info: title: Workload Protection version: v2 openapi: 3.0.0 servers: - url: https://api.dome9.com/ description: US region - url: https://api.{region}.dome9.com/ description: Other regions variables: region: enum: - eu1 - ap1 - ap2 - ap3 - cace1 default: eu1 paths: /v2/workload/agentless/aws/accounts/{id}/enable: post: tags: - Agentless summary: Enable Aws Account operationId: Agentless_EnableAwsAccount_post_/v2/workload/agentless/aws/accounts/{id}/enable parameters: - name: id in: path description: Cloud account Id (CloudGuard/external Id) required: true schema: type: string - name: shouldCreatePolicy in: query description: A flag indicating weather to create a default policy required: false schema: type: boolean responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAwsAccountRequestBody' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAwsAccountRequestBody' required: true description: Enable AWP AWS account /v2/workload/agentless/azure/accounts/{id}/enable: post: tags: - Agentless summary: Enable Azure Account operationId: Agentless_EnableAzureAccount_post_/v2/workload/agentless/azure/accounts/{id}/enable parameters: - name: id in: path description: Cloud account Id (CloudGuard/subscription Id) required: true schema: type: string - name: shouldCreatePolicy in: query description: A flag indicating weather to create a default policy required: false schema: type: boolean responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAzureAccountRequestBody' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAzureAccountRequestBody' required: true description: Enable AWP Azure account /v2/workload/agentless/aws/accounts/{id}/enableCentralizedAccount: post: tags: - Agentless summary: Add Aws Centralized Account operationId: Agentless_AddAwsCentralizedAccount_post_/v2/workload/agentless/aws/accounts/{id}/enableCentralizedAccount parameters: - name: id in: path description: Cloud account Id (CloudGuard/external Id) required: true schema: type: string responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAwsCentralizedAccountRequestBody' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAwsCentralizedAccountRequestBody' required: true description: Add AWP AWS Centralized account /v2/workload/agentless/azure/accounts/{id}/enableCentralizedAccount: post: tags: - Agentless summary: Add Azure Centralized Account operationId: Agentless_AddAzureCentralizedAccount_post_/v2/workload/agentless/azure/accounts/{id}/enableCentralizedAccount parameters: - name: id in: path description: Cloud account Id (CloudGuard/external Id) required: true schema: type: string responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAzureCentralizedAccountRequestBody' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAzureCentralizedAccountRequestBody' required: true description: Add AWP Azure Centralized account /v2/workload/agentless/aws/accounts/{id}/enableSubAccount: post: tags: - Agentless summary: Add Aws Sub Account operationId: Agentless_AddAwsSubAccount_post_/v2/workload/agentless/aws/accounts/{id}/enableSubAccount parameters: - name: id in: path description: Cloud account Id (CloudGuard/external Id) required: true schema: type: string - name: shouldCreatePolicy in: query description: A flag indicating weather to create a default policy required: false schema: type: boolean responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAwsSubAccountRequestBody' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAwsSubAccountRequestBody' required: true description: Add AWP AWS Sub account /v2/workload/agentless/azure/accounts/{id}/enableSubAccount: post: tags: - Agentless summary: Add Azure Sub Account operationId: Agentless_AddAzureSubAccount_post_/v2/workload/agentless/azure/accounts/{id}/enableSubAccount parameters: - name: id in: path description: Cloud account Id (CloudGuard/external Id) required: true schema: type: string - name: shouldCreatePolicy in: query description: A flag indicating weather to create a default policy required: false schema: type: boolean responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAzureSubAccountRequestBody' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAzureSubAccountRequestBody' required: true description: Add AWP Azure Sub account /v2/workload/agentless/{cloudProvider}/accounts/states: get: tags: - Agentless summary: Get Accounts States operationId: Agentless_GetAccountsStates_get_/v2/workload/agentless/{cloudProvider}/accounts/states parameters: - name: cloudProvider in: path description: Cloud provider required: true schema: type: string enum: - aws - azure responses: '200': description: OK content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AccountStateViewModel' description: Get current AWP accounts states /v2/workload/agentless/{cloudProvider}/accounts/states/{id}: get: tags: - Agentless summary: Get Account State operationId: Agentless_GetAccountState_get_/v2/workload/agentless/{cloudProvider}/accounts/states/{id} parameters: - name: id in: path description: Cloud account Id (CloudGuard/external Id) required: true schema: type: string - name: cloudProvider in: path description: Cloud provider required: true schema: type: string enum: - aws - azure responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AccountStateViewModel' description: Get AWP account state /v2/workload/agentless/{cloudProvider}/accounts/{id}: get: tags: - Agentless summary: Get Account operationId: Agentless_GetAccount_get_/v2/workload/agentless/{cloudProvider}/accounts/{id} parameters: - name: id in: path description: Cloud account Id (CloudGuard/external Id) required: true schema: type: string - name: cloudProvider in: path description: Cloud provider required: true schema: type: string enum: - aws - azure responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AccountViewModel' description: Get AWP account scanner configuration /v2/workload/agentless/{cloudProvider}/accounts/{id}/settings: patch: tags: - Agentless summary: Modify Account