description: ID of Role
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Role
          content:
            application/json:
              schema:
                description: Individual Role
                $ref: '#/components/schemas/RoleDTO'
        '204':
          description: Role Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - Role
      summary: Delete a Role
      description: Delete a Role identified by its ID.
      operationId: delete-role
      parameters:
        - name: id
          in: path
          description: ID of Role
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '204':
          description: Successfully deleted Role
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - Role
      summary: Patch a Role
      description: Patch a Role identified by its ID.
      operationId: patch-role
      parameters:
        - name: id
          in: path
          description: ID of Role
          required: true
          schema:
            type: string
            format: uuid
      requestBody:
        description: RolePatchDTO
        content:
          application/json:
            schema:
              description: Patch request for an individual Role
              $ref: '#/components/schemas/RolePatchDTO'
      responses:
        '200':
          description: Patch Role
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/routings/{id}':
    get:
      tags:
        - Routing
      summary: Get a Routing
      description: Get a Routing identified by its ID.
      operationId: get-routing
      parameters:
        - name: id
          in: path
          description: ID of Routing
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Routing
          content:
            application/json:
              schema:
                description: Individual Routing
                $ref: '#/components/schemas/RoutingDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '403':
          description: Forbidden
        '404':
          description: Not Found
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - Routing
      summary: Patch a Routing
      description: Patch a Routing identified by its ID.
      operationId: patch-routing
      parameters:
        - name: id
          in: path
          description: ID of Routing
          required: true
          schema:
            type: string
            format: uuid
      requestBody:
        description: RoutingPatchDTO
        content:
          application/json:
            schema:
              description: Patch request for an individual Routing
              $ref: '#/components/schemas/RoutingPatchDTO'
      responses:
        '200':
          description: Patched Routing
          content:
            application/json:
              schema:
                description: Individual Routing
                $ref: '#/components/schemas/RoutingDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/routings:
    get:
      tags:
        - Routing
      summary: Get a page of Routings
      description: Get a page of Routings.
      operationId: get-routings
      parameters:
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: group-by
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Routings
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RoutingDTOListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - Routing
      summary: Create a Routing
      description: Create a Routing.
      operationId: post-routing
      requestBody:
        description: RoutingDTO
        content:
          application/json:
            schema:
              description: Individual Routing
              $ref: '#/components/schemas/RoutingDTO'
      responses:
        '201':
          description: Created Routing
          content:
            application/json:
              schema:
                description: Individual Routing
                $ref: '#/components/schemas/RoutingDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '403':
          description: Forbidden
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Routing
      summary: Update a Routing
      description: Update a Routing.
      operationId: put-routing
      requestBody:
        description: RoutingDTO
        content:
          application/json:
            schema:
              description: Individual Routing
              $ref: '#/components/schemas/RoutingDTO'
      responses:
        '200':
          description: Updated Routing
          content:
            application/json:
              schema:
                description: Individual Routing
                $ref: '#/components/schemas/RoutingDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/signin-policies:
    get:
      tags:
        - SignOn Policy
      summary: Get a SignOn Policy
      description: Get a SignOn Policy by its name.
      operationId: get-signon-policy
      responses:
        '200':
          description: SignOn Policy
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/GetSignInPolicyDTO'
        '204':
          description: SignOn Policy Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/signin-policies/mfa:
    put:
      tags:
        - MFA SignOn Policy
      summary: Update a MFA SignOn Policy
      description: Update a MFA SignOn Policy.
      operationId: put-mfa-signon Policy
      requestBody:
        description: MFASignInPolicyDTO
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/MFASignInPolicyDTO'
      responses:
        '200':
          description: Updated MFA SignOn Policy
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/MFASignInPolicyDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '403':
          description: Forbidden
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/signin-policies/sso:
    put:
      tags:
        - SSO SignOn Policy
      summary: Update a SSO SignOn Policy
      description: Update a SSO SignOn Policy.
      operationId: put-SSO-signon Policy
      requestBody:
        description: SSOSignInPolicyDTO
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SSOSignInPolicyDTO'
      responses:
        '200':
          description: Updated SSO SignOn Policy
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SSOSignInPolicyDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/sso-idps/{id}/verification':
    get:
      tags:
        - SSO Identity Provider
      summary: Verify the SSO Identity Provider
      description: Verify the SSO Identity Provider has all necessary configuration data.
      operationId: get-identity-provider-verification
      parameters:
        - name: id
          in: path
          description: ID of SSO Identity Provider
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: SSO Identity Provider verification
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/sso-idps/{id}':
    get:
      tags:
        - SSO Identity Provider
      summary: Get a SSO Identity Provider
      description: Get a SSO Identity Provider identified by its ID.
      operationId: get-identity-provider
      parameters:
        - name: id
          in: path
          description: ID of SSO Identity Provider
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: SSO Identity Provider
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/SSOIdentityProviderDTO'
                  - $ref: '#/components/schemas/SamlIdentityProviderDTO'
                  - $ref: '#/components/schemas/OidcIdentityProviderDTO'
                description: Individual SSO Identity Provider
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - SSO Identity Provider
      summary: Delete a SSO Identity Provider
      description: Delete a SSO Identity Provider identified by its ID.
      operationId: delete-identity-provider
      parameters:
        - name: id
          in: path
          description: ID of SSO Identity Provider
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '204':
          description: Successfully deleted SSO Identity Provider
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - SSO Identity Provider
      summary: Patch a SSO Identity Provider
      description: Patch a SSO Identity Provider identified by its ID.
      operationId: patch-identity-provider
      parameters:
        - name: id
          in: path
          description: ID of SSO Identity Provider
          required: true
          schema:
            type: string
            format: uuid
      requestBody:
        description: SSOIdentityProviderPatchDTO
        content:
          application/json:
            schema:
              description: Patch request for an individual SSO Identity Provider
              $ref: '#/components/schemas/SSOIdentityProviderPatchDTO'
      responses:
        '200':
          description: Patched SSO Identity Provider
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/SSOIdentityProviderDTO'
                  - $ref: '#/components/schemas/SamlIdentityProviderDTO'
                  - $ref: '#/components/schemas/OidcIdentityProviderDTO'
                description: Individual SSO Identity Provider
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/sso-idps:
    get:
      tags:
        - SSO Identity Provider
      summary: Get a page of SSO Identity Providers
      description: Get a page of SSO Identity Providers.
      operationId: get-identity-providers
      parameters:
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: group-by
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of SSO Identity Providers
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SSOIdentityProviderDTOListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - SSO Identity Provider
      summary: Create a SSO Identity Provider
      description: Create a SSO Identity Provider.
      operationId: post-identity-provider
      requestBody:
        description: SSOIdentityProviderDTO
        content:
          application/json:
            schema:
              oneOf:
                - $ref: '#/components/schemas/SSOIdentityProviderDTO'
                - $ref: '#/components/schemas/SamlIdentityProviderDTO'
                - $ref: '#/components/schemas/OidcIdentityProviderDTO'
              description: Individual SSO Identity Provider
      responses:
        '201':
          description: Created SSO Identity Provider
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/SSOIdentityProviderDTO'
                  - $ref: '#/components/schemas/SamlIdentityProviderDTO'
                  - $ref: '#/components/schemas/OidcIdentityProviderDTO'
                description: Individual SSO Identity Provider
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - SSO Identity Provider
      summary: Update a SSO Identity Provider
      description: Update a SSO Identity Provider.
      operationId: put-identity-provider
      requestBody:
        description: SSOIdentityProviderDTO
        content:
          application/json:
            schema:
              oneOf:
                - $ref: '#/components/schemas/SSOIdentityProviderDTO'
                - $ref: '#/components/schemas/SamlIdentityProviderDTO'
                - $ref: '#/components/schemas/OidcIdentityProviderDTO'
              description: Individual SSO Identity Provider
      responses:
        '200':
          description: Updated SSO Identity Provider
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/SSOIdentityProviderDTO'
                  - $ref: '#/components/schemas/SamlIdentityProviderDTO'
                  - $ref: '#/components/schemas/OidcIdentityProviderDTO'
                description: Individual SSO Identity Provider
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/certificate-authorities/{id}':
    delete:
      tags:
        - Standalone Certificate Authority
      summary: Delete a Standalone Certificate Authority
      description: Delete a Standalone Certificate Authority identified by its ID.
      operationId: delete-standalone-certificate-authority
      parameters:
        - name: id
          in: path
          description: ID of Standalone Certificate Authority
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '204':
          description: Successfully deleted Standalone Certificate Authority
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    get:
      tags:
        - Standalone Certificate Authority
      summary: Get a Standalone Certificate Authority
      description: Get a Standalone Certificate Authority identified by its ID.
      operationId: get-standalone-certificate-authority
      parameters:
        - name: id
          in: path
          description: ID of Standalone Certificate Authority
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Standalone Certificate Authority
          content:
            application/json:
              schema:
                description: Individual Standalone Certificate Authority
                $ref: '#/components/schemas/StandaloneCertificateResponseDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - Standalone Certificate Authority
      summary: Patch a Standalone Certificate Authority
      description: Patch a Standalone Certificate Authority identified by its ID.
      operationId: patch-standalone-certificate-authority
      parameters:
        - name: id
          in: path
          description: ID of Standalone Certificate Authority
          required: true
          schema:
            type: string
            format: uuid
      requestBody:
        description: StandaloneCertificatePatchDTO
        content:
          application/json:
            schema:
              description: Patch Request for an Individual Standalone Certificate Authority
              $ref: '#/components/schemas/StandaloneCertificatePatchDTO'
      responses:
        '200':
          description: Patched Standalone Certificate Authority
          content:
            application/json:
              schema:
                description: Individual Standalone Certificate Authority
                $ref: '#/components/schemas/StandaloneCertificateResponseDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/certificate-authorities:
    get:
      tags:
        - Standalone Certificate Authority
      summary: Get a page of Standalone Certificate Authorities
      description: Get a page of Standalone Certificate Authorities.
      operationId: get-standalone-certificate-authorities
      parameters:
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: group-by
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Standalone Certificate Authorities
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/StandaloneCertificateResponseDTOListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - Standalone Certificate Authority
      summary: Create a Standalone Certificate Authority
      description: Create a Standalone Certificate Authority.
      operationId: post-standalone-certificate-authority
      requestBody:
        description: StandaloneCertificateDTO
        content:
          application/json:
            schema:
              description: Individual Standalone Certificate Authority
              $ref: '#/components/schemas/StandaloneCertificateRequestDTO'
      responses:
        '201':
          description: Created Standalone Certificate Authority
          content:
            application/json:
              schema:
                description: Individual Standalone Certificate Authority
                $ref: '#/components/schemas/StandaloneCertificateResponseDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Standalone Certificate Authority
      summary: Update a Standalone Certificate Authority
      description: Update a Standalone Certificate Authority.
      operationId: put-standalone-certificate-authority
      requestBody:
        description: StandaloneCertificateDTO
        content:
          application/json:
            schema:
              description: Individual Standalone Certificate Authority
              $ref: '#/components/schemas/StandaloneCertificateRequestDTO'
      responses:
        '200':
          description: Updated Standalone Certificate Authority
          content:
            application/json:
              schema:
                description: Individual Standalone Certificate Authority
                $ref: '#/components/schemas/StandaloneCertificateResponseDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/certificate-authorities/{id}/root-ca':
    get:
      tags:
        - Standalone TLS Decrypt
      summary: Download Standalone Root CA Certificate
      description: Download the Standalone Root CA Certificate. This CA Certificate can be used for TLS verification when utilizing the Aembit TLS Decrypt feature.
      operationId: standalone-root-ca
      parameters:
        - name: id
          in: path
          description: ID of Standalone Certificate Authority
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: OK
          content:
            application/x-pem-file:
              schema:
                type: string
                format: binary
  /api/v1/root-ca:
    get:
      tags:
        - TLS Decrypt
      summary: Download Tenant Root CA Certificate
      description: Download the Tenant Root CA Certificate. This CA Certificate can be used for TLS verification when utilizing the Aembit TLS Decrypt feature.
      operationId: root-ca
      responses:
        '200':
          description: OK
          content:
            application/x-pem-file:
              schema:
                type: string
                format: binary
  /api/v1/trust-providers:
    get:
      tags:
        - Trust Provider
      summary: Get a page of Trust Providers
      description: Get a page of Trust Providers.
      operationId: get-trust-providers
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: group-by
          in: query
          schema:
            type: string
            default: ''
        - name: active
          in: query
          schema:
            type: boolean
      responses:
        '200':
          description: Page of Trust Providers
          content:
            application/json:
              schema:
                description: Page of Trust Providers
                $ref: '#/components/schemas/TrustProviderListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - Trust Provider
      summary: Create a Trust Provider
      description: Create a Trust Provider.
      operationId: post-trust-provider
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: TrustProviderDTO
        content:
          application/json:
            schema:
              description: Individual Trust Provider
              $ref: '#/components/schemas/TrustProviderDTO'
      responses:
        '200':
          description: Created Trust Provider
          content:
            application/json:
              schema:
                description: Individual Trust Provider
                $ref: '#/components/schemas/TrustProviderDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Trust Provider
      summary: Update a Trust Provider
      description: Update a Trust Provider.
      operationId: put-trust-provider
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: TrustProviderDTO
        content:
          application/json:
            schema:
              description: Individual Trust Provider
              $ref: '#/components/schemas/TrustProviderDTO'
      responses:
        '200':
          description: Updated Trust Provider
          content:
            application/json:
              schema:
                description: Individual Trust Provider
                $ref: '#/components/schemas/TrustProviderDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/trust-providers/{id}':
    get:
      tags:
        - Trust Provider
      summary: Get a Trust Provider
      description: Get a Trust Provider identified by its ID.
      operationId: get-trust-provider
      parameters:
        - name: id
          in: path
          description: ID of Trust Provider
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Trust Provider
          content:
            application/json:
              schema:
                description: Individual Trust Provider
                $ref: '#/components/schemas/TrustProviderDTO'
        '204':
          description: Trust Provider Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - Trust Provider
      summary: Delete a Trust Provider
      description: Delete a Trust Provider identified by its ID.
      operationId: delete-trust-provider
      parameters:
        - name: id
          in: path
          description: ID of Trust Provider
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '204':
          description: Successfully deleted Trust Provider
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '404':
          description: Not Found
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    patch:
      tags:
        - Trust Provider
      summary: Patch a Trust Provider
      description: Patch a Trust Provider.
      operationId: patch-trust-provider
      parameters:
        - name: id
          in: path
          description: ID of Trust Provider
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: TrustProviderPatchDTO
        content:
          application/json:
            schema:
              description: Patch request for an individual Trust Provider
              $ref: '#/components/schemas/TrustProviderPatchDTO'
      responses:
        '200':
          description: Patched Trust Provider
          content:
            application/json:
              schema:
                description: Individual Trust Provider
                $ref: '#/components/schemas/TrustProviderDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/trust-providers/{tpId}/secrets':
    get:
      tags:
        - Trust Provider Secret
      summary: Get a page of Trust Provider Secrets
      description: Get a page of Trust Provider Secrets.
      operationId: get-trust-providers-secrets
      parameters:
        - name: tpId
          in: path
          description: ID of Trust Provider
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Trust Providers Secrets
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TrustProviderSecretDTOListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - Trust Provider Secret
      summary: Create a Trust Provider Secret
      description: Create a Trust Provider Secret.
      operationId: post-trust-provider-secret
      parameters:
        - name: tpId
          in: path
          description: ID of Trust Provider
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: TrustProviderDTO
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/TrustProviderSecretSlimDTO'
      responses:
        '200':
          description: Created Trust Provider Secret
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/TrustProviderSecretDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/trust-providers/{tpId}/secrets/{secretId}':
    get:
      tags:
        - Trust Provider Secret
      summary: Get a Trust Provider Secret
      description: Get a Trust Provider Secret identified by its ID.
      operationId: get-trust-provider-secret
      parameters:
        - name: tpId
          in: path
          description: ID of Trust Provider
          required: true
          schema:
            type: string
            format: uuid
        - name: secretId
          in: path
          description: ID of Trust Provider Secret
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Trust Provider
          content:
            application/json:
              schema:
                description: Individual Trust Provider
                $ref: '#/components/schemas/TrustProviderDTO'
        '204':
          description: Trust Provider Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - Trust Provider Secret
      summary: Delete a Trust Provider Secret
      description: Delete a Trust Provider Secret identified by its ID.
      operationId: delete-trust-provider-secret
      parameters:
        - name: tpId
          in: path
          description: ID of Trust Provider
          required: true
          schema:
            type: string
            format: uuid
        - name: secretId
          in: path
          description: ID of Trust Provider Secret
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '204':
          description: Successfully deleted Trust Provider Secret
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '404':
          description: Not Found
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/users:
    get:
      tags:
        - User
      summary: Get a page of Users
      description: Get a page of Users.
