openapi: 3.1.0
info:
  title: Check Point CloudGuard CNAPP REST CloudAccounts Policies API
  description: 'Best-effort OpenAPI 3.1 description of the Check Point CloudGuard CNAPP

    REST API (originally Dome9). The API is used to onboard cloud accounts,

    run posture assessments, manage compliance bundles, retrieve findings,

    and configure notifications and policies across AWS, Azure, GCP, Alibaba,

    Oracle, and Kubernetes environments. Authentication uses HTTP Basic with

    the CloudGuard API key id as username and API key secret as password.

    '
  version: '2.0'
  contact:
    name: Check Point CloudGuard
    url: https://docs.cgn.portal.checkpoint.com/reference
servers:
- url: https://api.dome9.com
  description: CloudGuard CNAPP API (Dome9 endpoint)
security:
- basicAuth: []
tags:
- name: Policies
paths:
  /v2/awssecuritygroup:
    get:
      summary: List AWS security group entities
      operationId: listAwsSecurityGroups
      tags:
      - Policies
      responses:
        '200':
          description: List of security groups
    post:
      summary: Create AWS security group policy
      operationId: createAwsSecurityGroup
      tags:
      - Policies
      responses:
        '201':
          description: Security group created
components:
  securitySchemes:
    basicAuth:
      type: http
      scheme: basic
      description: 'CloudGuard authentication uses HTTP Basic with the CloudGuard API

        key id as the username and the API key secret as the password.

        '