Settings operationId: Agentless_ModifyAccountSettings_patch_/v2/workload/agentless/{cloudProvider}/accounts/{id}/settings parameters: - name: id in: path description: Cloud account Id (CloudGuard/external Id) required: true schema: type: string - name: cloudProvider in: path description: Cloud provider required: true schema: type: string enum: - aws - azure responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessAccountSettingsViewModel' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessAccountSettingsViewModel' required: true description: Modify a single AWP account scanner settings (supported for inAccount and Saas scan mode) /v2/workload/agentless/{cloudProvider}/accounts/{id}/centralizedAccountSettings: patch: tags: - Agentless summary: Modify Centralized Account Settings operationId: Agentless_ModifyCentralizedAccountSettings_patch_/v2/workload/agentless/{cloudProvider}/accounts/{id}/centralizedAccountSettings parameters: - name: id in: path description: Cloud account Id (CloudGuard/external Id) required: true schema: type: string - name: cloudProvider in: path description: Cloud provider required: true schema: type: string enum: - aws - azure responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessCentralizedAccountSettingsViewModel' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessCentralizedAccountSettingsViewModel' required: true description: Modify a single AWP centralized account scanner settings /v2/workload/agentless/aws/accounts/{id}: delete: tags: - Agentless summary: Disable Aws Account operationId: Agentless_DisableAwsAccount_delete_/v2/workload/agentless/aws/accounts/{id} parameters: - name: id in: path description: Cloud account Id (CloudGuard/external Id) required: true schema: type: string - name: forceDelete in: query description: If 'True', AWP will be disabled and the API will skip validating resource removal from the customer account. required: false schema: type: boolean responses: '200': description: OK content: application/json: schema: type: object description: Disable AWS account /v2/workload/agentless/azure/accounts/{id}: delete: tags: - Agentless summary: Disable Azure Account operationId: Agentless_DisableAzureAccount_delete_/v2/workload/agentless/azure/accounts/{id} parameters: - name: id in: path description: Cloud account Id (CloudGuard/external Id) required: true schema: type: string responses: '200': description: OK content: application/json: schema: type: object description: Disable Azure account /v2/workload/agentless/aws/instances/{id}: get: tags: - Agentless summary: Get Workload operationId: Agentless_GetWorkload_get_/v2/workload/agentless/aws/instances/{id} parameters: - name: id in: path description: Instance Id required: true schema: type: string responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessInstanceViewModel' description: Get AWP workload scan details /v2/workload/agentless/aws/accounts/{id}/generate-onboarding-data: post: tags: - Agentless summary: Generate Aws Onboarding Data operationId: Agentless_GenerateAwsOnboardingData_post_/v2/workload/agentless/aws/accounts/{id}/generate-onboarding-data parameters: - name: id in: path required: true schema: type: string responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessAwsOnboardingDataViewModel' requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.GenerateAgentlessAwsOnboardingDataRequest' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.GenerateAgentlessAwsOnboardingDataRequest' required: true description: Generate Aws onboarding data /v2/workload/agentless/azure/accounts/{id}/generate-onboarding-data: post: tags: - Agentless summary: Generate Azure Onboarding Data operationId: Agentless_GenerateAzureOnboardingData_post_/v2/workload/agentless/azure/accounts/{id}/generate-onboarding-data parameters: - name: id in: path required: true schema: type: string responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessAzureOnboardingDataViewModel' requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.GenerateAgentlessAzureOnboardingDataRequest' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.GenerateAgentlessAzureOnboardingDataRequest' required: true description: Generate Azure onboarding data /v2/workload/agentless/azure/accounts/{id}/offboarding: get: tags: - Agentless summary: Get Azure Offboarding Data operationId: Agentless_GetAzureOffboardingData_get_/v2/workload/agentless/azure/accounts/{id}/offboarding parameters: - name: id in: path description: Cloud account Id (CloudGuard/external Id) required: true schema: type: string - name: centralizedId in: query description: In case of inAccountSub, the account id of the centralized account required: false schema: type: string responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessAzureOffboardingDataViewModel' description: Get Azure offboarding data /v2/workload/agentless/{cloudProvider}/accounts/{id}/onboarding/checkForUpdate: get: tags: - Agentless summary: Check For Onboarding Update operationId: Agentless_CheckForOnboardingUpdate_get_/v2/workload/agentless/{cloudProvider}/accounts/{id}/onboarding/checkForUpdate parameters: - name: id in: path description: Cloud account Id (CloudGuard/external Id) required: true schema: type: string - name: cloudProvider in: path description: Cloud provider required: true schema: type: string enum: - aws - azure responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessAwsValidateStackDataViewModel' description: Check if the AWP account needs to be updated /v2/workload/agentless/azure/accounts/{id}/centralizedAccounts: get: tags: - Agentless summary: Get Azure Centralized Accounts operationId: Agentless_GetAzureCentralizedAccounts_get_/v2/workload/agentless/azure/accounts/{id}/centralizedAccounts parameters: - name: id in: path description: Cloud account Id (CloudGuard/external Id) required: true schema: type: string responses: '200': description: OK content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.CentralizedAzureAccountViewModel' description: Get Azure centralized accounts data /v2/workload/agentless/accountSettings: get: tags: - Agentless summary: Get Tenant Settings operationId: Agentless_GetTenantSettings_get_/v2/workload/agentless/accountSettings responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessSettingsViewModel' description: Get all AWP accounts scanner settings patch: tags: - Agentless summary: Modify Tenant Settings operationId: Agentless_ModifyTenantSettings_patch_/v2/workload/agentless/accountSettings responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessSettingsViewModel' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessSettingsViewModel' required: true description: Modify all AWP accounts scanner settings /v2/protegoStatistics/invocations: get: tags: - Protego Statistics operationId: ProtegoStatistics_Get_get_/v2/protegoStatistics/invocations parameters: - name: startDate in: query required: true schema: type: string format: date-time - name: endDate in: query required: true schema: type: string format: date-time responses: '200': description: OK content: application/json: schema: type: array items: $ref: '#/components/schemas/Falconetix.Model.Serverless.Protego.ProtegoInvocationsEntity' description: '' summary: Get /v2/serverless/accounts: post: tags: - Serverless summary: Post Account operationId: Serverless_PostAccount_post_/v2/serverless/accounts responses: '200': description: OK content: application/json: schema: type: object '201': description: Created content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessAccountViewModel' requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessAddAccountRequest' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessAddAccountRequest' required: true description: Enable Serverless protection /v2/serverless/accounts/{cloudAccountId}: get: tags: - Serverless operationId: Serverless_GetAccount_get_/v2/serverless/accounts/{cloudAccountId} parameters: - name: cloudAccountId in: path required: true schema: type: string responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessAccountViewModel' description: '' summary: Get Account patch: tags: - Serverless summary: Put Account operationId: Serverless_PutAccount_patch_/v2/serverless/accounts/{cloudAccountId} parameters: - name: cloudAccountId in: path required: true schema: type: string - name: cloudProvider in: query required: false schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessPutAccountViewModel' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessPutAccountViewModel' required: true description: Update policy config or add FSP for an AWS Cloud account /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}: patch: tags: - Serverless summary: Put Account operationId: Serverless_PutAccount_patch_/v2/serverless/{cloudProvider}/accounts/{cloudAccountId} parameters: - name: cloudAccountId in: path required: true schema: type: string - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessPutAccountViewModel' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessPutAccountViewModel' required: true description: Update policy config or add FSP for an AWS Cloud account /v2/serverless/accounts/states: get: tags: - Serverless operationId: Serverless_GetAccountsState_get_/v2/serverless/accounts/states parameters: - name: cloudProvider in: query required: false schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessAccountStatusViewModel' description: '' summary: Get Accounts State /v2/serverless/{cloudProvider}/accounts/states: get: tags: - Serverless operationId: Serverless_GetAccountsState_get_/v2/serverless/{cloudProvider}/accounts/states parameters: - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessAccountStatusViewModel' description: '' summary: Get Accounts State /v2/serverless/accounts/states/{cloudAccountId}: get: tags: - Serverless operationId: Serverless_GetAccountState_get_/v2/serverless/accounts/states/{cloudAccountId} parameters: - name: cloudAccountId in: path required: true schema: type: string - name: cloudProvider in: query required: false schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessAccountStatusViewModel' description: '' summary: Get Account State /v2/serverless/{cloudProvider}/accounts/states/{cloudAccountId}: get: tags: - Serverless operationId: Serverless_GetAccountState_get_/v2/serverless/{cloudProvider}/accounts/states/{cloudAccountId} parameters: - name: cloudAccountId in: path required: true schema: type: string - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessAccountStatusViewModel' description: '' summary: Get Account State /v2/serverless/accounts/{cloudAccountId}/exclusions: get: tags: - Serverless operationId: Serverless_GetAccountExclusions_get_/v2/serverless/accounts/{cloudAccountId}/exclusions parameters: - name: cloudAccountId in: path required: true schema: type: string - name: cloudProvider in: query required: false schema: type: string enum: - aws - azure - kubernetes - name: withPayloadObject in: query required: false schema: type: boolean responses: '200': description: OK content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionViewModel' description: '' summary: Get Account Exclusions post: tags: - Serverless operationId: Serverless_PostExclusion_post_/v2/serverless/accounts/{cloudAccountId}/exclusions parameters: - name: cloudAccountId in: path required: true schema: type: string - name: cloudProvider in: query required: false schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionModel' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionModel' required: true description: '' summary: Post Exclusion /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/exclusions: get: tags: - Serverless operationId: Serverless_GetAccountExclusions_get_/v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/exclusions parameters: - name: cloudAccountId in: path required: true schema: type: string - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes - name: withPayloadObject in: query required: false schema: type: boolean responses: '200': description: OK content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionViewModel' description: '' summary: Get Account Exclusions post: tags: - Serverless operationId: Serverless_PostExclusion_post_/v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/exclusions parameters: - name: cloudAccountId in: path required: true schema: type: string - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionModel' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionModel' required: true description: '' summary: Post Exclusion /v2/serverless/accounts/{cloudAccountId}/rules: get: tags: - Serverless operationId: Serverless_GetAccountRules_get_/v2/serverless/accounts/{cloudAccountId}/rules parameters: - name: cloudAccountId in: path required: true schema: type: string - name: cloudProvider in: query required: false schema: type: string enum: - aws - azure - kubernetes - name: withPayloadObject in: query required: false schema: type: boolean responses: '200': description: OK content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessRuleViewModel' description: '' summary: Get Account Rules post: tags: - Serverless operationId: Serverless_PostRule_post_/v2/serverless/accounts/{cloudAccountId}/rules parameters: - name: cloudAccountId in: path required: true schema: type: string - name: cloudProvider in: query required: false schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessRuleModel' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessRuleModel' required: true description: '' summary: Post Rule /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/rules: get: tags: - Serverless operationId: Serverless_GetAccountRules_get_/v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/rules parameters: - name: cloudAccountId in: path required: true schema: type: string - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes - name: withPayloadObject in: query required: false schema: type: boolean responses: '200': description: OK content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessRuleViewModel' description: '' summary: Get Account Rules post: tags: - Serverless operationId: Serverless_PostRule_post_/v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/rules parameters: - name: cloudAccountId in: path required: true schema: type: string - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessRuleModel' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessRuleModel' required: true description: '' summary: Post Rule /v2/serverless/accounts/{cloudAccountId}/rules/{ruleId}: get: tags: - Serverless operationId: Serverless_GetRule_get_/v2/serverless/accounts/{cloudAccountId}/rules/{ruleId} parameters: - name: cloudAccountId in: path required: true schema: type: string - name: ruleId in: path required: true schema: type: string - name: cloudProvider in: query required: false schema: type: string enum: - aws - azure - kubernetes - name: withPayloadObject in: query required: false schema: type: boolean responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessRuleViewModel' description: '' summary: Get Rule put: tags: - Serverless operationId: Serverless_PutRule_put_/v2/serverless/accounts/{cloudAccountId}/rules/{ruleId} parameters: - name: cloudAccountId in: path required: true schema: type: string - name: ruleId in: path required: true schema: type: string - name: cloudProvider in: query required: false schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessRuleModel' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessRuleModel' required: true description: '' summary: Put Rule delete: tags: - Serverless operationId: Serverless_DeleteRule_delete_/v2/serverless/accounts/{cloudAccountId}/rules/{ruleId} parameters: - name: cloudAccountId in: path required: true schema: type: string - name: ruleId in: path required: true schema: type: string - name: cloudProvider in: query required: false schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessDeleteRuleViewModel' description: '' summary: Delete Rule /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/rules/{ruleId}: get: tags: - Serverless operationId: Serverless_GetRule_get_/v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/rules/{ruleId} parameters: - name: cloudAccountId in: path required: true schema: type: string - name: ruleId in: path required: true schema: type: string - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes - name: withPayloadObject in: query required: false schema: type: boolean responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessRuleViewModel' description: '' summary: Get Rule put: tags: - Serverless operationId: Serverless_PutRule_put_/v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/rules/{ruleId} parameters: - name: cloudAccountId in: path required: true schema: type: string - name: ruleId in: path required: true schema: type: string - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessRuleModel' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessRuleModel' required: true description: '' summary: Put Rule delete: tags: - Serverless operationId: Serverless_DeleteRule_delete_/v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/rules/{ruleId} parameters: - name: cloudAccountId in: path required: true schema: type: string - name: ruleId in: path required: true schema: type: string - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessDeleteRuleViewModel' description: '' summary: Delete Rule /v2/serverless/accounts/{cloudAccountId}/exclusions/{exclusionId}: get: tags: - Serverless operationId: Serverless_GetExclusion_get_/v2/serverless/accounts/{cloudAccountId}/exclusions/{exclusionId} parameters: - name: cloudAccountId in: path required: true schema: type: string - name: exclusionId in: path required: true schema: type: string - name: cloudProvider in: query required: false schema: type: string enum: - aws - azure - kubernetes - name: withPayloadObject