      operationId: get-users
      parameters:
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: group-by
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Users
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UserListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    post:
      tags:
        - User
      summary: Create a User
      description: Create a User.
      operationId: post-user
      requestBody:
        description: UserDTO
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UserDTO'
      responses:
        '201':
          description: Created User
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UserDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/users/{id}':
    patch:
      tags:
        - User
      summary: Patch a User
      description: Patch a User identified by its ID.
      operationId: patch-user
      parameters:
        - name: id
          in: path
          description: ID of User
          required: true
          schema:
            type: string
            format: uuid
      requestBody:
        description: UserPatchDTO
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UserPatchDTO'
      responses:
        '200':
          description: Patched User
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UserDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    get:
      tags:
        - User
      summary: Get a User
      description: Get a User identified by its ID.
      operationId: get-user
      parameters:
        - name: id
          in: path
          description: ID of User
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '201':
          description: User
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UserDTO'
        '204':
          description: User Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - User
      summary: Update a User
      description: Update a User.
      operationId: put-user
      parameters:
        - name: id
          in: path
          required: true
          schema:
            type: string
      requestBody:
        description: UserDTO
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/UserDTO'
      responses:
        '200':
          description: User
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/UserDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - User
      summary: Delete a User
      description: Delete a User identified by its ID.
      operationId: delete-user
      parameters:
        - name: id
          in: path
          description: ID of User
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '204':
          description: Successfully deleted User
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/users/{id}/unlock':
    post:
      tags:
        - User
      summary: Unlock a User
      description: Unlock a User identified by its ID.
      operationId: post-user-unlock
      parameters:
        - name: id
          in: path
          description: ID of User
          required: true
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Successfully unlocked User
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/server-workloads:
    post:
      tags:
        - Server Workload
      summary: Create a Server Workload
      description: Create a Server Workload.
      operationId: post-server-workload
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: ServerWorkloadExternalDTO
        content:
          application/json:
            schema:
              description: Individual Server Workload
              $ref: '#/components/schemas/ServerWorkloadExternalDTO'
      responses:
        '204':
          description: Created Server Workload
          content:
            application/json:
              schema:
                description: Individual Server Workload
                $ref: '#/components/schemas/ServerWorkloadExternalDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Server Workload
      summary: Update a Server Workload
      description: Update a Server Workload.
      operationId: put-server-workload
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: ServerWorkloadExternalDTO
        content:
          application/json:
            schema:
              description: Individual Server Workload
              $ref: '#/components/schemas/ServerWorkloadExternalDTO'
      responses:
        '200':
          description: Updated Server Workload
          content:
            application/json:
              schema:
                description: Individual Server Workload
                $ref: '#/components/schemas/ServerWorkloadExternalDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    get:
      tags:
        - Server Workload
      summary: Get a page of Server Workloads
      description: Get a page of Server Workloads.
      operationId: get-server-workloads
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: group-by
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Server Workloads
          content:
            application/json:
              schema:
                description: Page of Server Workloads
                $ref: '#/components/schemas/ServerWorkloadListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/client-workloads:
    post:
      tags:
        - Client Workload
      summary: Create a Client Workload
      description: Create a Client Workload.
      operationId: post-client-workload
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: ClientWorkloadExternalDTO
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ClientWorkloadExternalDTO'
      responses:
        '204':
          description: Created Client Workload
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ClientWorkloadExternalDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    put:
      tags:
        - Client Workload
      summary: Update a Client Workload
      description: Update a Client Workload.
      operationId: put-client-workload
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: ClientWorkloadExternalDTO
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ClientWorkloadExternalDTO'
      responses:
        '200':
          description: Updated Client Workload
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ClientWorkloadExternalDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    get:
      tags:
        - Client Workload
      summary: Get a page of Client Workloads
      description: Get a page of Client Workloads.
      operationId: get-client-workloads
      parameters:
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
        - name: page
          in: query
          schema:
            type: integer
            format: int32
            default: 1
        - name: per-page
          in: query
          schema:
            type: integer
            format: int32
            default: 100
        - name: filter
          in: query
          schema:
            type: string
            default: ''
        - name: order
          in: query
          schema:
            type: string
            default: ''
        - name: group-by
          in: query
          schema:
            type: string
            default: ''
      responses:
        '200':
          description: Page of Client Workloads
          content:
            application/json:
              schema:
                description: Page of Client Workloads
                $ref: '#/components/schemas/ClientWorkloadListDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/server-workloads/{id}':
    patch:
      tags:
        - Server Workload
      summary: Patch a Server Workload
      description: Patch a Server Workload.
      operationId: patch-server-workload
      parameters:
        - name: id
          in: path
          description: ID of Server Workload
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: EntityPatchDTO
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/EntityPatchDTO'
      responses:
        '200':
          description: Patched Server Workload
          content:
            application/json:
              schema:
                description: Individual Server Workload
                $ref: '#/components/schemas/ServerWorkloadExternalDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    get:
      tags:
        - Server Workload
      summary: Get a Server Workload
      description: Get a Server Workload identified by its ID.
      operationId: get-server-workload
      parameters:
        - name: id
          in: path
          description: ID of Server Workload
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Server Workload
          content:
            application/json:
              schema:
                description: Individual Server Workload
                $ref: '#/components/schemas/ServerWorkloadExternalDTO'
        '204':
          description: Server Workload Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - Server Workload
      summary: Delete a Server Workload
      description: Delete a Server Workload identified by its ID.
      operationId: delete-server-workload
      parameters:
        - name: id
          in: path
          description: ID of Server Workload
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '204':
          description: Successfully deleted Server Workload
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  '/api/v1/client-workloads/{id}':
    patch:
      tags:
        - Client Workload
      summary: Patch a Client Workload
      description: Patch a Client Workload.
      operationId: patch-client-workload
      parameters:
        - name: id
          in: path
          description: ID of Client Workload
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      requestBody:
        description: ClientWorkloadPatchDTO
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ClientWorkloadPatchDTO'
      responses:
        '200':
          description: Patched Client Workload
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ClientWorkloadExternalDTO'
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    get:
      tags:
        - Client Workload
      summary: Get a Client Workload
      description: Get a Client Workload identified by its ID.
      operationId: get-client-workload
      parameters:
        - name: id
          in: path
          description: ID of Client Workload
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '200':
          description: Client Workload
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ClientWorkloadExternalDTO'
        '204':
          description: Client Workload Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
    delete:
      tags:
        - Client Workload
      summary: Delete a Client Workload
      description: Delete a Client Workload identified by its ID.
      operationId: delete-client-workload
      parameters:
        - name: id
          in: path
          description: ID of Client Workload
          required: true
          schema:
            type: string
            format: uuid
        - name: X-Aembit-ResourceSet
          in: header
          schema:
            type: string
            format: uuid
      responses:
        '204':
          description: Successfully deleted Client Workload
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
        '404':
          description: Not Found
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                description: DTO for a Generic API Response
                $ref: '#/components/schemas/GenericResponseDTO'
  /api/v1/client-workloads/identifiers:
    get:
      tags:
        - Client Workload
      summary: Get Client Identifier List
      description: Get list of client identifier objects
      operationId: get-client-identifiers
      responses:
        '200':
          description: Client Identifiers
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/ClientIdentifierExternalDTO'
        '204':
          description: Client Identifiers Not Found
        '400':
          description: Bad Request
        '401':
          description: Not Authenticated
components:
  schemas:
    AccessConditionDTO:
      required:
        - conditions
        - isActive
        - name
        - resourceSet
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        integrationID:
          type: string
          description: ID of the Integration Entity used by this Access Condition
          format: uuid
        integration:
          description: Integration Entity used by this Access Condition
          $ref: '#/components/schemas/IntegrationDTO'
        conditions:
          type: object
          additionalProperties:
            $ref: '#/components/schemas/JsonNode'
          description: Rules which are enforced by the Access Condition
        accessPolicyCount:
          type: integer
          description: Access Policies associated with this Access Condition
          format: int32
        integrationType:
          type:
            - 'null'
            - string
      additionalProperties: false
      description: DTO of an individual Access Condition for enforcement during Access Policy evaluation
    AccessConditionDTOAccessConditionListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Page of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP Status Code of the response
          format: int32
        recordsTotal:
          type: integer
          description: Total number of Access Conditions
          format: int32
        accessConditions:
          type:
            - 'null'
            - array
          items:
            description: DTO of an individual Access Condition for enforcement during Access Policy evaluation
            $ref: '#/components/schemas/AccessConditionDTO'
          description: Page of Access Conditions
      additionalProperties: false
      description: Page of Access Conditions
    AccessConditionPatchDTO:
      type: object
      properties:
        name:
          maxLength: 128
          type:
            - 'null'
            - string
          description: New Name for the identified entity
        description:
          type:
            - 'null'
            - string
          description: New Description for the identified entity
        isActive:
          type:
            - 'null'
            - boolean
          description: New Status for the identified entity
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
          description: New Tags for the identified entity
      additionalProperties: false
      description: Patch Request DTO for individual Access Condition
    AccessConditionV2DTO:
      required:
        - integrationType
        - isActive
        - name
        - resourceSet
      type: object
      properties:
        integrationType:
          type:
            - 'null'
            - string
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        integrationID:
          type: string
          description: ID of the Integration Entity used by this Access Condition
          format: uuid
        integration:
          type: 'null'
          oneOf:
            - description: Integration details for 3rd party data used by Access Conditions
              $ref: '#/components/schemas/IntegrationV2DTO'
            - $ref: '#/components/schemas/CrowdStrikeIntegrationDTO'
            - $ref: '#/components/schemas/WizIntegrationDTO'
            - $ref: '#/components/schemas/GeoIPIntegrationDTO'
            - $ref: '#/components/schemas/TimeIntegrationDTO'
          description: Integration Entity used by this Access Condition
        maxLastSeenSeconds:
          type: integer
          format: int32
        accessPolicyCount:
          type: integer
          description: Access Policies associated with this Access Condition
          format: int32
      additionalProperties: false
      discriminator:
        propertyName: integrationType
        mapping:
          CrowdStrike: '#/components/schemas/CrowdStrikeAccessConditionDTO'
          WizIntegrationApi: '#/components/schemas/WizAccessConditionDTO'
          AembitGeoIPCondition: '#/components/schemas/GeoIPAccessConditionDTO'
          AembitTimeCondition: '#/components/schemas/TimeAccessConditionDTO'
    AccessConditionV2DTOAccessConditionListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Page of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP Status Code of the response
          format: int32
        recordsTotal:
          type: integer
          description: Total number of Access Conditions
          format: int32
        accessConditions:
          type:
            - 'null'
            - array
          items:
            oneOf:
              - $ref: '#/components/schemas/AccessConditionV2DTO'
              - $ref: '#/components/schemas/CrowdStrikeAccessConditionDTO'
              - $ref: '#/components/schemas/WizAccessConditionDTO'
              - $ref: '#/components/schemas/GeoIPAccessConditionDTO'
              - $ref: '#/components/schemas/TimeAccessConditionDTO'
          description: Page of Access Conditions
      additionalProperties: false
      description: Page of Access Conditions
    AgentControllerDTO:
      required:
        - name
      type: object
      properties:
        id:
          type: integer
          description: ID of the Agent Controller
          format: int
        externalId:
          type: string
          description: ID of the Agent Controller
          format: uuid
        createdAt:
          type: string
          description: Agent Controller creation Timestamp
          format: date
        version:
          type:
            - 'null'
            - string
          description: Last reported software version of the Agent Controller
        isActive:
          type: boolean
          description: Active status of the Agent Controller
          format: boolean
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Agent Controller
        description:
          type:
            - 'null'
            - string
          description: Description of the Agent Controller
        tags:
          type:
            - 'null'
            - array
          items:
            description: Agent Controller Tag key and value
            $ref: '#/components/schemas/AgentControllerTagDTO'
          description: Tags assigned to the Agent Controller
        tlsCertificates:
          type:
            - 'null'
            - array
          items:
            description: Agent Controller TLS Certificate information
            $ref: '#/components/schemas/AgentControllerTlsCertificateDTO'
          description: TLS Certificates associated with the Agent Controller
        trustProviderId:
          type:
            - 'null'
            - string
          description: Trust Provider ID of the Agent Controller used for attested authentication
          format: uuid
        trustProvider:
          description: Trust Provider of the Agent Controller used for attested authentication
          $ref: '#/components/schemas/TrustProviderDTO'
        modifiedAt:
          type: string
          description: Agent Controller modification Timestamp
          format: date
        isHealthy:
          type: boolean
          description: Recently reported Agent Controller Health Status
          format: boolean
        lastReportedUptime:
          type: integer
          description: Last Reported Agent Controller Uptime (in seconds)
          format: int64
        lastReportedHealthTime:
          type:
            - 'null'
            - string
          description: Last Reported Agent Controller Health Time
          format: date
        allowedTlsHostname:
          maxLength: 256
          type:
            - 'null'
            - string
          description: Allowed TLS Hostname for Aembit Managed TLS
      additionalProperties: false
      description: DTO of an individual Agent Controller for Agent Proxy management
    AgentControllerDeviceCodeDTO:
      type: object
      properties:
        device_code:
          type:
            - 'null'
            - string
          description: One time use OAuth 2 Device Code for use during AgentController deployment and registration
      additionalProperties: false
      description: DTO of an individual Agent Controller Device Code
    AgentControllerListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Page of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP StatusCode for the current result
          format: int32
        recordsTotal:
          type: integer
          description: Total number of AgentControllers available
          format: int32
        agentControllers:
          type:
            - 'null'
            - array
          items:
            description: DTO of an individual Agent Controller for Agent Proxy management
            $ref: '#/components/schemas/AgentControllerDTO'
          description: Page of AgentControllers for this request
      additionalProperties: false
      description: Page of Agent Controllers for Agent Proxy management
    AgentControllerPatchDTO:
      type: object
      properties:
        version:
          type:
            - 'null'
            - string
        isActive:
          type:
            - 'null'
            - boolean
          description: New Status for the identified Agent Controller
          format: boolean
        trustProviderId:
          type:
            - 'null'
            - string
          description: New Trust Provider to use for the identified Agent Controller
          format: uuid
      additionalProperties: false
      description: Patch Request DTO for individual Agent Controller
    AgentControllerTagDTO:
      required:
        - key
        - value
      type: object
      properties:
        key:
          minLength: 1
          type: string
          description: Key for the Agent Controller Tag
        value:
          minLength: 1
          type: string
          description: Value for the Agent Controller Tag
      additionalProperties: false
      description: Agent Controller Tag key and value
    AgentControllerTlsCertificateDTO:
      required:
        - createdAt
        - hostName
        - notAfter
        - notBefore
        - serialNumber
        - subject
        - thumbprint
      type: object
      properties:
        subject:
          type: string
          description: Subject of the Certificate
        serialNumber:
          minLength: 1
          type: string
          description: Serial Number of the Certificate
        thumbprint:
          minLength: 1
          type: string
          description: Thumbprint of the Certificate
        notBefore:
          type: string
          description: Creation Timestamp of the Certificate
          format: date-time
        notAfter:
          type: string
          description: Expiration Timestamp of the Certificate
          format: date-time
        hostName:
          minLength: 1
          type: string
          description: Last reported Hostname for the Agent Controller
        createdAt:
          type: string
          description: Creation Timestamp for this Agent Controller TLS Certificate
          format: date-time
        isManagedByAembit:
          type: boolean
          description: True if the Agent Controller TLS Certificate is managed by Aembit
          format: boolean
      additionalProperties: false
      description: Agent Controller TLS Certificate information
    AuditActorDTO:
      type: object
      properties:
        type:
          type:
            - 'null'
            - string
          description: 'The type of Audit Log actor (e.g. User, System, or Role)'
        displayName:
          type:
            - 'null'
            - string
          description: Fully qualified Audit Log Actor name
        userName:
          type:
            - 'null'
            - string
        email:
          type:
            - 'null'
            - string
        credentialProviderId:
          type:
            - 'null'
            - string
          description: Credential Provider ID that was used to generate the Role-based Access Token for this Audit Log action
        accessPolicyId:
          type:
            - 'null'
            - string
          description: Access Policy ID that was used to generate the Role-based Access Token for this Audit Log action
      additionalProperties: false
      description: DTO for the Actor details of an Aembit Audit Log
    AuditClientDTO:
      type: object
      properties:
        ipAddress:
          type:
            - 'null'
            - string
          description: IP Address of the remote client
        userAgent:
          description: HTTP User Agent of the remote client
          $ref: '#/components/schemas/UserAgentDTO'
      additionalProperties: false
      description: DTO for the Client details of an Aembit Audit Log
    AuditLogDTO:
      type: object
      properties:
        externalId:
          type: string
          description: ID of an Aembit Audit Log
          format: uuid
        resourceSetId:
          type: string
          description: Resource Set ID of an Aembit Audit Log
          format: uuid
        category:
          type:
            - 'null'
            - string
          description: 'Category of an Aembit Audit Log (e.g. Users, AccessPolicies, Workloads, etc.)'
