rules: # INFO / METADATA info-title-prefix: description: API title must start with "Amazon" or "AWS" severity: warn given: "$.info.title" then: function: pattern functionOptions: match: "^(Amazon|AWS) " info-description-required: description: Info object must have a description severity: error given: "$.info" then: field: description function: truthy info-version-required: description: Info object must have a version severity: error given: "$.info" then: field: version function: truthy # OPENAPI VERSION openapi-version: description: Must use OpenAPI 3.x severity: error given: "$" then: field: openapi function: pattern functionOptions: match: "^3\\." # SERVERS servers-required: description: Servers must be defined severity: error given: "$" then: field: servers function: truthy servers-https: description: Server URLs must use HTTPS severity: error given: "$.servers[*].url" then: function: pattern functionOptions: match: "^https://" # OPERATIONS operation-summary-required: description: Every operation must have a summary severity: error given: "$.paths[*][get,post,put,delete,patch]" then: field: summary function: truthy operation-summary-prefix: description: Operation summary must start with "Amazon" severity: warn given: "$.paths[*][get,post,put,delete,patch].summary" then: function: pattern functionOptions: match: "^Amazon " operation-description-required: description: Every operation must have a description severity: warn given: "$.paths[*][get,post,put,delete,patch]" then: field: description function: truthy operation-id-required: description: Every operation must have an operationId severity: error given: "$.paths[*][get,post,put,delete,patch]" then: field: operationId function: truthy operation-id-camel-case: description: OperationId must use PascalCase severity: warn given: "$.paths[*][get,post,put,delete,patch].operationId" then: function: pattern functionOptions: match: "^[A-Z][a-zA-Z0-9]+$" operation-tags-required: description: Every operation must have tags severity: warn given: "$.paths[*][get,post,put,delete,patch]" then: field: tags function: truthy # PARAMETERS parameter-description-required: description: Every parameter must have a description severity: warn given: "$.paths[*][get,post,put,delete,patch].parameters[*]" then: field: description function: truthy parameter-name-snake-case: description: Parameter names should use camelCase or snake_case severity: info given: "$.paths[*][get,post,put,delete,patch].parameters[*].name" then: function: pattern functionOptions: match: "^[a-z][a-zA-Z0-9_]*$" # RESPONSES response-success-required: description: Every operation must have a 2xx response severity: error given: "$.paths[*][get,post,put,delete,patch].responses" then: function: schema functionOptions: schema: type: object anyOf: - required: ["200"] - required: ["201"] - required: ["204"] response-description-required: description: Every response must have a description severity: error given: "$.paths[*][get,post,put,delete,patch].responses[*]" then: field: description function: truthy response-error-unauthorized: description: Operations should document 403 responses severity: info given: "$.paths[*][get,post,put,delete,patch].responses" then: field: "403" function: truthy # SCHEMAS schema-type-required: description: Schema properties should have a type defined severity: warn given: "$.components.schemas[*].properties[*]" then: function: schema functionOptions: schema: type: object anyOf: - required: ["type"] - required: ["$ref"] - required: ["allOf"] - required: ["oneOf"] - required: ["anyOf"] - required: ["enum"] schema-description-required: description: Top-level schemas should have a description severity: info given: "$.components.schemas[*]" then: field: description function: truthy # SECURITY security-schemes-defined: description: Security schemes must be defined in components severity: error given: "$" then: field: "components.securitySchemes" function: truthy # HTTP METHOD CONVENTIONS get-no-request-body: description: GET operations must not have a request body severity: error given: "$.paths[*].get" then: field: requestBody function: falsy delete-no-request-body: description: DELETE operations should not have a request body severity: warn given: "$.paths[*].delete" then: field: requestBody function: falsy # GENERAL QUALITY no-empty-descriptions: description: Descriptions must not be empty strings severity: error given: "$..description" then: function: pattern functionOptions: match: ".+" paths-kebab-case: description: Path segments should use kebab-case severity: info given: "$.paths" then: function: pattern functionOptions: match: "^(/[a-z0-9{}-]+)+$" tags-title-case: description: Tags in the global tags array should use Title Case severity: warn given: "$.tags[*].name" then: function: pattern functionOptions: match: "^[A-Z][a-zA-Z0-9 ]+$"