in: query required: false schema: type: boolean responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionViewModel' description: '' summary: Get Exclusion put: tags: - Serverless operationId: Serverless_PutExclusion_put_/v2/serverless/accounts/{cloudAccountId}/exclusions/{exclusionId} parameters: - name: cloudAccountId in: path required: true schema: type: string - name: exclusionId in: path required: true schema: type: string - name: cloudProvider in: query required: false schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionModel' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionModel' required: true description: '' summary: Put Exclusion delete: tags: - Serverless operationId: Serverless_DeleteExclusion_delete_/v2/serverless/accounts/{cloudAccountId}/exclusions/{exclusionId} parameters: - name: cloudAccountId in: path required: true schema: type: string - name: exclusionId in: path required: true schema: type: string - name: cloudProvider in: query required: false schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessDeleteRuleViewModel' description: '' summary: Delete Exclusion /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/exclusions/{exclusionId}: get: tags: - Serverless operationId: Serverless_GetExclusion_get_/v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/exclusions/{exclusionId} parameters: - name: cloudAccountId in: path required: true schema: type: string - name: exclusionId in: path required: true schema: type: string - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes - name: withPayloadObject in: query required: false schema: type: boolean responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionViewModel' description: '' summary: Get Exclusion put: tags: - Serverless operationId: Serverless_PutExclusion_put_/v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/exclusions/{exclusionId} parameters: - name: cloudAccountId in: path required: true schema: type: string - name: exclusionId in: path required: true schema: type: string - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionModel' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionModel' required: true description: '' summary: Put Exclusion delete: tags: - Serverless operationId: Serverless_DeleteExclusion_delete_/v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/exclusions/{exclusionId} parameters: - name: cloudAccountId in: path required: true schema: type: string - name: exclusionId in: path required: true schema: type: string - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessDeleteRuleViewModel' description: '' summary: Delete Exclusion /v2/serverless/aws/accounts/{cloudAccountId}/missingPermissions: get: tags: - Serverless operationId: Serverless_GetAccountMissingPermissions_get_/v2/serverless/aws/accounts/{cloudAccountId}/missingPermissions parameters: - name: cloudAccountId in: path required: true schema: type: string responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessMissingPermissionsViewModel' description: '' summary: Get Account Missing Permissions /v2/serverless/aws/accounts/{cloudAccountId}/missingPermissions/validate: put: tags: - Serverless operationId: Serverless_ValidateAccountMissingPermissions_put_/v2/serverless/aws/accounts/{cloudAccountId}/missingPermissions/validate parameters: - name: cloudAccountId in: path required: true schema: type: string responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Falconetix.Model.ServiceInterfaces.Serverless.ServerlessApiResponse' description: '' summary: Validate Account Missing Permissions /v2/serverless/functions/{id}: get: tags: - Serverless operationId: Serverless_GetFunction_get_/v2/serverless/functions/{id} parameters: - name: id in: path required: true schema: type: string responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessFunctionViewModel' description: '' summary: Get Function /v2/serverless/aws/functions/{id}: get: tags: - Serverless operationId: Serverless_GetFunction_get_/v2/serverless/aws/functions/{id} parameters: - name: id in: path required: true schema: type: string responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessFunctionViewModel' description: '' summary: Get Function /v2/serverless/azure/functions/{id}: get: tags: - Serverless operationId: Serverless_GetAzureFunctionApp_get_/v2/serverless/azure/functions/{id} parameters: - name: id in: path required: true schema: type: string responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessFunctionAppViewModel' description: '' summary: Get Azure Function App /v2/serverless/kubernetes/functions/{id}: get: tags: - Serverless operationId: Serverless_GetKubernetesPodGroup_get_/v2/serverless/kubernetes/functions/{id} parameters: - name: id in: path required: true schema: type: string responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessPodGroupViewModel' description: '' summary: Get Kubernetes Pod Group /v2/serverless/aws/functions/{id}/addLogSubscription: post: tags: - Serverless operationId: Serverless_FunctionAddLogSubscription_post_/v2/serverless/aws/functions/{id}/addLogSubscription parameters: - name: id in: path required: true schema: type: string responses: '200': description: OK content: application/json: schema: type: object description: '' summary: Function Add Log Subscription /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/functions: patch: tags: - Serverless operationId: Serverless_PutFunctions_patch_/v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/functions parameters: - name: cloudAccountId in: path required: true schema: type: string - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessPutFunctionResponseViewModel' requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessPutFunctionsListViewModel' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessPutFunctionsListViewModel' required: true description: '' summary: Put Functions /v2/serverless/{cloudProvider}/functions/{id}: patch: tags: - Serverless operationId: Serverless_PutFunction_patch_/v2/serverless/{cloudProvider}/functions/{id} parameters: - name: id in: path required: true schema: type: string - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessPutSingleFunctionViewModel' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessPutSingleFunctionViewModel' required: true description: '' summary: Put Function /v2/serverless/functions/{id}/fsp: patch: tags: - Serverless operationId: Serverless_PutFunctionAutoFsp_patch_/v2/serverless/functions/{id}/fsp parameters: - name: id in: path required: true schema: type: string responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.EnableFSPViewModel' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.EnableFSPViewModel' required: true description: '' summary: Put Function Auto Fsp /v2/serverless/functions/{id}/fspMode: patch: tags: - Serverless operationId: Serverless_PutFunctionFspBlock_patch_/v2/serverless/functions/{id}/fspMode parameters: - name: id in: path required: true schema: type: string - name: cloudProvider in: query required: false schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessEnableFunctionFSPBlockBody' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessEnableFunctionFSPBlockBody' required: true description: '' summary: Put Function Fsp Block /v2/serverless/{cloudProvider}/functions/{id}/fspMode: patch: tags: - Serverless operationId: Serverless_PutFunctionFspBlock_patch_/v2/serverless/{cloudProvider}/functions/{id}/fspMode parameters: - name: id in: path required: true schema: type: string - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: type: object requestBody: content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessEnableFunctionFSPBlockBody' application/x-www-form-urlencoded: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessEnableFunctionFSPBlockBody' required: true description: '' summary: Put Function Fsp Block /v2/serverless/functions/{id}/whitelist: get: tags: - Serverless operationId: Serverless_GetFunctionWhitelist_get_/v2/serverless/functions/{id}/whitelist parameters: - name: id in: path required: true schema: type: string - name: cloudProvider in: query required: false schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessWhiteListViewModel' description: '' summary: Get Function Whitelist /v2/serverless/{cloudProvider}/functions/{id}/whitelist: get: tags: - Serverless operationId: Serverless_GetFunctionWhitelist_get_/v2/serverless/{cloudProvider}/functions/{id}/whitelist parameters: - name: id in: path required: true schema: type: string - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessWhiteListViewModel' description: '' summary: Get Function Whitelist /v2/serverless/azure/functions/{id}/whitelist/{functionName}: get: tags: - Serverless operationId: Serverless_GetAzureFunctionWhitelist_get_/v2/serverless/azure/functions/{id}/whitelist/{functionName} parameters: - name: id in: path required: true schema: type: string - name: functionName in: path required: true schema: type: string responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessWhiteListViewModel' description: '' summary: Get Azure Function Whitelist /v2/serverless/functions/{id}/exclusions: get: tags: - Serverless operationId: Serverless_GetFunctionExclusions_get_/v2/serverless/functions/{id}/exclusions parameters: - name: id in: path required: true schema: type: string - name: cloudProvider in: query required: false schema: type: string enum: - aws - azure - kubernetes - name: withPayloadObject in: query required: false schema: type: boolean responses: '200': description: OK content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionViewModel' description: '' summary: Get Function Exclusions /v2/serverless/{cloudProvider}/functions/{id}/exclusions: get: tags: - Serverless operationId: Serverless_GetFunctionExclusions_get_/v2/serverless/{cloudProvider}/functions/{id}/exclusions parameters: - name: id in: path required: true schema: type: string - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes - name: withPayloadObject in: query required: false schema: type: boolean responses: '200': description: OK content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionViewModel' description: '' summary: Get Function Exclusions /v2/serverless/functions/{id}/rules: get: tags: - Serverless operationId: Serverless_GetFunctionRules_get_/v2/serverless/functions/{id}/rules parameters: - name: id in: path required: true schema: type: string - name: cloudProvider in: query required: false schema: type: string enum: - aws - azure - kubernetes - name: withPayloadObject in: query required: false schema: type: boolean responses: '200': description: OK content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessRuleViewModel' description: '' summary: Get Function Rules /v2/serverless/{cloudProvider}/functions/{id}/rules: get: tags: - Serverless operationId: Serverless_GetFunctionRules_get_/v2/serverless/{cloudProvider}/functions/{id}/rules parameters: - name: id in: path required: true schema: type: string - name: cloudProvider in: path required: true schema: type: string enum: - aws - azure - kubernetes - name: withPayloadObject in: query required: false schema: type: boolean responses: '200': description: OK content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessRuleViewModel' description: '' summary: Get Function Rules /v2/serverless/fsp/versions: get: tags: - Serverless operationId: Serverless_GetFspVersions_get_/v2/serverless/fsp/versions responses: '200': description: OK content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessFspVersioViewModel' description: '' summary: Get Fsp Versions /v2/serverless/workloadProtection/runtimes: get: tags: - Serverless operationId: Serverless_GetSupportedRuntimes_get_/v2/serverless/workloadProtection/runtimes responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessFSPSupportedRuntimesViewModel' description: '' summary: Get Supported Runtimes /v2/serverless/policy/{id}: get: tags: - Serverless Policy summary: Get operationId: ServerlessPolicy_GetAsync_get_/v2/serverless/policy/{id} parameters: - name: id in: path description: Policy's ID required: true schema: type: string format: uuid responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/Dome9.Web.Api.Compliance.Serverless.Policy.ServerlessPolicyViewModel' description: "Get single policy by its ID.