        actor:
          description: Actor DTO of an Aembit Audit Log
          $ref: '#/components/schemas/AuditActorDTO'
        activity:
          type:
            - 'null'
            - string
          description: Activity of an Aembit Audit Log
        target:
          type:
            - 'null'
            - string
          description: Target of an Aembit Audit Log
        client:
          description: Remote Client DTO of an Aembit Audit Log
          $ref: '#/components/schemas/AuditClientDTO'
        outcome:
          description: Outcome DTO of an Aembit Audit Log
          $ref: '#/components/schemas/AuditOutcomeDTO'
        trustProvider:
          description: Attestation Result DTO for an AgentController of an Aembit Audit Log
          $ref: '#/components/schemas/EventResultDTO'
        severity:
          type:
            - 'null'
            - string
          description: Severity of an Aembit Audit Log
        createdAt:
          type: string
          description: Timestamp of when this Aembit Audit Log was created
          format: date-time
      additionalProperties: false
      description: DTO for an individual Aembit Audit Log
    AuditLogListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Page of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP Status Code of the response
          format: int32
        recordsTotal:
          type: integer
          description: Total number of Aembit Audit Logs
          format: int32
        auditLogs:
          type:
            - 'null'
            - array
          items:
            description: DTO for an individual Aembit Audit Log
            $ref: '#/components/schemas/AuditLogDTO'
          description: Page of Aembit Audit Logs
      additionalProperties: false
      description: Page of Aembit Audit Logs
    AuditOutcomeDTO:
      type: object
      properties:
        reason:
          type:
            - 'null'
            - string
          description: Reason for the outcome of this Aembit Audit Log
        result:
          type:
            - 'null'
            - string
          description: Outcome of the action associated with this Aembit Audit Log
      additionalProperties: false
      description: DTO for the Outcome of an individual Aembit Audit Log
    AuthorizationEventAtttestationResultDTO:
      type: object
      properties:
        id:
          type: string
          description: Access Entity ID
          format: uuid
        name:
          type:
            - 'null'
            - string
          description: Access Entity Name
        result:
          type:
            - 'null'
            - string
          description: Access Entity processing Result for this Access Authorization Event
        matches:
          type:
            - 'null'
            - array
          items:
            type: string
          description: List of matched Access Entity Identifiers
        reason:
          type:
            - 'null'
            - string
        attribute:
          type:
            - 'null'
            - string
        expectedValue:
          type:
            - 'null'
            - string
        expectedValues:
          type:
            - 'null'
            - array
          items:
            type: string
        actualValue:
          type:
            - 'null'
            - string
      additionalProperties: false
      description: Individual Access Entity Attestation Result of an Aembit Access Authorization Event
    AuthorizationEventCPResultDTO:
      type: object
      properties:
        id:
          type: string
          description: Access Entity ID
          format: uuid
        name:
          type:
            - 'null'
            - string
          description: Access Entity Name
        result:
          type:
            - 'null'
            - string
          description: Access Entity processing Result for this Access Authorization Event
        matches:
          type:
            - 'null'
            - array
          items:
            type: string
          description: List of matched Access Entity Identifiers
        type:
          type:
            - 'null'
            - string
          description: Credential Provider Type
        reason:
          type:
            - 'null'
            - string
          description: Credential Provider Failure Reason
      additionalProperties: false
      description: Individual Credential Provider Result of an Aembit Access Authorization Event
    AuthorizationEventDTO:
      type: object
      properties:
        authorizationChain:
          type:
            - 'null'
            - array
          items:
            type: string
        meta:
          description: Metadata for an individual Aembit Access Authorization Event
          $ref: '#/components/schemas/AuthorizationEventDataMetaDTO'
        outcome:
          description: Outcome information for an individual Aembit Access Authorization Event
          $ref: '#/components/schemas/AuthorizationEventOutcomeDTO'
        clientRequest:
          description: Client Request information for an individual Aembit Access Authorization Event
          $ref: '#/components/schemas/ClientRequestDTO'
        environment:
          $ref: '#/components/schemas/AuthorizationEventEnvironmentDataDTO'
        clientWorkload:
          description: Client Workload information for an individual Aembit Access Authorization Event
          $ref: '#/components/schemas/AuthorizationEventEntityResultDTO'
        clientWorkloads:
          type:
            - 'null'
            - array
          items:
            description: Access Entity Result of an Aembit Access Authorization Event
            $ref: '#/components/schemas/AuthorizationEventEntityResultDTO'
          description: Client Workload information for an individual Aembit Access Authorization Event
        serverWorkload:
          description: Server Workload information for an individual Aembit Access Authorization Event
          $ref: '#/components/schemas/AuthorizationEventEntityResultDTO'
        serverWorkloads:
          type:
            - 'null'
            - array
          items:
            description: Access Entity Result of an Aembit Access Authorization Event
            $ref: '#/components/schemas/AuthorizationEventEntityResultDTO'
          description: Server Workload information for an individual Aembit Access Authorization Event
        accessPolicy:
          description: Access Policy information for an individual Aembit Access Authorization Event
          $ref: '#/components/schemas/AuthorizationEventEntityResultDTO'
        accessPolicies:
          type:
            - 'null'
            - array
          items:
            description: Access Entity Result of an Aembit Access Authorization Event
            $ref: '#/components/schemas/AuthorizationEventEntityResultDTO'
          description: Access Policy information for an individual Aembit Access Authorization Event
        trustProviders:
          type:
            - 'null'
            - array
          items:
            description: Individual Access Entity Attestation Result of an Aembit Access Authorization Event
            $ref: '#/components/schemas/AuthorizationEventAtttestationResultDTO'
          description: Trust Provider information for an individual Aembit Access Authorization Event
        accessConditions:
          type:
            - 'null'
            - array
          items:
            description: Individual Access Entity Attestation Result of an Aembit Access Authorization Event
            $ref: '#/components/schemas/AuthorizationEventAtttestationResultDTO'
          description: Access Condition information for an individual Aembit Access Authorization Event
        contentSecurity:
          type:
            - 'null'
            - array
          items:
            description: Individual Access Entity Attestation Result of an Aembit Access Authorization Event
            $ref: '#/components/schemas/AuthorizationEventAtttestationResultDTO'
          description: Content Security information for an individual Aembit Access Authorization Event
        credentialProvider:
          description: Credential Provider information for an individual Aembit Access Authorization Event
          $ref: '#/components/schemas/AuthorizationEventCPResultDTO'
        user:
          type:
            - 'null'
            - string
          description: User information of the Aembit Access Authorization Event
      additionalProperties: false
      description: An individual Aembit Access Authorization Event
    AuthorizationEventDataMetaDTO:
      type: object
      properties:
        clientIP:
          type:
            - 'null'
            - string
          description: Remote Client IP Address of the Access Authorization Request
        timestamp:
          type: string
          description: Timestamp of the Access Authorization Request
          format: date-time
        eventType:
          type:
            - 'null'
            - string
          description: Event Type of the Access Authorization Request
        eventId:
          type: string
          description: Unique ID of the Access Authorization Event
          format: uuid
        resourceSetId:
          type: string
          description: Resource Set ID of the Access Authorization Event
          format: uuid
        contextId:
          type: string
          description: Context ID of the Access Authorization Events for a single Access Authorization Request
          format: uuid
        directiveId:
          type: string
          description: Directive ID of the Access Authorization Event (if available)
          format: uuid
        severity:
          type:
            - 'null'
            - string
          description: 'Severity of the Access Authorization Event (e.g. Info, Warning, Error)'
      additionalProperties: false
      description: Metadata DTO for an individual Aembit Access Authorization Event
    AuthorizationEventEntityResultDTO:
      type: object
      properties:
        id:
          type: string
          description: Access Entity ID
          format: uuid
        name:
          type:
            - 'null'
            - string
          description: Access Entity Name
        result:
          type:
            - 'null'
            - string
          description: Access Entity processing Result for this Access Authorization Event
        matches:
          type:
            - 'null'
            - array
          items:
            type: string
          description: List of matched Access Entity Identifiers
      additionalProperties: false
      description: Access Entity Result of an Aembit Access Authorization Event
    AuthorizationEventEnvironmentDataDTO:
      type: object
      properties:
        network:
          $ref: '#/components/schemas/RequestMetadaNetworkDTO'
        host:
          $ref: '#/components/schemas/RequestMetadaHostDTO'
        process:
          $ref: '#/components/schemas/RequestMetadaProcessDTO'
        aembit:
          $ref: '#/components/schemas/RequestMetadaAembitDTO'
        aws:
          $ref: '#/components/schemas/RequestMetadaAwsDTO'
        gcp:
          $ref: '#/components/schemas/RequestMetadaGcpDTO'
        azure:
          $ref: '#/components/schemas/RequestMetadaAzureDTO'
        kubernetes:
          $ref: '#/components/schemas/RequestMetadaKubernetesDTO'
        gitlab:
          $ref: '#/components/schemas/RequestMetadaGitlabDTO'
        github:
          $ref: '#/components/schemas/RequestMetadaGithubDTO'
        oidc:
          $ref: '#/components/schemas/RequestMetadataOidcDTO'
        terraform:
          $ref: '#/components/schemas/RequestMetadaTerraformDTO'
        oauth:
          $ref: '#/components/schemas/RequestMetadaOAuthDTO'
      additionalProperties: false
    AuthorizationEventListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Page of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP Status Code of the response
          format: int32
        recordsTotal:
          type: integer
          description: Total number of Aembit Audit Logs
          format: int32
        authorizationEvents:
          type:
            - 'null'
            - array
          items:
            description: An individual Aembit Access Authorization Event
            $ref: '#/components/schemas/AuthorizationEventDTO'
          description: Page of Aembit Access Authorization Events
      additionalProperties: false
      description: Page of Aembit Access Authorization Events
    AuthorizationEventOutcomeDTO:
      type: object
      properties:
        result:
          type:
            - 'null'
            - string
          description: Result of an individual Aembit Access Authorization Event
        reason:
          type:
            - 'null'
            - string
          description: Reason for the Result of an individual Aembit Access Authorization Event
      additionalProperties: false
      description: Outcome of an individual Aembit Access Authorization Event
    AwsIamRoleCpiDTO:
      allOf:
        - $ref: '#/components/schemas/CredentialProviderIntegrationDTO'
        - required:
            - roleArn
          type: object
          properties:
            roleArn:
              minLength: 1
              pattern: '^arn:aws:iam::\d{12}:role/[\w+=,.@/-]+$'
              type: string
              description: ARN of the AWS IAM Role to assume for access
            lifetimeInSeconds:
              maximum: 43200
              minimum: 900
              type: integer
              description: 'Lifetime of the access credentials in seconds, default is 3600 seconds (1 hour)'
              format: int32
            fetchSecretArns:
              type: boolean
              description: Indicates whether to fetch and populate the ARNs of secrets on AWS Secrets Manager Value Credential Provider UI
          additionalProperties: false
      description: DTO for AWS IAM Role Credential Provider Integration
    AzureEntraFederationCredentialProviderIntegrationDTO:
      allOf:
        - $ref: '#/components/schemas/CredentialProviderIntegrationDTO'
        - required:
            - audience
            - azureTenant
            - clientId
            - keyVaultName
            - subject
          type: object
          properties:
            audience:
              minLength: 1
              pattern: ^\S+$
              type: string
              description: Audience of the federated OIDC token to authenticate against Azure Entra ID
            subject:
              minLength: 1
              type: string
              description: Subject of the federated OIDC token to authenticate against Azure Entra ID
            azureTenant:
              minLength: 1
              pattern: '^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$'
              type: string
              description: Tenant ID of the Azure Entra ID to authenticate against Azure Key Vault
            clientId:
              minLength: 1
              pattern: '^[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}$'
              type: string
              description: Client ID of the Azure application to authenticate against Azure Key Vault
            keyVaultName:
              minLength: 1
              pattern: '^[a-zA-Z](?!.*--)[a-zA-Z0-9-]{1,22}[a-zA-Z0-9]$'
              type: string
              description: Name of the Azure Key Vault to fetch secrets from
            fetchSecretNames:
              type: boolean
              description: Indicates whether to fetch and populate the names of secrets on Azure Key Vault Value Credential Provider UI
          additionalProperties: false
      description: Individual Credential Provider Integration
    CPAwsStsV2DTO:
      allOf:
        - $ref: '#/components/schemas/CredentialProviderV2DTO'
        - required:
            - awsIAMRoleArn
          type: object
          properties:
            awsIAMRoleArn:
              minLength: 1
              type: string
              description: Amazon Resource Name(ARN) for AWS IAM Role
            lifetime:
              type:
                - 'null'
                - integer
              description: Access token lifetime (in seconds)
              format: int32
          additionalProperties: false
    CPGitLabManagedAccountDTO:
      allOf:
        - $ref: '#/components/schemas/CredentialProviderV2DTO'
        - required:
            - accessLevel
            - lifetimeInSeconds
            - scope
          type: object
          properties:
            groupIds:
              type:
                - 'null'
                - string
              description: Comma separated list of GitLab Group Identifiers or Paths
            projectIds:
              type:
                - 'null'
                - string
              description: Comma separated list of GitLab Project Identifiers or Paths
            accessLevel:
              type: integer
              description: Access level code to use while assigning Managed Service Account to a group or a project
              format: int32
            lifetimeInSeconds:
              type: integer
              description: Lifetime (in seconds) of a Personal Access Token of the Managed Service Account
              format: int32
            scope:
              minLength: 1
              type: string
              description: A space separated list of scopes to be specified when requesting a Personal Access Token of a Managed Service Account
            userId:
              type: integer
              description: GitLab user ID of the Managed Service Account.
              format: int32
              readOnly: true
            username:
              type:
                - 'null'
                - string
              description: GitLab username of the Managed Service Account.
              readOnly: true
            tokenSensitiveDataId:
              type: string
              format: uuid
            tokenId:
              type:
                - 'null'
                - string
            tokenExpiration:
              type:
                - 'null'
                - string
              description: Expiration timestamp of the Personal Access Token of the Managed Service Account.
              format: date-time
              readOnly: true
            lastOperationTimestamp:
              type:
                - 'null'
                - string
              description: Timestamp of the latest operation performed with the Personal Access Token of the Managed Service Account.
              format: date-time
              readOnly: true
            status:
              type:
                - 'null'
                - string
              description: Status of the Personal Access Token of the Managed Service Account.
              readOnly: true
            errorMessage:
              type:
                - 'null'
                - string
              description: Contains an error message related to the last unsuccessful operation using the Personal Access Token of the Managed Service Account.
              readOnly: true
            credentialProviderIntegrationExternalId:
              type: string
              description: ID of the Credential Provider Integration with which this Managed GitLab Account Credential Provider is associated
              format: uuid
          additionalProperties: false
    CPTypeAembitAccessTokenV2DTO:
      allOf:
        - $ref: '#/components/schemas/CredentialProviderV2DTO'
        - required:
            - audience
            - lifetimeInSeconds
            - roleId
          type: object
          properties:
            audience:
              minLength: 1
              type: string
              description: Audience for the access token
              format: your_tenant_id.api.aembit.io
            roleId:
              type: string
              description: Aembit Role Id
              format: uuid
            lifetimeInSeconds:
              type: integer
              description: Access token lifetime (in seconds)
              format: int32
            absoluteTokenLifetime:
              type:
                - 'null'
                - integer
              description: Absolute Lifetime of the Refresh Token. Setting a value indicates Refresh Token Support will be enabled.
              format: int32
          additionalProperties: false
    CPTypeApiKeyUIV2DTO:
      allOf:
        - $ref: '#/components/schemas/CredentialProviderV2DTO'
        - required:
            - apiKey
          type: object
          properties:
            apiKey:
              minLength: 1
              type: string
              description: API Key
          additionalProperties: false
    CPTypeAzureEntraFederationV2DTO:
      allOf:
        - $ref: '#/components/schemas/CredentialProviderV2DTO'
        - required:
            - audience
            - azureTenant
            - clientId
            - scope
            - subject
          type: object
          properties:
            audience:
              minLength: 1
              type: string
              description: Audience for the access token
            subject:
              minLength: 1
              type: string
              description: Subject for the access token
            scope:
              minLength: 1
              type: string
              description: Scope for the access token
            azureTenant:
              minLength: 1
              type: string
              description: Azure tenant ID
            clientId:
              minLength: 1
              type: string
              description: Azure client ID
          additionalProperties: false
    CPTypeAzureKeyVaultValueDTO:
      allOf:
        - $ref: '#/components/schemas/CredentialProviderV2DTO'
        - required:
            - credentialProviderIntegrationExternalId
          type: object
          properties:
            secretName1:
              type:
                - 'null'
                - string
              description: The first secret. Used when specifying a single key or a key representing a username when working with a username/password pair.
            secretName2:
              type:
                - 'null'
                - string
              description: The second secret. Used when specifying a password when working with a username/password pair.
            credentialProviderIntegrationExternalId:
              type: string
              description: ID of the Azure Entra Federation Credential Provider Integration with which this Azure Key Vault Value Credential is associated
              format: uuid
            privateNetworkAccess:
              type: boolean
              description: Indicates if the Azure Key Vault Value Credential should be accessed over a private network
          additionalProperties: false
    CPTypeClaudeWifV2DTO:
      allOf:
        - $ref: '#/components/schemas/CredentialProviderV2DTO'
        - required:
            - federationRuleId
            - organizationId
            - scope
            - serviceAccountId
          type: object
          properties:
            federationRuleId:
              minLength: 1
              pattern: ^fdrl_.+$
              type: string
              description: Federation Rule ID
            organizationId:
              minLength: 1
              pattern: '^[0-9a-f]{8}-([0-9a-f]{4}-){3}[0-9a-f]{12}$'
              type: string
              description: Organization ID
            serviceAccountId:
              minLength: 1
              pattern: ^svac_.+$
              type: string
              description: Service Account ID
            workspaceId:
              pattern: ^wrkspc_.+$
              type:
                - 'null'
                - string
              description: Workspace ID
            audience:
              type:
                - 'null'
                - string
              description: Audience
            scope:
              minLength: 1
              type: string
              description: Scope
            lifetime:
              maximum: 43200
              minimum: 300
              type:
                - 'null'
                - integer
              description: Access token lifetime (in seconds)
              format: int32
          additionalProperties: false
    CPTypeGoogleWorkflowIDFederationV2DTO:
      allOf:
        - $ref: '#/components/schemas/CredentialProviderV2DTO'
        - required:
            - audience
            - serviceAccountEmail
          type: object
          properties:
            audience:
              minLength: 1
              type: string
              description: Audience for the access token
            serviceAccountEmail:
              minLength: 1
              type: string
              description: Service account email
              format: email
            lifetime:
              type:
                - 'null'
                - integer
              description: Access token lifetime (in seconds)
              format: int32
          additionalProperties: false
    CPTypeJWTTokenV2DTO:
      allOf:
        - $ref: '#/components/schemas/CredentialProviderV2DTO'
        - required:
            - algorithmType
            - issuer
            - lifetime
            - subject
            - tokenConfiguration
          type: object
          properties:
            tokenConfiguration:
              minLength: 1
              type: string
              description: 'Token configuration type. Accepted value: ''snowflake'''
            lifetime:
              type: integer
              description: Access token lifetime (in seconds)
              format: int32
            algorithmType:
              minLength: 1
              type: string
              description: 'Token signing algorithm. Accepted value: ''RS256'''
            issuer:
              minLength: 1
              type: string
              description: Issuer of the access token
              format: 'Snowflake_Account_Name.Snowflake_Username.SHA256:{sha256(publicKey)}'
            subject:
              minLength: 1
              type: string
              description: Subject of the access token
              format: Snowflake_Account_Name.Snowflake_Username
            keyContent:
              type:
                - 'null'
                - string
            privateKey:
              type:
                - 'null'
                - string
          additionalProperties: false
    CPTypeOAuth2AuthorizationCodeUIV2DTO:
      allOf:
        - $ref: '#/components/schemas/CredentialProviderV2DTO'
        - required:
            - authorizationUrl
            - clientID
            - oAuthUrl
            - tokenUrl
          type: object
          properties:
            clientID:
              minLength: 1
              type: string
              description: 'OAuth Client ID '
            clientSecret:
              type:
                - 'null'
                - string
              description: OAuth Client Secret
            scope:
              type:
                - 'null'
                - string
              description: OAuth Scopes
            customParameters:
              type:
                - 'null'
                - array
              items:
                $ref: '#/components/schemas/CPTypeOAuth2CustomParameters'
              description: Custom Claims that are added to the Access Token
            oAuthUrl:
              minLength: 1
              type: string
              description: OAuth well-known metadata endpoint
            authorizationUrl:
              minLength: 1
              type: string
              description: OAuth Authorization URL for handling authorization requests
            tokenUrl:
              minLength: 1
              type: string
              description: OAuth Token URL for handling token requests
            introspectionUrl:
              type:
                - 'null'
                - string
              description: 'Introspection Url of the OAuth 2.0 introspection endpoint, used to validate and obtain metadata about access tokens'
            isPkceRequired:
              type: boolean
              description: Indicates if Proof Key for Code Exchange (PKCE) protocol flow must be used
            callBackUrl:
              type:
                - 'null'
                - string
              description: The callback URL where the Authorization Server sends the Authorization Code
              format: ''
            finalCallbackUrl:
              type:
                - 'null'
                - string
              description: Redirect URL after Aembit successfully completes OAuth authorization. Only available to Tenants which are entitled - contact Aembit support if you require this functionality.
            userAuthorizationUrl:
              type:
                - 'null'
                - string
              description: Authorization URL to be used for authorization of the Credential Provider by a privileged user
            state:
              type:
                - 'null'
                - string
              description: State parameter to maintain state between the authorization request and callback
          additionalProperties: false
    CPTypeOAuth2ClientCredentialsUIV2DTO:
      allOf:
        - $ref: '#/components/schemas/CredentialProviderV2DTO'
        - required:
            - clientID
            - url
          type: object
          properties:
            clientID:
              minLength: 1
              type: string
              description: 'OAuth Client ID '
            clientSecret:
              type:
                - 'null'
                - string
              description: OAuth Client Secret
            scope:
              type:
                - 'null'
                - string
              description: OAuth Scopes
            customParameters:
              type:
                - 'null'
                - array
              items:
                $ref: '#/components/schemas/CPTypeOAuth2CustomParameters'
              description: Custom Claims that are added to the Access Token
            url:
              minLength: 1
              type: string
              description: OAuth Token URL for handling token requests
            credentialStyle:
              type:
                - 'null'
                - string
              description: 'Defines how credential would be transmitted. Accepted value: ''postBody'', ''authHeader'''
          additionalProperties: false
    CPTypeOAuth2CustomParameters:
      type: object
      properties:
        key:
          type:
            - 'null'
            - string
        value:
          type:
            - 'null'
            - string
        valueType:
          type:
            - 'null'
            - string
      additionalProperties: false
    CPTypeOpenAiWifV2DTO:
      allOf:
        - $ref: '#/components/schemas/CredentialProviderV2DTO'
        - required:
            - identityProviderId
            - serviceAccountId
          type: object
          properties:
            identityProviderId:
              minLength: 1
              pattern: ^idp_.+$
              type: string
              description: Identity Provider ID
            serviceAccountId:
              minLength: 1
              pattern: ^user-.+$
              type: string
              description: Service Account ID
            audience:
              type:
                - 'null'
                - string
              description: Audience
          additionalProperties: false
    CPTypeUsernamePasswordUIV2DTO:
      allOf:
        - $ref: '#/components/schemas/CredentialProviderV2DTO'
        - required:
            - password
            - username
          type: object
          properties:
            username:
              minLength: 1
              type: string
              description: Username
            password:
              minLength: 1
              type: string
              description: Password. Set to null on updates if not wish to change it
          additionalProperties: false
    CPTypeVaultClientTokenV2DTO:
      allOf:
        - $ref: '#/components/schemas/CredentialProviderV2DTO'
        - required:
            - authenticationPath
            - issuer
            - lifetime
            - port
            - subject
            - vaultHost
          type: object
          properties:
            issuer:
              minLength: 1
              type: string
              description: Issuer of the Access Token
              format: https://your_tenant_id.id.aembit.io
            subject:
              minLength: 1
              type: string
              description: Subject of the Access Token
            subjectType:
              type:
                - 'null'
                - string
              description: 'Subject type, Accepted values: ''literal'', ''dynamic'''
            lifetime:
              type: integer
              description: Access Token(used for authentication against vault OIDC provider) Lifetime in seconds
              format: int32
            customClaimNames:
              type:
                - 'null'
                - array
              items:
                $ref: '#/components/schemas/JWTClaimDTO'
              description: Custom Claims that are added to the Access Token
            vaultHost:
              minLength: 1
              type: string
              description: Vault host
            tls:
              type: boolean
              description: Tls enabled/disabled when connecting to the vault instance
            port:
              maximum: 65535
              minimum: 1
              type: integer
              description: Port number for connecting to the vault instance
              format: int32
            authenticationPath:
              minLength: 1
              type: string
              description: Vault authentication path
            namespace:
              type:
                - 'null'
                - string
              description: Namespace to be used when connecting to the vault instance
            role:
              type:
                - 'null'
                - string
              description: User role to be used when connecting to the vault instance
            forwardingConfig:
              type:
                - 'null'
                - string
              description: 'Forwarding configuration for the vault request. Accepted values: '''', ''conditional'', ''unconditional'''
            privateNetworkAccess:
              type: boolean
              description: Specifies whether the Vault instance is accessible over a private network
          additionalProperties: false
    ClientIdentifierExternalDTO:
      type: object
      properties:
        name:
          type:
            - 'null'
            - string
        displayName:
          type:
            - 'null'
            - string
        environmentPath:
          type:
            - 'null'
            - string
        isSupported:
          type: boolean
      additionalProperties: false
    ClientRequestDTO:
      required:
        - network
        - version
      type: object
      properties:
        version:
          minLength: 1
          type: string
        network:
          $ref: '#/components/schemas/NetworkDTO'
      additionalProperties: false
    ClientWorkloadExternalDTO:
      required:
        - isActive
        - name
        - resourceSet
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        identities:
          type:
            - 'null'
            - array
          items:
            $ref: '#/components/schemas/ClientWorkloadIdentityDTO'
        standaloneCertificateAuthority:
          type:
            - 'null'
            - string
          description: Standalone Certificate Authority associated with this Client Workload
          format: uuid
        enforceSso:
          type: boolean
          description: Whether SSO is enforced for MCP authorization
        type:
          type:
            - 'null'
            - string
        accessPolicyCount:
          type: integer
          description: Access Policies associated with this Client Workload
          format: int32
        ssoIdentityProviders:
          type:
            - 'null'
            - array
          items:
            type: string
            format: uuid
      additionalProperties: false
    ClientWorkloadIdentityDTO:
      required:
        - value
      type: object
      properties:
        type:
          maxLength: 255
          type:
            - 'null'
            - string
        value:
          minLength: 1
          type: string
        key:
          maxLength: 255
          type:
            - 'null'
            - string
      additionalProperties: false
    ClientWorkloadListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Page of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          format: int32
        recordsTotal:
          type: integer
          format: int32
        clientWorkloads:
          type:
            - 'null'
            - array
          items:
            $ref: '#/components/schemas/ClientWorkloadExternalDTO'
      additionalProperties: false
      description: Page of Client Workloads
    ClientWorkloadPatchDTO:
      type: object
      properties:
        name:
          maxLength: 128
          type:
            - 'null'
            - string
          description: New Name for the identified entity
        description:
          type:
            - 'null'
            - string
          description: New Description for the identified entity
        isActive:
          type:
            - 'null'
            - boolean
          description: New Status for the identified entity
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
          description: New Tags for the identified entity
        identities:
          type:
            - 'null'
            - array
          items:
            $ref: '#/components/schemas/ClientWorkloadIdentityDTO'
      additionalProperties: false
    ContentSecurityDTO:
      required:
        - isActive
        - name
        - resourceSet
        - type
      type: object
      properties:
        type:
          minLength: 1
          type: string
          description: Content Security Type
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        accessPolicyCount:
          type: integer
          description: Access Policies associated with this Content Security
          format: int32
      additionalProperties: false
      description: Individual Content Security
      discriminator:
        propertyName: type
        mapping:
          CrowdStrikeAIDR: '#/components/schemas/CrowdStrikeAIDRContentSecurityDTO'
    ContentSecurityDTOListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Current page number of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP StatusCode for the current result
          format: int32
        recordsTotal:
          type: integer
          description: Total number of entities available
          format: int32
        entities:
          type:
            - 'null'
            - array
          items:
            oneOf:
              - $ref: '#/components/schemas/ContentSecurityDTO'
              - $ref: '#/components/schemas/CrowdStrikeAIDRContentSecurityDTO'
            description: Individual Content Security
          description: Page of entities for this request
      additionalProperties: false
    ContentSecurityPatchDTO:
      type: object
      properties:
        name:
          maxLength: 128
          type:
            - 'null'
            - string
          description: New Name for the identified entity
        description:
          type:
            - 'null'
            - string
          description: New Description for the identified entity
        isActive:
          type:
            - 'null'
            - boolean
          description: New Status for the identified entity
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
          description: New Tags for the identified entity
      additionalProperties: false
      description: Patch request for an individual Content Security
    CreatePolicyDTO:
      required:
        - isActive
        - name
        - resourceSet
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        credentialProviders:
          type:
            - 'null'
            - array
          items:
            description: Access Policy Credential Mappings
            $ref: '#/components/schemas/PolicyCredentialMappingDTO'
          description: Credential Providers associated with this Access Policy
        trustProviders:
          type:
            - 'null'
            - array
          items:
            type: string
            format: uuid
          description: Trust Providers associated with this Access Policy
        accessConditions:
          type:
            - 'null'
            - array
          items:
            type: string
            format: uuid
          description: Access Conditions associated with this Access Policy
        contentSecurity:
          type:
            - 'null'
            - array
          items:
            type: string
            format: uuid
          description: Content Security associated with this Access Policy
        clientWorkload:
          type: string
          description: Client Workload associated with this Access Policy
          format: uuid
        serverWorkload:
          type: string
          description: Server Workload associated with this Access Policy
          format: uuid
      additionalProperties: false
      description: Create/Update Access Policy
    CredentialProviderDTO:
      required:
        - isActive
        - name
        - resourceSet
        - type
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        type:
          minLength: 1
          type: string
          description: 'Credential Provider Type (e.g. oauth-client-credential, username-password, etc.)'
        roleId:
          type:
            - 'null'
            - string
          description: Credential Provider Role for use with Aembit Access Token type Credential Providers
          format: uuid
        lifetimeTimeSpanSeconds:
          type: integer
          description: The Lifetime of a Credential Provider's credential value
          format: int32
        lifetimeExpiration:
          type:
            - 'null'
            - string
          description: The expiration timestamp for a Credential Provider's credential value
          format: date-time
        providerDetailJSON:
          type:
            - 'null'
            - string
          description: JSON representation of the Credential Provider configuration details
        accessPolicyCount:
          type: integer
          description: Access Policies associated with this Credential Provider
          format: int32
      additionalProperties: false
      description: Individual Credential Provider
    CredentialProviderIntegrationDTO:
      required:
        - isActive
        - name
        - resourceSet
        - type
      type: object
      properties:
        type:
          $ref: '#/components/schemas/CredentialProviderIntegrationType'
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        tokenExpiration:
          type:
            - 'null'
            - string
          format: date-time
        lastOperationTimestamp:
          type:
            - 'null'
            - string
          format: date-time
        status:
          type:
            - 'null'
            - string
        errorMessage:
          type:
            - 'null'
            - string
      additionalProperties: false
      description: Individual Credential Provider Integration
      discriminator:
        propertyName: type
        mapping:
          GitLab: '#/components/schemas/GitLabCredentialProviderIntegrationDTO'
          AwsIamRole: '#/components/schemas/AwsIamRoleCpiDTO'
          AzureEntraFederation: '#/components/schemas/AzureEntraFederationCredentialProviderIntegrationDTO'
    CredentialProviderIntegrationPatchDTO:
      type: object
      properties:
        name:
          maxLength: 128
          type:
            - 'null'
            - string
          description: New Name for the identified entity
        description:
          type:
            - 'null'
            - string
          description: New Description for the identified entity
        isActive:
          type:
            - 'null'
            - boolean
          description: New Status for the identified entity
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
          description: New Tags for the identified entity
      additionalProperties: false
      description: Patch Request for an individual Credential Provider Integration
    CredentialProviderIntegrationType:
      enum:
        - GitLab
        - AwsIamRole
        - AzureEntraFederation
      type: string
    CredentialProviderPatchDTO:
      type: object
      properties:
        name:
          maxLength: 128
          type:
            - 'null'
            - string
          description: New Name for the identified entity
        description:
          type:
            - 'null'
            - string
          description: New Description for the identified entity
        isActive:
          type:
            - 'null'
            - boolean
          description: New Status for the identified entity
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
          description: New Tags for the identified entity
        providerDetailJSON:
          type:
            - 'null'
            - string
          description: JSON representation of the Credential Provider configuration details
        type:
          type:
            - 'null'
            - string
          description: 'Credential Provider Type (e.g. oauth-client-credential, username-password, etc.)'
      additionalProperties: false
      description: Patch request for an individual Credential Provider
    CredentialProviderUIDTO:
      required:
        - isActive
        - name
        - resourceSet
        - type
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        type:
          minLength: 1
          type: string
          description: 'Credential Provider Type (e.g. oauth-client-credential, username-password, etc.)'
        roleId:
          type:
            - 'null'
            - string
          description: Credential Provider Role for use with Aembit Access Token type Credential Providers
          format: uuid
        lifetimeTimeSpanSeconds:
          type: integer
          description: The Lifetime of a Credential Provider's credential value
          format: int32
        lifetimeExpiration:
          type:
            - 'null'
            - string
          description: The expiration timestamp for a Credential Provider's credential value
          format: date-time
        providerDetailJSON:
          type:
            - 'null'
            - string
          description: JSON representation of the Credential Provider configuration details
        accessPolicyCount:
          type: integer
          description: Access Policies associated with this Credential Provider
          format: int32
      additionalProperties: false
      description: Individual Credential Provider
    CredentialProviderUIDTOCredentialProviderListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Page of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP Status Code of the response
          format: int32
        recordsTotal:
          type: integer
          description: Total number of Credential Providers
          format: int32
        credentialProviders:
          type:
            - 'null'
            - array
          items:
            description: Individual Credential Provider
            $ref: '#/components/schemas/CredentialProviderUIDTO'
          description: Page of Credential Providers
      additionalProperties: false
      description: Page of Credential Providers
    CredentialProviderV2DTO:
      required:
        - isActive
        - name
        - resourceSet
        - type
      type: object
      properties:
        type:
          minLength: 1
          type: string
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        lifetimeTimeSpanSeconds:
          type: integer
          format: int32
        lifetimeExpiration:
          type:
            - 'null'
            - string
          format: date-time
        accessPolicyCount:
          type: integer
          description: Access Policies associated with this Credential Provider
          format: int32
      additionalProperties: false
      discriminator:
        propertyName: type
        mapping:
          aembit-access-token: '#/components/schemas/CPTypeAembitAccessTokenV2DTO'
          apikey: '#/components/schemas/CPTypeApiKeyUIV2DTO'
          aws-sts-oidc: '#/components/schemas/CPAwsStsV2DTO'
          azure-entra-federation: '#/components/schemas/CPTypeAzureEntraFederationV2DTO'
          azure-key-vault-value: '#/components/schemas/CPTypeAzureKeyVaultValueDTO'
          claude-wif: '#/components/schemas/CPTypeClaudeWifV2DTO'
          gcp-identity-federation: '#/components/schemas/CPTypeGoogleWorkflowIDFederationV2DTO'
          gitlab-managed-account: '#/components/schemas/CPGitLabManagedAccountDTO'
          oauth-authorization-code: '#/components/schemas/CPTypeOAuth2AuthorizationCodeUIV2DTO'
          oauth-client-credential: '#/components/schemas/CPTypeOAuth2ClientCredentialsUIV2DTO'
          openai-wif: '#/components/schemas/CPTypeOpenAiWifV2DTO'
          signed-jwt: '#/components/schemas/CPTypeJWTTokenV2DTO'
          username-password: '#/components/schemas/CPTypeUsernamePasswordUIV2DTO'
          vaultClientToken: '#/components/schemas/CPTypeVaultClientTokenV2DTO'
    CredentialProviderV2DTOCredentialProviderListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Page of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP Status Code of the response
          format: int32
        recordsTotal:
          type: integer
          description: Total number of Credential Providers
          format: int32
        credentialProviders:
          type:
            - 'null'
            - array
          items:
            oneOf:
              - $ref: '#/components/schemas/CredentialProviderV2DTO'
              - $ref: '#/components/schemas/CPTypeAembitAccessTokenV2DTO'
              - $ref: '#/components/schemas/CPTypeApiKeyUIV2DTO'
              - $ref: '#/components/schemas/CPAwsStsV2DTO'
              - $ref: '#/components/schemas/CPTypeAzureEntraFederationV2DTO'
              - $ref: '#/components/schemas/CPTypeAzureKeyVaultValueDTO'
              - $ref: '#/components/schemas/CPTypeClaudeWifV2DTO'
              - $ref: '#/components/schemas/CPTypeGoogleWorkflowIDFederationV2DTO'
              - $ref: '#/components/schemas/CPGitLabManagedAccountDTO'
              - $ref: '#/components/schemas/CPTypeOAuth2AuthorizationCodeUIV2DTO'
              - $ref: '#/components/schemas/CPTypeOAuth2ClientCredentialsUIV2DTO'
              - $ref: '#/components/schemas/CPTypeOpenAiWifV2DTO'
              - $ref: '#/components/schemas/CPTypeJWTTokenV2DTO'
              - $ref: '#/components/schemas/CPTypeUsernamePasswordUIV2DTO'
              - $ref: '#/components/schemas/CPTypeVaultClientTokenV2DTO'
          description: Page of Credential Providers
      additionalProperties: false
      description: Page of Credential Providers
    CrowdStrikeAIDRContentSecurityDTO:
      allOf:
        - $ref: '#/components/schemas/ContentSecurityDTO'
        - required:
            - baseUrl
          type: object
          properties:
            encryptedToken:
              type:
                - 'null'
                - string
              description: The encrypted API token or client secret used to authenticate with the CrowdStrike Falcon AIDR (AI Detection and Response) service.
            baseUrl:
              minLength: 1
              type: string
              description: The base URL of the CrowdStrike Falcon AIDR service endpoint or API gateway.
            failOpen:
              type: boolean
              description: Indicates whether requests should be allowed (fail-open) or blocked (fail-closed) if the CrowdStrike Falcon AIDR service is unreachable or encounters an error.
            timeoutMs:
              maximum: 600000
              minimum: 5000
              type: integer
              description: The connection timeout in milliseconds for requests sent to the CrowdStrike Falcon AIDR service.
              format: int32
            maxRetries:
              maximum: 10
              minimum: 0
              type: integer
              description: The maximum number of retry attempts for requests to the CrowdStrike Falcon AIDR service before executing the fail-open or fail-closed policy.
              format: int32
          additionalProperties: false
      description: Individual Content Security
    CrowdStrikeAccessConditionDTO:
      allOf:
        - $ref: '#/components/schemas/AccessConditionV2DTO'
        - type: object
          properties:
            matchLocalIP:
              type: boolean
            matchHostname:
              type: boolean
            matchMacAddress:
              type: boolean
            matchSerialNumber:
              type: boolean
            preventRestrictedFunctionalityMode:
              type: boolean
          additionalProperties: false
    CrowdStrikeIntegrationDTO:
      allOf:
        - $ref: '#/components/schemas/IntegrationV2DTO'
        - type: object
          properties:
            clientId:
              type:
                - 'null'
                - string
            tokenUrl:
              type:
                - 'null'
                - string
            clientSecret:
              type:
                - 'null'
                - string
            audience:
              type:
                - 'null'
                - string
          additionalProperties: false
      description: Integration details for 3rd party data used by Access Conditions
    DiscoveryIntegrationDTO:
      required:
        - discoveryIntegrationJSON
        - endpoint
        - isActive
        - name
        - resourceSet
        - syncFrequencySeconds
        - type
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        type:
          minLength: 1
          type: string
        syncFrequencySeconds:
          maximum: 3600
          minimum: 300
          type: integer
          format: int32
        lastSync:
          type:
            - 'null'
            - string
          format: date-time
        lastSyncStatus:
          type:
            - 'null'
            - string
        endpoint:
          minLength: 1
          type: string
        discoveryIntegrationJSON:
          minLength: 1
          type: string
      additionalProperties: false
      description: Integration details for 3rd party data used by Discovery
    DiscoveryIntegrationListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Page of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP Status Code of the response
          format: int32
        recordsTotal:
          type: integer
          description: Total number of Integrations
          format: int32
        integrations:
          type:
            - 'null'
            - array
          items:
            description: Integration details for 3rd party data used by Discovery
            $ref: '#/components/schemas/DiscoveryIntegrationDTO'
          description: Page of Integrations
      additionalProperties: false
      description: Page of Integrations
    DiscoveryIntegrationPatchDTO:
      type: object
      properties:
        name:
          maxLength: 128
          type:
            - 'null'
            - string
          description: New Name for the identified entity
        description:
          type:
            - 'null'
            - string
          description: New Description for the identified entity
        isActive:
          type:
            - 'null'
            - boolean
          description: New Status for the identified entity
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
          description: New Tags for the identified entity
      additionalProperties: false
      description: Patch request for an individual Integration
    EntityMetaDTO:
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          type:
            - 'null'
            - string
        isActive:
          type: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
      additionalProperties: false
    EntityPatchDTO:
      type: object
      properties:
        name:
          maxLength: 128
          type:
            - 'null'
            - string
          description: New Name for the identified entity
        description:
          type:
            - 'null'
            - string
          description: New Description for the identified entity
        isActive:
          type:
            - 'null'
            - boolean
          description: New Status for the identified entity
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
          description: New Tags for the identified entity
      additionalProperties: false
    EventDTO:
      type: object
      properties:
        meta:
          $ref: '#/components/schemas/EventMetaDTO'
        network:
          $ref: '#/components/schemas/EventNetworkDTO'
        outcome:
          $ref: '#/components/schemas/EventOutcomeDTO'
      additionalProperties: { }
    EventListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Page of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          format: int32
        recordsTotal:
          type: integer
          format: int32
        workloadEvents:
          type:
            - 'null'
            - array
          items:
            $ref: '#/components/schemas/EventDTO'
      additionalProperties: false
    EventMetaDTO:
      type: object
      properties:
        timestamp:
          type: string
          format: date-time
        eventType:
          type:
            - 'null'
            - string
        eventId:
          type:
            - 'null'
            - string
        resourceSetId:
          type: string
          format: uuid
        policyId:
          type:
            - 'null'
            - string
        action:
          type:
            - 'null'
            - string
        connectionId:
          type:
            - 'null'
            - string
        severity:
          type:
            - 'null'
            - string
      additionalProperties: { }
    EventNetworkDTO:
      type: object
      properties:
        clientWorkloadIP:
          type:
            - 'null'
            - string
        clientWorkloadPort:
          type: integer
          format: int32
        serverWorkloadIP:
          type:
            - 'null'
            - string
        serverWorkloadPort:
          type:
            - 'null'
            - integer
          format: int32
        proxyPort:
          type:
            - 'null'
            - integer
          format: int32
      additionalProperties: { }
    EventOutcomeDTO:
      type: object
      properties:
        result:
          type:
            - 'null'
            - string
      additionalProperties: { }
    EventResultDTO:
      type: object
      properties:
        reason:
          type:
            - 'null'
            - string
        attribute:
          type:
            - 'null'
            - string
        expectedValue:
          type:
            - 'null'
            - string
        actualValue:
          type:
            - 'null'
            - string
      additionalProperties: false
    GenericResponseDTO:
      type: object
      properties:
        success:
          type: boolean
          description: 'True if the API call was successful, False otherwise'
        message:
          type:
            - 'null'
            - string
          description: Message to indicate why the API call failed
        id:
          type: integer
          description: Unique identifier of the API response
          format: int32
      additionalProperties: false
      description: DTO for a Generic API Response
    GeoIPAccessConditionDTO:
      allOf:
        - $ref: '#/components/schemas/AccessConditionV2DTO'
        - type: object
          properties:
            locations:
              type:
                - 'null'
                - array
              items:
                $ref: '#/components/schemas/GeoIPAccessConditionLocationDTO'
          additionalProperties: false
    GeoIPAccessConditionLocationDTO:
      required:
        - shortName
      type: object
      properties:
        id:
          type: integer
          format: int32
        shortName:
          minLength: 1
          type: string
        alpha2Code:
          type:
            - 'null'
            - string
        subdivisions:
          type:
            - 'null'
            - array
          items:
            $ref: '#/components/schemas/GeoIPAccessConditionSubdivisionDTO'
        geoIPAccessConditionId:
          type: integer
          format: int32
      additionalProperties: false
    GeoIPAccessConditionSubdivisionDTO:
      required:
        - name
      type: object
      properties:
        id:
          type: integer
          format: int32
        name:
          minLength: 1
          type: string
        alpha2Code:
          type:
            - 'null'
            - string
        subdivisionCode:
          type:
            - 'null'
            - string
        geoIPAccessConditionLocationId:
          type: integer
          format: int32
      additionalProperties: false
    GeoIPIntegrationDTO:
      allOf:
        - $ref: '#/components/schemas/IntegrationV2DTO'
        - type: object
          additionalProperties: false
      description: Integration details for 3rd party data used by Access Conditions
    GetPolicyDTO:
      required:
        - isActive
        - name
        - resourceSet
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        clientWorkload:
          description: Client Workload associated with this Access Policy
          $ref: '#/components/schemas/EntityMetaDTO'
        serverWorkload:
          description: Server Workload associated with this Access Policy
          $ref: '#/components/schemas/EntityMetaDTO'
        trustProviders:
          type:
            - 'null'
            - array
          items:
            $ref: '#/components/schemas/EntityMetaDTO'
          description: Trust Providers associated with this Access Policy
        credentialProviders:
          type:
            - 'null'
            - array
          items:
            $ref: '#/components/schemas/EntityMetaDTO'
          description: Credential Providers associated with this Access Policy
        accessConditions:
          type:
            - 'null'
            - array
          items:
            $ref: '#/components/schemas/EntityMetaDTO'
          description: Access Conditions associated with this Access Policy
        contentSecurity:
          type:
            - 'null'
            - array
          items:
            $ref: '#/components/schemas/EntityMetaDTO'
          description: Content Security associated with this Access Policy
      additionalProperties: false
      description: Individual Access Policy
    GetPolicyDTOListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Current page number of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP StatusCode for the current result
          format: int32
        recordsTotal:
          type: integer
          description: Total number of entities available
          format: int32
        entities:
          type:
            - 'null'
            - array
          items:
            description: Individual Access Policy
            $ref: '#/components/schemas/GetPolicyDTO'
          description: Page of entities for this request
      additionalProperties: false
    GetSignInPolicyDTO:
      type: object
      properties:
        ssoRequired:
          type: boolean
        mfaRequired:
          type: boolean
      additionalProperties: false
    GitLabCredentialProviderIntegrationDTO:
      allOf:
        - $ref: '#/components/schemas/CredentialProviderIntegrationDTO'
        - required:
            - url
          type: object
          properties:
            url:
              minLength: 1
              pattern: '^https://[a-zA-Z0-9\-.]+\.[a-zA-Z]{2,}(:\d+)?(/\S*)?$'
              type: string
            userId:
              type:
                - 'null'
                - string
            topLevelGroupId:
              type:
                - 'null'
                - string
            personalAccessToken:
              type:
                - 'null'
                - string
          additionalProperties: false
      description: Individual Credential Provider Integration
    GuidStringKeyValuePairDto:
      type: object
      properties:
        key:
          type: string
          format: uuid
        value:
          type:
            - 'null'
            - string
      additionalProperties: false
    HealthDTO:
      type: object
      properties:
        status:
          type:
            - 'null'
            - string
          description: Aembit Health Status
        version:
          type:
            - 'null'
            - string
          description: Aembit Cloud Version
        gitSHA:
          type:
            - 'null'
            - string
          description: Aembit Cloud Version Git SHA
        host:
          type:
            - 'null'
            - string
          description: Aembit Cloud Requested Hostname
        user:
          type:
            - 'null'
            - string
          description: Aembit Cloud Authenticated User Email
        userFullName:
          type:
            - 'null'
            - string
          description: Aembit Cloud Authenticated User Full Name
        tenant:
          type:
            - 'null'
            - string
          description: Aembit Cloud Tenant ID
        sessionExpiresAt:
          type:
            - 'null'
            - string
          description: Aembit Cloud Session Expiration
      additionalProperties: false
      description: Aembit Health Status
    IntegrationDTO:
      required:
        - endpoint
        - integrationJSON
        - isActive
        - name
        - resourceSet
        - syncFrequencySeconds
        - type
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        type:
          minLength: 1
          type: string
        syncFrequencySeconds:
          maximum: 3600
          minimum: 300
          type: integer
          format: int32
        lastSync:
          type:
            - 'null'
            - string
          format: date-time
        lastSyncStatus:
          type:
            - 'null'
            - string
        endpoint:
          minLength: 1
          type: string
        integrationJSON:
          type: object
          additionalProperties:
            $ref: '#/components/schemas/JsonNode'
        accessConditionsCount:
          type: integer
          format: int32
      additionalProperties: false
      description: Integration details for 3rd party data used by Access Conditions
    IntegrationDTOIntegrationListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Page of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP Status Code of the response
          format: int32
        recordsTotal:
          type: integer
          description: Total number of Integrations
          format: int32
        integrations:
          type:
            - 'null'
            - array
          items:
            description: Integration details for 3rd party data used by Access Conditions
            $ref: '#/components/schemas/IntegrationDTO'
          description: Page of Integrations
      additionalProperties: false
      description: Page of Integrations
    IntegrationPatchDTO:
      type: object
      properties:
        name:
          maxLength: 128
          type:
            - 'null'
            - string
          description: New Name for the identified entity
        description:
          type:
            - 'null'
            - string
          description: New Description for the identified entity
        isActive:
          type:
            - 'null'
            - boolean
          description: New Status for the identified entity
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
          description: New Tags for the identified entity
      additionalProperties: false
      description: Patch request for an individual Integration
    IntegrationV2DTO:
      required:
        - endpoint
        - integrationType
        - isActive
        - name
        - resourceSet
        - syncFrequencySeconds
        - type
      type: object
      properties:
        integrationType:
          type:
            - 'null'
            - string
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        type:
          minLength: 1
          type: string
        syncFrequencySeconds:
          maximum: 3600
          minimum: 300
          type: integer
          format: int32
        lastSync:
          type:
            - 'null'
            - string
          format: date-time
        lastSyncStatus:
          type:
            - 'null'
            - string
        endpoint:
          minLength: 1
          type: string
        accessConditionsCount:
          type: integer
          format: int32
      additionalProperties: false
      description: Integration details for 3rd party data used by Access Conditions
      discriminator:
        propertyName: integrationType
        mapping:
          CrowdStrike: '#/components/schemas/CrowdStrikeIntegrationDTO'
          WizIntegrationApi: '#/components/schemas/WizIntegrationDTO'
          AembitGeoIPCondition: '#/components/schemas/GeoIPIntegrationDTO'
          AembitTimeCondition: '#/components/schemas/TimeIntegrationDTO'
    IntegrationV2DTOIntegrationListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Page of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP Status Code of the response
          format: int32
        recordsTotal:
          type: integer
          description: Total number of Integrations
          format: int32
        integrations:
          type:
            - 'null'
            - array
          items:
            oneOf:
              - $ref: '#/components/schemas/IntegrationV2DTO'
              - $ref: '#/components/schemas/CrowdStrikeIntegrationDTO'
              - $ref: '#/components/schemas/WizIntegrationDTO'
              - $ref: '#/components/schemas/GeoIPIntegrationDTO'
              - $ref: '#/components/schemas/TimeIntegrationDTO'
            description: Integration details for 3rd party data used by Access Conditions
          description: Page of Integrations
      additionalProperties: false
      description: Page of Integrations
    JWTClaimDTO:
      type: object
      properties:
        key:
          type:
            - 'null'
            - string
        value:
          type:
            - 'null'
            - string
        valueType:
          type:
            - 'null'
            - string
      additionalProperties: false
    JsonNode:
      type: object
      properties:
        options:
          $ref: '#/components/schemas/JsonNodeOptions'
        parent:
          $ref: '#/components/schemas/JsonNode'
        root:
          $ref: '#/components/schemas/JsonNode'
      additionalProperties: false
    JsonNodeOptions:
      type: object
      properties:
        propertyNameCaseInsensitive:
          type: boolean
      additionalProperties: false
    ListCredentialProviderIntegrationDTO:
      required:
        - isActive
        - name
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        url:
          type:
            - 'null'
            - string
        type:
          $ref: '#/components/schemas/CredentialProviderIntegrationType'
        status:
          type:
            - 'null'
            - string
        lastOperationTimestamp:
          type:
            - 'null'
            - string
          format: date-time
      additionalProperties: false
      description: Page of Credential Provider Integrations
    ListCredentialProviderIntegrationDTOListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Current page number of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP StatusCode for the current result
          format: int32
        recordsTotal:
          type: integer
          description: Total number of entities available
          format: int32
        entities:
          type:
            - 'null'
            - array
          items:
            description: Page of Credential Provider Integrations
            $ref: '#/components/schemas/ListCredentialProviderIntegrationDTO'
          description: Page of entities for this request
      additionalProperties: false
    LogStreamAWSS3DestinationDTO:
      allOf:
        - description: Individual Log Stream
          $ref: '#/components/schemas/LogStreamDTO'
        - required:
            - s3BucketName
            - s3BucketRegion
          type: object
          properties:
            s3BucketRegion:
              maxLength: 30
              minLength: 8
              pattern: '^[a-z\-\d]+$'
              type: string
            s3BucketName:
              maxLength: 63
              minLength: 3
              pattern: '^[a-z\d]+[a-z\-\.\d]*[a-z\d]+$'
              type: string
            s3PathPrefix:
              maxLength: 800
              minLength: 3
              pattern: '^[^\\\{\}\^\%`"''~#\[\]\>\<\|\\\x80-\xff]*$'
              type:
                - 'null'
                - string
          additionalProperties: false
      description: Individual Log Stream
    LogStreamCrowdstrikeDestinationDTO:
      allOf:
        - $ref: '#/components/schemas/LogStreamDTO'
        - required:
            - apiKey
            - hecHostPort
            - hecSourceName
          type: object
          properties:
            hecHostPort:
              minLength: 1
              pattern: '^[a-zA-Z0-9\-\.]+:[0-9]{1,5}$'
              type: string
            apiKey:
              minLength: 1
              pattern: '^[a-zA-Z0-9-]{32,40}$'
              type: string
            hecSourceName:
              minLength: 1
              type: string
            tls:
              type: boolean
            tlsVerification:
              type:
                - 'null'
                - string
          additionalProperties: false
      description: Individual Log Stream
    LogStreamDTO:
      required:
        - dataType
        - isActive
        - name
        - type
      type: object
      properties:
        type:
          description: Log Stream Destination Type
          $ref: '#/components/schemas/LogStreamDestinationType'
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        id:
          type: integer
          format: int32
        dataType:
          minLength: 1
          type: string
          description: 'Log Stream Data Type (e.g. AuditLogs, etc.)'
        inProgTransactionCount:
          type: integer
          description: Log Stream In Progress Transaction Count
          format: int32
        completedTransactionCount:
          type: integer
          description: Log Stream Completed Transaction Count
          format: int32
        erroredTransactionCount:
          type: integer
          description: Log Stream Errored Transaction Count
          format: int32
      additionalProperties: false
      description: Individual Log Stream
      discriminator:
        propertyName: type
        mapping:
          AwsS3Bucket: '#/components/schemas/LogStreamAWSS3DestinationDTO'
          GcsBucket: '#/components/schemas/LogStreamGCSBucketDestinationDTO'
          CrowdstrikeHttpEventCollector: '#/components/schemas/LogStreamCrowdstrikeDestinationDTO'
          SplunkHttpEventCollector: '#/components/schemas/LogStreamSplunkDestinationDTO'
    LogStreamDestinationType:
      enum:
        - AwsS3Bucket
        - GcsBucket
        - SplunkHttpEventCollector
        - CrowdstrikeHttpEventCollector
      type: string
    LogStreamGCSBucketDestinationDTO:
      allOf:
        - $ref: '#/components/schemas/LogStreamDTO'
        - type: object
          properties:
            gcsBucketName:
              pattern: '(^[a-z\-_\d]{3,63}$)|(^(?=.*\.)[a-z\-\._\d]{3,222}$)'
              type:
                - 'null'
                - string
            gcsPathPrefix:
              maxLength: 256
              minLength: 0
              pattern: '^[^\#\[\]\*\?\:\"\<\>\|]*$'
              type:
                - 'null'
                - string
            audience:
              maxLength: 256
              minLength: 0
              type:
                - 'null'
                - string
            serviceAccountEmail:
              maxLength: 90
              minLength: 0
              type:
                - 'null'
                - string
            tokenLifetime:
              maximum: 3600
              minimum: 15
              type: integer
              format: int32
          additionalProperties: false
      description: Individual Log Stream
    LogStreamListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Page of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP Status Code of the response
          format: int32
        recordsTotal:
          type: integer
          description: Total number of Log Streams
          format: int32
        logStreams:
          type:
            - 'null'
            - array
          items:
            oneOf:
              - description: Individual Log Stream
                $ref: '#/components/schemas/LogStreamAWSS3DestinationDTO'
              - $ref: '#/components/schemas/LogStreamGCSBucketDestinationDTO'
              - $ref: '#/components/schemas/LogStreamCrowdstrikeDestinationDTO'
              - $ref: '#/components/schemas/LogStreamSplunkDestinationDTO'
            description: Individual Log Stream
          description: Page of Log Streams
      additionalProperties: false
      description: Page of Log Streams
    LogStreamPatchDTO:
      type: object
      properties:
        name:
          maxLength: 128
          type:
            - 'null'
            - string
          description: New Name for the identified entity
        description:
          type:
            - 'null'
            - string
          description: New Description for the identified entity
        isActive:
          type:
            - 'null'
            - boolean
          description: New Status for the identified entity
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
          description: New Tags for the identified entity
      additionalProperties: false
      description: Patch Request for an individual of Log Stream
    LogStreamSplunkDestinationDTO:
      allOf:
        - $ref: '#/components/schemas/LogStreamDTO'
        - required:
            - authenticationToken
            - hecHostPort
            - hecSourceName
          type: object
          properties:
            hecHostPort:
              minLength: 1
              pattern: '^[a-zA-Z0-9\-\.]+:[0-9]{1,5}$'
              type: string
            authenticationToken:
              minLength: 1
              pattern: '^[a-fA-F0-9]{8}\-[a-fA-F0-9]{4}\-[a-fA-F0-9]{4}\-[a-fA-F0-9]{4}\-[a-fA-F0-9]{12}$'
              type: string
            hecSourceName:
              minLength: 1
              type: string
            tls:
              type: boolean
            tlsVerification:
              type:
                - 'null'
                - string
          additionalProperties: false
      description: Individual Log Stream
    MFASignInPolicyDTO:
      type: object
      properties:
        mfaRequired:
          type: boolean
      additionalProperties: false
    NetworkDTO:
      required:
        - proxyPort
        - sourceIP
        - sourcePort
        - transportProtocol
      type: object
      properties:
        sourceIP:
          minLength: 1
          type: string
        sourcePort:
          type: integer
          format: int32
        transportProtocol:
          minLength: 1
          type: string
        proxyPort:
          type: integer
          format: int32
        targetHost:
          type:
            - 'null'
            - string
        targetPort:
          type: integer
          format: int32
      additionalProperties: false
    OidcClientAuthType:
      enum:
        - KeyPair
        - ClientSecret
      type: string
    OidcIdentityProviderDTO:
      allOf:
        - $ref: '#/components/schemas/SSOIdentityProviderDTO'
        - required:
            - authType
            - clientId
            - oidcBaseURL
            - scopes
          type: object
          properties:
            type:
              type:
                - 'null'
                - string
              description: Type of the remote SSO Identity Provider (e.g. SAMLv2 (default) or OIDCv1)
            oidcBaseURL:
              minLength: 1
              type: string
            clientId:
              minLength: 1
              type: string
            scopes:
              minLength: 1
              type: string
            authType:
              $ref: '#/components/schemas/OidcClientAuthType'
            clientSecret:
              type:
                - 'null'
                - string
            pkceRequired:
              type: boolean
            aembitRedirectUrl:
              type:
                - 'null'
                - string
            aembitJwksUrl:
              type:
                - 'null'
                - string
          additionalProperties: false
      description: Individual SSO Identity Provider
    PatchPolicyV2DTO:
      type: object
      properties:
        name:
          maxLength: 128
          type:
            - 'null'
            - string
          description: New Name for the identified entity
        description:
          type:
            - 'null'
            - string
          description: New Description for the identified entity
        isActive:
          type:
            - 'null'
            - boolean
          description: New Status for the identified entity
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
          description: New Tags for the identified entity
        clientWorkload:
          type: string
          description: Client Workload associated with this Access Policy
          format: uuid
        serverWorkload:
          type: string
          description: Server Workload associated with this Access Policy
          format: uuid
        credentialProviders:
          type:
            - 'null'
            - array
          items:
            description: Access Policy Credential Mappings
            $ref: '#/components/schemas/PolicyCredentialMappingDTO'
          description: Credential Providers associated with this Access Policy
        trustProviders:
          type:
            - 'null'
            - array
          items:
            type: string
            format: uuid
          description: Trust Providers associated with this Access Policy
        accessConditions:
          type:
            - 'null'
            - array
          items:
            type: string
            format: uuid
          description: Access Conditions associated with this Access Policy
        contentSecurity:
          type:
            - 'null'
            - array
          items:
            type: string
            format: uuid
          description: Content Security associated with this Access Policy
      additionalProperties: false
      description: Patch request for an Access Policy
    PermissionDTO:
      type: object
      properties:
        name:
          type:
            - 'null'
            - string
          description: Name of the Permission Target
        read:
          type: boolean
          description: 'True if this permission allows access to Read the Permission Target, False otherwise'
        write:
          type: boolean
          description: 'True if this permission allows access to Write the Permission Target, False otherwise'
        isWritable:
          type: boolean
          description: 'True if this permission allows access to Write the Permission Target, False otherwise'
        isReadable:
          type: boolean
          description: 'True if this permission allows access to Read the Permission Target, False otherwise'
        accessLevel:
          type:
            - 'null'
            - string
          description: Description of the Permission level
          readOnly: true
      additionalProperties: false
      description: Individual Permission details
    PolicyCredentialMappingDTO:
      required:
        - credentialProviderId
        - mappingType
      type: object
      properties:
        credentialProviderId:
          type: string
          description: CredentialProviderId
          format: uuid
        mappingType:
          description: Mapping Type
          $ref: '#/components/schemas/PolicyCredentialProviderMappingTypes'
        accessKeyId:
          maxLength: 256
          pattern: '^[A-Z0-9]*$'
          type:
            - 'null'
            - string
          description: AWS Access Key Id
        accountName:
          maxLength: 256
          pattern: '^[\p{L}a-zA-Z0-9][\p{L}a-zA-Z0-9._-]*$'
          type:
            - 'null'
            - string
          description: Snowflake Username
        headerName:
          maxLength: 256
          pattern: '^[\p{L}a-zA-Z0-9][\p{L}a-zA-Z0-9._-]*$'
          type:
            - 'null'
            - string
          description: Header Name
        headerValue:
          maxLength: 256
          pattern: '^[\p{L}a-zA-Z0-9][\p{L}a-zA-Z0-9._-]*$'
          type:
            - 'null'
            - string
          description: Header Value
        httpbodyFieldPath:
          maxLength: 256
          pattern: '^[\p{L}a-zA-Z0-9][\p{L}a-zA-Z0-9._-]*$'
          type:
            - 'null'
            - string
          description: HttpBody Field Path
        httpbodyFieldValue:
          maxLength: 256
          pattern: '^[\p{L}a-zA-Z0-9][\p{L}a-zA-Z0-9._-]*$'
          type:
            - 'null'
            - string
          description: HttpBody Field Value
      additionalProperties: false
      description: Access Policy Credential Mappings
    PolicyCredentialProviderMappingTypes:
      enum:
        - None
        - AccountName
        - HttpHeader
        - HttpBody
        - AccessKeyId
      type: string
    PolicyDTO:
      required:
        - clientWorkload
        - isActive
        - name
        - resourceSet
        - serverWorkload
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        credentialProvider:
          type:
            - 'null'
            - string
          description: Credential Provider associated with this Access Policy
          format: uuid
        trustProviders:
          type:
            - 'null'
            - array
          items:
            type: string
            format: uuid
          description: Trust Providers associated with this Access Policy
        accessConditions:
          type:
            - 'null'
            - array
          items:
            type: string
            format: uuid
          description: Access Conditions associated with this Access Policy
        contentSecurity:
          type:
            - 'null'
            - array
          items:
            type: string
            format: uuid
          description: Content Security associated with this Access Policy
        clientWorkload:
          type: string
          description: Client Workload associated with this Access Policy
          format: uuid
        serverWorkload:
          type: string
          description: Server Workload associated with this Access Policy
          format: uuid
        clientWorkloadDetails:
          description: Details of the Client Workload associated with this Access Policy
          $ref: '#/components/schemas/WorkloadExternalDTO'
        serverWorkloadDetails:
          description: Details of the Server Workload associated with this Access Policy
          $ref: '#/components/schemas/WorkloadExternalDTO'
        policyNotes:
          type:
            - 'null'
            - array
          items:
            description: Individual Note created for an Access Policy
            $ref: '#/components/schemas/PolicyNoteDTO'
          description: Policy Notes for this Access Policy
      additionalProperties: false
      description: Individual Access Policy
    PolicyExternalDTO:
      required:
        - isActive
        - name
        - resourceSet
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        clientWorkload:
          description: Details of the Client Workload associated with this Access Policy
          $ref: '#/components/schemas/ClientWorkloadExternalDTO'
        trustProviders:
          type:
            - 'null'
            - array
          items:
            description: Individual Trust Provider
            $ref: '#/components/schemas/TrustProviderDTO'
          description: Details of the Trust Providers associated with this Access Policy
        accessConditions:
          type:
            - 'null'
            - array
          items:
            description: DTO of an individual Access Condition for enforcement during Access Policy evaluation
            $ref: '#/components/schemas/AccessConditionDTO'
          description: Details of the Access Conditions associated with this Access Policy
        contentSecurity:
          type:
            - 'null'
            - array
          items:
            oneOf:
              - description: Individual Content Security
                $ref: '#/components/schemas/ContentSecurityDTO'
              - $ref: '#/components/schemas/CrowdStrikeAIDRContentSecurityDTO'
            description: Individual Content Security
          description: Details of the Content Security associated with this Access Policy
        credentialProvider:
          description: Credential Provider associated with this Access Policy
          $ref: '#/components/schemas/CredentialProviderDTO'
        serverWorkload:
          description: Details of the Server Workload associated with this Access Policy
          $ref: '#/components/schemas/ServerWorkloadExternalDTO'
        policyNotes:
          type:
            - 'null'
            - array
          items:
            description: Individual Note created for an Access Policy
            $ref: '#/components/schemas/PolicyNoteDTO'
          description: Policy Notes for this Access Policy
      additionalProperties: false
      description: Individual Access Policy
    PolicyListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Page of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP Status Code of the response
          format: int32
        recordsTotal:
          type: integer
          description: Total number of Access Policies
          format: int32
        accessPolicies:
          type:
            - 'null'
            - array
          items:
            description: Individual Access Policy
            $ref: '#/components/schemas/PolicyExternalDTO'
          description: Page of Access Policies
      additionalProperties: false
      description: Page of Access Policies
    PolicyNoteDTO:
      required:
        - note
      type: object
      properties:
        note:
          maxLength: 1024
          minLength: 1
          type: string
          description: Note added to an Access Policy by a User
        createdAt:
          type: string
          description: Timestamp the Note was created
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
          description: Email address of the User who created the Access Policy Note
      additionalProperties: false
      description: Individual Note created for an Access Policy
    PolicyNoteDTOListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Current page number of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP StatusCode for the current result
          format: int32
        recordsTotal:
          type: integer
          description: Total number of entities available
          format: int32
        entities:
          type:
            - 'null'
            - array
          items:
            description: Individual Note created for an Access Policy
            $ref: '#/components/schemas/PolicyNoteDTO'
          description: Page of entities for this request
      additionalProperties: false
    PolicyPatchDTO:
      type: object
      properties:
        name:
          maxLength: 128
          type:
            - 'null'
            - string
          description: New Name for the identified entity
        description:
          type:
            - 'null'
            - string
          description: New Description for the identified entity
        isActive:
          type:
            - 'null'
            - boolean
          description: New Status for the identified entity
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
          description: New Tags for the identified entity
        clientWorkload:
          type: string
          description: Client Workload associated with this Access Policy
          format: uuid
        serverWorkload:
          type: string
          description: Server Workload associated with this Access Policy
          format: uuid
        credentialProvider:
          type:
            - 'null'
            - string
          description: Credential Provider associated with this Access Policy
          format: uuid
        trustProviders:
          type:
            - 'null'
            - array
          items:
            type: string
            format: uuid
          description: Trust Providers associated with this Access Policy
        accessConditions:
          type:
            - 'null'
            - array
          items:
            type: string
            format: uuid
          description: Access Conditions associated with this Access Policy
        contentSecurity:
          type:
            - 'null'
            - array
          items:
            type: string
            format: uuid
          description: Content Security associated with this Access Policy
      additionalProperties: false
      description: Patch request for an Access Policy
    PublicKeyValidationDTO:
      type: object
      properties:
        isValidContent:
          type: boolean
          description: 'True if the Public Key was valid, False otherwise'
        thumbprint:
          type:
            - 'null'
            - string
          description: Thumbprint of the Public Key
        expirationDate:
          type:
            - 'null'
            - string
          description: Expiration of the Public Key Certificate
          format: date-time
        expirationDateString:
          type:
            - 'null'
            - string
          description: Expiration of the Public Key Certificate in String Format
        certificateSubject:
          type:
            - 'null'
            - string
          description: Subject of the Public Key Certificate
        serialNumber:
          type:
            - 'null'
            - string
          description: Serial Number of the Public Key Certificate
        message:
          type:
            - 'null'
            - string
          description: Message describing why the Public Key was not valid if IsValidContent is False
        pemType:
          type:
            - 'null'
            - string
          description: Certificate or Public Key
      additionalProperties: false
      description: Response to a request for Public Key Validation
    RequestMetadaAembitDTO:
      type: object
      properties:
        clientId:
          type:
            - 'null'
            - string
      additionalProperties: false
    RequestMetadaAwsDTO:
      type: object
      properties:
        accountId:
          type:
            - 'null'
            - string
        instanceId:
          type:
            - 'null'
            - string
        region:
          type:
            - 'null'
            - string
        ecs:
          $ref: '#/components/schemas/RequestMetadaEcsDTO'
        lambda:
          $ref: '#/components/schemas/RequestMetadaLambdaDTO'
      additionalProperties: false
    RequestMetadaAzureDTO:
      type: object
      properties:
        vmId:
          type:
            - 'null'
            - string
        subscriptionId:
          type:
            - 'null'
            - string
      additionalProperties: false
    RequestMetadaEcsDTO:
      type: object
      properties:
        taskFamily:
          type:
            - 'null'
            - string
        serviceName:
          type:
            - 'null'
            - string
      additionalProperties: false
    RequestMetadaGcpDTO:
      type: object
      properties:
        serviceAccount:
          type:
            - 'null'
            - string
      additionalProperties: false
    RequestMetadaGithubDTO:
      type: object
      properties:
        repository:
          type:
            - 'null'
            - string
        subject:
          type:
            - 'null'
            - string
      additionalProperties: false
    RequestMetadaGitlabDTO:
      type: object
      properties:
        namespacePath:
          type:
            - 'null'
            - string
        projectPath:
          type:
            - 'null'
            - string
        refPath:
          type:
            - 'null'
            - string
        subject:
          type:
            - 'null'
            - string
      additionalProperties: false
    RequestMetadaHostDTO:
      type: object
      properties:
        hostname:
          type:
            - 'null'
            - string
      additionalProperties: false
    RequestMetadaKubernetesDTO:
      type: object
      properties:
        namespace:
          type:
            - 'null'
            - string
        podName:
          type:
            - 'null'
            - string
        serviceAccountName:
          type:
            - 'null'
            - string
        serviceAccountUID:
          type:
            - 'null'
            - string
      additionalProperties: false
    RequestMetadaLambdaDTO:
      type: object
      properties:
        arn:
          type:
            - 'null'
            - string
      additionalProperties: false
    RequestMetadaNetworkDTO:
      type: object
      properties:
        sourceIP:
          type:
            - 'null'
            - string
      additionalProperties: false
    RequestMetadaOAuthDTO:
      type: object
      properties:
        redirectUri:
          type:
            - 'null'
            - string
      additionalProperties: false
    RequestMetadaProcessDTO:
      type: object
      properties:
        name:
          type:
            - 'null'
            - string
        userName:
          type:
            - 'null'
            - string
        exePath:
          type:
            - 'null'
            - string
        commandLine:
          type:
            - 'null'
            - string
      additionalProperties: false
    RequestMetadaTerraformDTO:
      type: object
      properties:
        workspaceId:
          type:
            - 'null'
            - string
        organizationId:
          type:
            - 'null'
            - string
        projectId:
          type:
            - 'null'
            - string
      additionalProperties: false
    RequestMetadataOidcDTO:
      type: object
      properties:
        sub:
          type:
            - 'null'
            - string
        aud:
          type:
            - 'null'
            - string
        iss:
          type:
            - 'null'
            - string
      additionalProperties: false
    ResourceSetDTO:
      required:
        - isActive
        - name
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        serverWorkloadCount:
          type:
            - 'null'
            - integer
          description: Server Workloads associated with this Resource Set
          format: int32
        clientWorkloadCount:
          type:
            - 'null'
            - integer
          description: Client Workloads associated with this Resource Set
          format: int32
        accessPolicyCount:
          type:
            - 'null'
            - integer
          description: Access Policies associated with this Resource Set
          format: int32
        trustProviderCount:
          type:
            - 'null'
            - integer
          description: Trust Providers associated with this Resource Set
          format: int32
        accessConditionCount:
          type:
            - 'null'
            - integer
          description: Access Conditions associated with this Resource Set
          format: int32
        credentialProviderCount:
          type:
            - 'null'
            - integer
          description: Credential Providers associated with this Resource Set
          format: int32
        roles:
          type:
            - 'null'
            - array
          items:
            type: string
            format: uuid
          description: Roles associated with this Resource Set
        rolesDetails:
          type:
            - 'null'
            - array
          items:
            description: Individual Role
            $ref: '#/components/schemas/RoleDTO'
          description: Details of the Roles associated with this Resource Set
        users:
          type:
            - 'null'
            - array
          items:
            type: string
          description: Users associated with this Resource Set
        standaloneCertificateAuthority:
          type:
            - 'null'
            - string
          description: Standalone Certificate Authority associated with this Resource Set
          format: uuid
      additionalProperties: false
      description: Individual Resource Set
    ResourceSetDTOListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Current page number of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP StatusCode for the current result
          format: int32
        recordsTotal:
          type: integer
          description: Total number of entities available
          format: int32
        entities:
          type:
            - 'null'
            - array
          items:
            description: Individual Resource Set
            $ref: '#/components/schemas/ResourceSetDTO'
          description: Page of entities for this request
      additionalProperties: false
    ResourceSetPatchDTO:
      type: object
      properties:
        name:
          maxLength: 128
          type:
            - 'null'
            - string
          description: New Name for the identified entity
        description:
          type:
            - 'null'
            - string
          description: New Description for the identified entity
        isActive:
          type:
            - 'null'
            - boolean
          description: New Status for the identified entity
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
          description: New Tags for the identified entity
      additionalProperties: false
      description: Patch Request for an Individual Resource Set
    RoleDTO:
      required:
        - isActive
        - name
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        usersCount:
          type: integer
          description: Number of Users associated with this Role
          format: int32
        credentialProvidersCount:
          type: integer
          description: Number of Credential Providers associated with this Role
          format: int32
        isSystem:
          type: boolean
          description: True if this is a system included Role (e.g. SuperAdmin or Auditor)
        permissions:
          type:
            - 'null'
            - array
          items:
            description: Individual Permission details
            $ref: '#/components/schemas/PermissionDTO'
          description: Permissions assigned to this Role
        resourceSets:
          type:
            - 'null'
            - array
          items:
            description: Individual Resource Set
            $ref: '#/components/schemas/ResourceSetDTO'
          description: Resource Sets assigned to this Role
      additionalProperties: false
      description: Individual Role
    RoleListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Page of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP Status Code of the response
          format: int32
        recordsTotal:
          type: integer
          description: Total number of Roles
          format: int32
        roles:
          type:
            - 'null'
            - array
          items:
            description: Individual Role
            $ref: '#/components/schemas/RoleDTO'
          description: Page of Roles
      additionalProperties: false
      description: Page of Roles
    RolePatchDTO:
      type: object
      properties:
        name:
          maxLength: 128
          type:
            - 'null'
            - string
          description: New Name for the identified entity
        description:
          type:
            - 'null'
            - string
          description: New Description for the identified entity
        isActive:
          type:
            - 'null'
            - boolean
          description: New Status for the identified entity
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
          description: New Tags for the identified entity
      additionalProperties: false
      description: Patch request for an individual Role
    RoutingDTO:
      required:
        - isActive
        - name
        - proxyUrl
        - resourceSetId
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSetId:
          type: string
          description: ID of the Resource Set related to routing
          format: uuid
        proxyUrl:
          maxLength: 255
          minLength: 1
          type: string
          description: URL of the proxy. The format is http(s)://server:port
      additionalProperties: false
      description: Individual Routing
    RoutingDTOListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Current page number of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP StatusCode for the current result
          format: int32
        recordsTotal:
          type: integer
          description: Total number of entities available
          format: int32
        entities:
          type:
            - 'null'
            - array
          items:
            description: Individual Routing
            $ref: '#/components/schemas/RoutingDTO'
          description: Page of entities for this request
      additionalProperties: false
    RoutingPatchDTO:
      type: object
      properties:
        name:
          maxLength: 128
          type:
            - 'null'
            - string
          description: New Name for the identified entity
        description:
          type:
            - 'null'
            - string
          description: New Description for the identified entity
        isActive:
          type:
            - 'null'
            - boolean
          description: New Status for the identified entity
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
          description: New Tags for the identified entity
      additionalProperties: false
      description: Patch request for an individual Routing
    SSOIdentityProviderDTO:
      required:
        - isActive
        - name
        - type
      type: object
      properties:
        type:
          minLength: 1
          type: string
          description: Type of the remote SSO Identity Provider (e.g. SAMLv2 (default) or OIDCv1)
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        ssoStatementRoleMappings:
          type:
            - 'null'
            - array
          items:
            description: Represents a mapping of an SSO attribute to an Aembit role
            $ref: '#/components/schemas/SsoStatementRoleMappingDTO'
          description: Collection of mappings of SAML attributes to Aembit roles
        userAccessEnabled:
          type: boolean
          description: Whether user access via this Identity Provider is enabled
      additionalProperties: false
      description: Individual SSO Identity Provider
      discriminator:
        propertyName: type
        mapping:
          SAMLv2: '#/components/schemas/SamlIdentityProviderDTO'
          OIDCv1: '#/components/schemas/OidcIdentityProviderDTO'
    SSOIdentityProviderDTOListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Current page number of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP StatusCode for the current result
          format: int32
        recordsTotal:
          type: integer
          description: Total number of entities available
          format: int32
        entities:
          type:
            - 'null'
            - array
          items:
            oneOf:
              - $ref: '#/components/schemas/SSOIdentityProviderDTO'
              - $ref: '#/components/schemas/SamlIdentityProviderDTO'
              - $ref: '#/components/schemas/OidcIdentityProviderDTO'
            description: Individual SSO Identity Provider
          description: Page of entities for this request
      additionalProperties: false
    SSOIdentityProviderPatchDTO:
      type: object
      properties:
        name:
          maxLength: 128
          type:
            - 'null'
            - string
          description: New Name for the identified entity
        description:
          type:
            - 'null'
            - string
          description: New Description for the identified entity
        isActive:
          type:
            - 'null'
            - boolean
          description: New Status for the identified entity
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
          description: New Tags for the identified entity
      additionalProperties: false
      description: Patch request for an individual SSO Identity Provider
    SSOSignInPolicyDTO:
      type: object
      properties:
        ssoRequired:
          type: boolean
      additionalProperties: false
    SamlIdentityProviderDTO:
      allOf:
        - $ref: '#/components/schemas/SSOIdentityProviderDTO'
        - type: object
          properties:
            entityId:
              type:
                - 'null'
                - string
              description: SAML Entity ID of the remote SSO Identity Provider
            metadataUrl:
              pattern: https://.*
              type:
                - 'null'
                - string
              description: Metadata URL of the remote SSO Identity Provider
            metadataXml:
              type:
                - 'null'
                - string
              description: Metadata XML content of the remote SSO Identity Provider
            serviceProviderEntityId:
              type:
                - 'null'
                - string
            serviceProviderSsoUrl:
              type:
                - 'null'
                - string
          additionalProperties: false
      description: Individual SSO Identity Provider
    ServerWorkloadExternalDTO:
      required:
        - isActive
        - name
        - resourceSet
        - serviceEndpoint
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        serviceEndpoint:
          description: Service Endpoint of the Server Workload
          $ref: '#/components/schemas/WorkloadServiceEndpointDTO'
        type:
          type:
            - 'null'
            - string
          description: Type of Server Workload
        accessPolicyCount:
          type: integer
          description: Access Policies associated with this Server Workload
          format: int32
      additionalProperties: false
      description: Individual Server Workload
    ServerWorkloadListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Page of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          format: int32
        recordsTotal:
          type: integer
          format: int32
        serverWorkloads:
          type:
            - 'null'
            - array
          items:
            description: Individual Server Workload
            $ref: '#/components/schemas/ServerWorkloadExternalDTO'
      additionalProperties: false
      description: Page of Server Workloads
    SettingDTO:
      required:
        - name
        - value
      type: object
      properties:
        name:
          minLength: 1
          type: string
        value:
          minLength: 1
          type: string
      additionalProperties: false
    SsoStatementRoleMappingDTO:
      type: object
      properties:
        attributeName:
          type:
            - 'null'
            - string
          description: SSO Attribute name
        attributeValue:
          type:
            - 'null'
            - string
          description: SSO Attribute value
        roleExternalId:
          type: string
          description: Aembit Role ID
          format: uuid
      additionalProperties: false
      description: Represents a mapping of an SSO attribute to an Aembit role
    StandaloneCertificatePatchDTO:
      type: object
      properties:
        name:
          maxLength: 128
          type:
            - 'null'
            - string
          description: New Name for the identified entity
        description:
          type:
            - 'null'
            - string
          description: New Description for the identified entity
        isActive:
          type:
            - 'null'
            - boolean
          description: New Status for the identified entity
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
          description: New Tags for the identified entity
        leafLifetime:
          type:
            - 'null'
            - integer
          format: int32
      additionalProperties: false
      description: Patch Request for an Individual Standalone Certificate Authority
    StandaloneCertificateRequestDTO:
      required:
        - isActive
        - leafLifetime
        - name
        - resourceSet
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        leafLifetime:
          type: integer
          description: Leaf certificate lifetime value for this Standalone Certificate Authority
          format: int32
      additionalProperties: false
      description: Individual Standalone Certificate Authority
    StandaloneCertificateResponseDTO:
      required:
        - isActive
        - leafLifetime
        - name
        - resourceSet
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        leafLifetime:
          type: integer
          description: Leaf certificate lifetime value for this Standalone Certificate Authority
          format: int32
        notBefore:
          type: string
          description: 'Not before value of the Root CA for this Standalone Certificate Authority '
          format: date-time
        notAfter:
          type: string
          description: Not after value of the Root CA for this Standalone Certificate Authority
          format: date-time
        clientWorkloadCount:
          type:
            - 'null'
            - integer
          description: Client Workloads associated with this Standalone Certificate Authority
          format: int32
      additionalProperties: false
      description: Individual Standalone Certificate Authority
    StandaloneCertificateResponseDTOListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Current page number of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP StatusCode for the current result
          format: int32
        recordsTotal:
          type: integer
          description: Total number of entities available
          format: int32
        entities:
          type:
            - 'null'
            - array
          items:
            description: Individual Standalone Certificate Authority
            $ref: '#/components/schemas/StandaloneCertificateResponseDTO'
          description: Page of entities for this request
      additionalProperties: false
    StringStringKeyValuePair:
      type: object
      properties:
        key:
          type:
            - 'null'
            - string
        value:
          type:
            - 'null'
            - string
      additionalProperties: false
    TagDTO:
      required:
        - key
        - value
      type: object
      properties:
        key:
          minLength: 1
          type: string
          description: Tag Key
        value:
          minLength: 1
          type: string
          description: Tag Key Value
      additionalProperties: false
      description: Aembit Entity Tag Details
    TimeAccessConditionDTO:
      allOf:
        - $ref: '#/components/schemas/AccessConditionV2DTO'
        - type: object
          properties:
            schedule:
              type:
                - 'null'
                - array
              items:
                $ref: '#/components/schemas/TimeAccessConditionScheduleDTO'
            timezone:
              $ref: '#/components/schemas/TimeAccessConditionTimezoneDTO'
          additionalProperties: false
    TimeAccessConditionScheduleDTO:
      type: object
      properties:
        startTime:
          type: string
          format: date-span
        endTime:
          type: string
          format: date-span
        weekDay:
          $ref: '#/components/schemas/WeekDayDTO'
      additionalProperties: false
    TimeAccessConditionTimezoneDTO:
      type: object
      properties:
        group:
          type:
            - 'null'
            - string
        label:
          type:
            - 'null'
            - string
        timezone:
          type:
            - 'null'
            - string
      additionalProperties: false
    TimeIntegrationDTO:
      allOf:
        - $ref: '#/components/schemas/IntegrationV2DTO'
        - type: object
          additionalProperties: false
      description: Integration details for 3rd party data used by Access Conditions
    TrustProviderDTO:
      required:
        - isActive
        - name
        - provider
        - resourceSet
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        id:
          type: integer
          description: Trust Provider Id
          format: int32
        provider:
          minLength: 1
          type: string
          description: Trust Provider Type
        matchRules:
          type:
            - 'null'
            - array
          items:
            description: Individual Match Rule to enforce during Trust Provider attestation
            $ref: '#/components/schemas/TrustProviderMatchRuleDTO'
          description: Trust Provider Match Rules
        certificate:
          type:
            - 'null'
            - string
          description: Trust Provider Certificate or Public Key for cryptographic attestation
        jwks:
          type:
            - 'null'
            - string
          description: Jwks Content for cryptographic attestation
        publicKeyValidation:
          description: Response to a request for Public Key Validation
          $ref: '#/components/schemas/PublicKeyValidationDTO'
        oidcUrl:
          type:
            - 'null'
            - string
          description: OIDC URL to use for retrieving JWKS Public Keys
        pemType:
          type:
            - 'null'
            - string
          description: PEM Input Type
        accessPolicyCount:
          type: integer
          description: Access Policies associated with this Trust Provider
          format: int32
        agentControllersCount:
          type: integer
          description: Agent Controllers associated with this Trust Provider
          format: int32
        agentControllerIds:
          type:
            - 'null'
            - array
          items:
            type: string
            format: uuid
          description: Agent Controller IDs associated with this Trust Provider
        isAembitTenantOidcToken:
          type: boolean
        metadataUrl:
          pattern: https://.*
          type:
            - 'null'
            - string
          description: Metadata URL of the remote SSO Identity Provider
        metadataXml:
          type:
            - 'null'
            - string
          description: Metadata XML content of the remote SSO Identity Provider
      additionalProperties: false
      description: Individual Trust Provider
    TrustProviderItemDTO:
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          type:
            - 'null'
            - string
      additionalProperties: false
    TrustProviderListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Page of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP Status Code of the response
          format: int32
        recordsTotal:
          type: integer
          description: Total number of Trust Providers
          format: int32
        trustProviders:
          type:
            - 'null'
            - array
          items:
            description: Individual Trust Provider
            $ref: '#/components/schemas/TrustProviderDTO'
          description: Page of Trust Providers
      additionalProperties: false
      description: Page of Trust Providers
    TrustProviderMatchRuleDTO:
      required:
        - attribute
        - value
      type: object
      properties:
        attribute:
          minLength: 1
          type: string
          description: Match Rule Attribute
        value:
          minLength: 1
          type: string
          description: Match Rule Attribute Value
        key:
          type:
            - 'null'
            - string
          description: Match Rule Attribute Key
      additionalProperties: false
      description: Individual Match Rule to enforce during Trust Provider attestation
    TrustProviderPatchDTO:
      type: object
      properties:
        name:
          maxLength: 128
          type:
            - 'null'
            - string
          description: New Name for the identified entity
        description:
          type:
            - 'null'
            - string
          description: New Description for the identified entity
        isActive:
          type:
            - 'null'
            - boolean
          description: New Status for the identified entity
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
          description: New Tags for the identified entity
        provider:
          type:
            - 'null'
            - string
          description: Trust Provider Type
        matchRules:
          type:
            - 'null'
            - array
          items:
            description: Individual Match Rule to enforce during Trust Provider attestation
            $ref: '#/components/schemas/TrustProviderMatchRuleDTO'
          description: Trust Provider Match Rules
        oidcUrl:
          type:
            - 'null'
            - string
          description: OIDC URL to use for retrieving JWKS Public Keys
        pemType:
          type:
            - 'null'
            - string
          description: PEM Input Type
        certificate:
          type:
            - 'null'
            - string
          description: Trust Provider Certificate or Public Key for cryptographic attestation
        jwks:
          type:
            - 'null'
            - string
          description: Jwks Content for cryptographic attestation
        symmetricKey:
          type:
            - 'null'
            - string
          description: Symmetric Key
        publicKeyValidation:
          description: Response to a request for Public Key Validation
          $ref: '#/components/schemas/PublicKeyValidationDTO'
        metadataUrl:
          pattern: https://.*
          type:
            - 'null'
            - string
          description: Metadata URL of the remote SSO Identity Provider
        metadataXml:
          type:
            - 'null'
            - string
          description: Metadata XML content of the remote SSO Identity Provider
      additionalProperties: false
      description: Patch request for an individual Trust Provider
    TrustProviderSecretDTO:
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          type:
            - 'null'
            - string
        type:
          type:
            - 'null'
            - string
        subject:
          type:
            - 'null'
            - string
        expiresAt:
          type:
            - 'null'
            - string
          format: date-time
      additionalProperties: false
    TrustProviderSecretDTOListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Current page number of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          description: HTTP StatusCode for the current result
          format: int32
        recordsTotal:
          type: integer
          description: Total number of entities available
          format: int32
        entities:
          type:
            - 'null'
            - array
          items:
            $ref: '#/components/schemas/TrustProviderSecretDTO'
          description: Page of entities for this request
      additionalProperties: false
    TrustProviderSecretSlimDTO:
      required:
        - secret
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        secret:
          minLength: 1
          type: string
        type:
          $ref: '#/components/schemas/TrustProviderSecretType'
      additionalProperties: false
    TrustProviderSecretType:
      enum:
        - Certificate
        - SymmetricKey
      type: string
    UserAgentDTO:
      type: object
      properties:
        browser:
          type:
            - 'null'
            - string
          description: The browser as determined from the HTTP User Agent
        operatingSystem:
          type:
            - 'null'
            - string
          description: The operating system as determined from the HTTP User Agent
        raw:
          type:
            - 'null'
            - string
          description: The raw HTTP User Agent
      additionalProperties: false
      description: DTO for the HTTP User Agent of an individual Aembit Audit Log
    UserDTO:
      required:
        - email
        - firstName
        - lastName
      type: object
      properties:
        email:
          minLength: 1
          type: string
          format: email
        externalId:
          type: string
          format: uuid
        roles:
          type:
            - 'null'
            - array
          items:
            type: string
            format: uuid
        rolesDetails:
          type:
            - 'null'
            - array
          items:
            description: Individual Role
            $ref: '#/components/schemas/RoleDTO'
        firstName:
          maxLength: 64
          minLength: 2
          type: string
        lastName:
          maxLength: 64
          minLength: 2
          type: string
        phoneNumber:
          type:
            - 'null'
            - string
        createdAt:
          type: string
          format: date-time
        isActive:
          type: boolean
        twoFactorEnabled:
          type: boolean
        isLocked:
          type: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        userTokens:
          type:
            - 'null'
            - array
          items:
            $ref: '#/components/schemas/UserTokensDTO'
      additionalProperties: false
    UserListDTO:
      type: object
      properties:
        page:
          type: integer
          description: Page of entities
          format: int32
        perPage:
          type: integer
          description: Number of entities requested for the current page
          format: int32
        order:
          type:
            - 'null'
            - string
          description: Ordering criteria used for the current page
        statusCode:
          type: integer
          format: int32
        recordsTotal:
          type: integer
          format: int32
        users:
          type:
            - 'null'
            - array
          items:
            $ref: '#/components/schemas/UserDTO'
      additionalProperties: false
    UserPatchDTO:
      type: object
      properties:
        email:
          type:
            - 'null'
            - string
        firstName:
          type:
            - 'null'
            - string
        lastName:
          type:
            - 'null'
            - string
        phoneNumber:
          type:
            - 'null'
            - string
        isActive:
          type:
            - 'null'
            - boolean
      additionalProperties: false
    UserTokensDTO:
      type: object
      properties:
        id:
          type: string
          format: uuid
        name:
          type:
            - 'null'
            - string
        verified:
          type: boolean
        createdAt:
          type: string
          format: date-time
      additionalProperties: false
    WeekDayDTO:
      type: object
      properties:
        name:
          type:
            - 'null'
            - string
        ordinal:
          type: integer
          format: int32
      additionalProperties: false
    WizAccessConditionDTO:
      allOf:
        - $ref: '#/components/schemas/AccessConditionV2DTO'
        - type: object
          properties:
            serverless:
              type: boolean
            containerClusterConnected:
              type: boolean
          additionalProperties: false
    WizIntegrationDTO:
      allOf:
        - $ref: '#/components/schemas/IntegrationV2DTO'
        - type: object
          properties:
            clientId:
              type:
                - 'null'
                - string
            tokenUrl:
              type:
                - 'null'
                - string
            clientSecret:
              type:
                - 'null'
                - string
            audience:
              type:
                - 'null'
                - string
          additionalProperties: false
      description: Integration details for 3rd party data used by Access Conditions
    WorkloadExternalDTO:
      required:
        - isActive
        - name
        - resourceSet
      type: object
      properties:
        externalId:
          type: string
          format: uuid
        name:
          maxLength: 128
          minLength: 1
          type: string
          description: Name of the Entity
        description:
          type:
            - 'null'
            - string
          description: Description of the Entity
        isActive:
          type: boolean
          description: True/False value that determines if this entity is Active or Disabled
          format: boolean
        tags:
          type:
            - 'null'
            - array
          items:
            description: Aembit Entity Tag Details
            $ref: '#/components/schemas/TagDTO'
        createdAt:
          type: string
          format: date-time
        modifiedAt:
          type:
            - 'null'
            - string
          format: date-time
        createdBy:
          type:
            - 'null'
            - string
        modifiedBy:
          type:
            - 'null'
            - string
        resourceSet:
          type: string
          description: ID of the Resource Set in which this Access Entity exists
          format: uuid
        trustProviders:
          type:
            - 'null'
            - array
          items:
            $ref: '#/components/schemas/TrustProviderItemDTO'
        credentialProviderId:
          type:
            - 'null'
            - string
          format: uuid
        credentialProviderText:
          type:
            - 'null'
            - string
        workloadServiceEndpoints:
          maxItems: 1
          type:
            - 'null'
            - array
          items:
            type: string
            format: uuid
        serviceEndpoint:
          description: Service Endpoint for a Server Workload
          $ref: '#/components/schemas/WorkloadServiceEndpointDTO'
        type:
          type:
            - 'null'
            - string
      additionalProperties: false
    WorkloadServiceAuthenticationDTO:
      required:
        - method
        - scheme
      type: object
      properties:
        method:
          minLength: 1
          type: string
          description: Authentication Method
        scheme:
          minLength: 1
          type: string
          description: Authentication Scheme
        config:
          type:
            - 'null'
            - string
          description: Authentication Configuration
      additionalProperties: false
      description: Authentication configuration for a Server Workload
    WorkloadServiceEndpointDTO:
      required:
        - appProtocol
        - host
        - port
        - requestedPort
        - requestedTls
        - tls
        - tlsVerification
        - transportProtocol
      type: object
      properties:
        externalId:
          type:
            - 'null'
            - string
          description: External ID of the Service Endpoint
        id:
          type: integer
          description: ID of the Service Endpoint
          format: int32
        host:
          minLength: 1
          type: string
          description: Hostname or IP Address
        appProtocol:
          minLength: 1
          type: string
          description: Application Protocol
        transportProtocol:
          maxLength: 3
          minLength: 0
          type: string
          description: Transport Protocol (e.g. TCP)
        requestedPort:
          maximum: 65535
          minimum: 1
          type: integer
          description: The target port as specified by the Client Workload
          format: int32
        requestedTls:
          type: boolean
          description: The TLS encryption configuration of the Client Workload
        port:
          maximum: 65535
          minimum: 1
          type: integer
          description: The target port to which the Agent/Proxy will communicate
          format: int32
        tls:
          type: boolean
          description: The TLS encryption configuration which will be used by the Agent/Proxy
        workloadServiceAuthentication:
          description: Authentication configuration
          $ref: '#/components/schemas/WorkloadServiceAuthenticationDTO'
        tlsVerification:
          minLength: 1
          type: string
          description: TLS Verification configuration for the Agent/Proxy to Server Workload connection
        urlPath:
          type:
            - 'null'
            - string
          description: URL Path configuration for the Client Workload to Server Workload request
        httpHeaders:
          title: 'KeyValuePair<string, string>'
          type:
            - 'null'
            - array
          items:
            $ref: '#/components/schemas/StringStringKeyValuePair'
          description: Static HTTP Headers to include for transmission to the Server Workload
      additionalProperties: false
      description: Service Endpoint for a Server Workload
  securitySchemes:
    bearerAuth:
      type: http
      description: Authorization header using the Bearer scheme.
      scheme: bearer
      bearerFormat: Reference
security:
  - { }