\r\nReturns a policy matching a given ID." delete: tags: - Serverless Policy summary: Delete operationId: ServerlessPolicy_DeleteAsync_delete_/v2/serverless/policy/{id} parameters: - name: id in: path description: Policy's ID required: true schema: type: string format: uuid responses: '204': description: No Content description: Delete policy by its ID. /v2/serverless/policy: get: tags: - Serverless Policy summary: Get operationId: ServerlessPolicy_GetAsync_get_/v2/serverless/policy responses: '200': description: OK content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Compliance.Serverless.Policy.ServerlessPolicyViewModel' description: "Get all policies for the requesting account.\r\nReturns a collection of policies." put: tags: - Serverless Policy summary: Put operationId: ServerlessPolicy_PutAsync_put_/v2/serverless/policy responses: '200': description: OK content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Compliance.Serverless.Policy.ServerlessPolicyViewModel' requestBody: content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Compliance.Serverless.Policy.ServerlessPolicyRequestModel' application/x-www-form-urlencoded: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Compliance.Serverless.Policy.ServerlessPolicyRequestModel' description: Policies to update required: true description: "Update policies.\r\nReturns a multi status response containing successfully updated policies without an\ \ error message and failed policies with an error message." post: tags: - Serverless Policy summary: Post operationId: ServerlessPolicy_PostAsync_post_/v2/serverless/policy responses: '200': description: OK content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Compliance.Serverless.Policy.ServerlessPolicyViewModel' requestBody: content: application/json: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Compliance.Serverless.Policy.ServerlessPolicyRequestModel' application/x-www-form-urlencoded: schema: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Compliance.Serverless.Policy.ServerlessPolicyRequestModel' description: Policies to create required: true description: "Create new policies.\r\nReturns a multi status response containing successfully created policies without\ \ an error message and failed policies with an error message." /v2/ShiftLeft/{url}: get: tags: - Shift Left summary: Get operationId: ShiftLeft_Get_get_/v2/ShiftLeft/{url} parameters: - name: url in: path description: '' required: true schema: type: string responses: '200': description: OK content: application/json: schema: type: object description: proxy to ShiftLeft backend /v2/ShiftLeft/blades: get: tags: - Shift Left summary: Get Blades operationId: ShiftLeft_GetBlades_get_/v2/ShiftLeft/blades responses: '200': description: OK content: application/json: schema: type: object description: proxy to ShiftLeft Cli page /v2/ShiftLeft/blades/{os}/{arch}: get: tags: - Shift Left summary: Get Blades Os operationId: ShiftLeft_GetBladesOs_get_/v2/ShiftLeft/blades/{os}/{arch} parameters: - name: os in: path description: '' required: true schema: type: string - name: arch in: path description: '' required: true schema: type: string responses: '200': description: OK content: application/json: schema: type: object description: proxy to ShiftLeft Cli page /v2/workload/accountSetting: get: tags: - Workload Account Setting operationId: WorkloadAccountSetting_GetAccountSettings_get_/v2/workload/accountSetting responses: '200': description: '' content: application/json: schema: type: object properties: imageAssurance: properties: daysToKeepNonActiveKubernetesImages: type: integer daysToKeepNonActiveShiftLeftImages: type: integer daysToKeepNonActiveAwsEcsImages: type: integer registryScanningIntervalInHours: type: integer maxImagesPerRepo: type: integer example: imageAssurance: daysToKeepNonActiveKubernetesImages: 7 daysToKeepNonActiveShiftLeftImages: 30 daysToKeepNonActiveAwsEcsImages: 7 registryScanningIntervalInHours: 12 maxImagesPerRepo: 10 description: '' summary: Get Account Settings put: tags: - Workload Account Setting operationId: WorkloadAccountSetting_SetAccountSettings_put_/v2/workload/accountSetting requestBody: x-name: _ content: application/json: schema: type: object properties: imageAssurance: properties: daysToKeepNonActiveKubernetesImages: type: integer daysToKeepNonActiveShiftLeftImages: type: integer daysToKeepNonActiveAwsEcsImages: type: integer registryScanningIntervalInHours: type: integer maxImagesPerRepo: type: integer examples: WorkloadAccountSettingModel: value: imageAssurance: daysToKeepNonActiveKubernetesImages: 7 daysToKeepNonActiveShiftLeftImages: 30 daysToKeepNonActiveAwsEcsImages: 7 registryScanningIntervalInHours: 12 maxImagesPerRepo: 10 required: true x-position: 1 responses: '200': description: '' description: '' summary: Set Account Settings patch: tags: - Workload Account Setting operationId: WorkloadAccountSetting_UpdateAccountSettings_patch_/v2/workload/accountSetting requestBody: x-name: _ content: application/json: schema: type: object properties: imageAssurance: properties: daysToKeepNonActiveKubernetesImages: type: integer daysToKeepNonActiveShiftLeftImages: type: integer daysToKeepNonActiveAwsEcsImages: type: integer registryScanningIntervalInHours: type: integer maxImagesPerRepo: type: integer examples: WorkloadAccountSettingModel: value: imageAssurance: daysToKeepNonActiveKubernetesImages: 7 daysToKeepNonActiveShiftLeftImages: 30 daysToKeepNonActiveAwsEcsImages: 7 registryScanningIntervalInHours: 12 maxImagesPerRepo: 10 required: true x-position: 1 responses: '200': description: '' description: '' summary: Update Account Settings /v2/kubernetes/podGroup/daemonSet/{id}/podList: get: tags: - Kubernetes Pod Group summary: Get Daemon Set Pod List operationId: KubernetesPodGroup_GetDaemonSetPodList_get_/v2/kubernetes/podGroup/daemonSet/{id}/podList parameters: - name: id in: path required: true description: the Dome9 daemon set id schema: type: string x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: type: string description: Get daemon set pods /v2/kubernetes/podGroup/deployment/{id}/podList: get: tags: - Kubernetes Pod Group summary: Get Deployment Pod List operationId: KubernetesPodGroup_GetDeploymentPodList_get_/v2/kubernetes/podGroup/deployment/{id}/podList parameters: - name: id in: path required: true description: the Dome9 deployment id schema: type: string x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: type: string description: Get deployment pods /v2/kubernetes/podGroup/replicaSet/{id}/podList: get: tags: - Kubernetes Pod Group summary: Get Replica Set Pod List operationId: KubernetesPodGroup_GetReplicaSetPodList_get_/v2/kubernetes/podGroup/replicaSet/{id}/podList parameters: - name: id in: path required: true description: the Dome9 replica set id schema: type: string x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: type: string description: Get replica set pods /v2/kubernetes/podGroup/statefulSet/{id}/podList: get: tags: - Kubernetes Pod Group summary: Get Stateful Set Pod List operationId: KubernetesPodGroup_GetStatefulSetPodList_get_/v2/kubernetes/podGroup/statefulSet/{id}/podList parameters: - name: id in: path required: true description: the Dome9 stateful set id schema: type: string x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: type: string description: Get stateful set pods /v2/kubernetes/podGroup/pod/{id}/images: get: tags: - Kubernetes Pod Group summary: Get Pod Images operationId: KubernetesPodGroup_GetPodImages_get_/v2/kubernetes/podGroup/pod/{id}/images parameters: - name: id in: path required: true description: the Dome9 pod id schema: type: string x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: type: string description: Get pod images /v2/kubernetes/podGroup/cronJob/{id}/images: get: tags: - Kubernetes Pod Group summary: Get Cron Job Images operationId: KubernetesPodGroup_GetCronJobImages_get_/v2/kubernetes/podGroup/cronJob/{id}/images parameters: - name: id in: path required: true description: the Dome9 pod id schema: type: string x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: type: string description: Get pod images /v2/kubernetes/podGroup/daemonSet/{id}/images: get: tags: - Kubernetes Pod Group summary: Get Daemon Set Images operationId: KubernetesPodGroup_GetDaemonSetImages_get_/v2/kubernetes/podGroup/daemonSet/{id}/images parameters: - name: id in: path required: true description: the Dome9 daemonset id schema: type: string x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: type: string description: Get daemonset images /v2/kubernetes/podGroup/deployment/{id}/images: get: tags: - Kubernetes Pod Group summary: Get Deployment Images operationId: KubernetesPodGroup_GetDeploymentImages_get_/v2/kubernetes/podGroup/deployment/{id}/images parameters: - name: id in: path required: true description: the Dome9 deployment id schema: type: string x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: type: string description: Get deployment images /v2/kubernetes/podGroup/replicaSet/{id}/images: get: tags: - Kubernetes Pod Group summary: Get Replica Set Images operationId: KubernetesPodGroup_GetReplicaSetImages_get_/v2/kubernetes/podGroup/replicaSet/{id}/images parameters: - name: id in: path required: true description: the Dome9 replicaset id schema: type: string x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: type: string description: Get replica set images /v2/kubernetes/podGroup/statefulSet/{id}/images: get: tags: - Kubernetes Pod Group summary: Get Stateful Set Images operationId: KubernetesPodGroup_GetStatefulSetImages_get_/v2/kubernetes/podGroup/statefulSet/{id}/images parameters: - name: id in: path required: true description: the Dome9 stateful set id schema: type: string x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: type: string description: Get stateful set images /v2/kubernetes/imageAssurance/image: get: tags: - Kubernetes Image Assurance summary: Get Image operationId: KubernetesImageAssurance_GetImage_get_/v2/kubernetes/imageAssurance/image parameters: - name: id in: query description: "Image ID (entityDome9Id in the Image Entity viewer)\n \n id in the following\ \ format: ASSET_TYPE|CloudAccountId|Image|ImageSha\n (ASSET_TYPE: 11 for Kubernetes Image)\n \ \ e.g.\n 11|ffb03c67-83c0-4d92-bf03-880eb0781948|Image|sha256:40d4b9bf327a85059a4842b043f67b8a7221d8487d42d17a55f85085d0ffb328\n\ \ \n " schema: type: string x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/KubernetesImageViewModel' description: Fetch a specific image /v2/kubernetes/imageAssurance/image/vulnerabilities: get: tags: - Kubernetes Image Assurance summary: Get Image Vulnerabilities operationId: KubernetesImageAssurance_GetImageVulnerabilities_get_/v2/kubernetes/imageAssurance/image/vulnerabilities parameters: - name: id in: query description: Image ID (entityDome9Id) schema: type: string x-position: 1 - name: category in: query description: filter vulnerabilities with specific category schema: type: string default: '' nullable: true x-position: 2 - name: remediationsOnly in: query description: filter vulnerabilities with remediation schema: type: boolean default: false x-position: 3 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/KubernetesImageScanVulnerabilitiesViewModel' deprecated: true description: Get the list of all vulnerabilities for a specific image (this api is deprecated, please use '/v2/vulnerability/' instead) /v2/kubernetes/imageAssurance/image/podGroups: get: tags: - Kubernetes Image Assurance summary: Get Pod Groups operationId: KubernetesImageAssurance_GetPodGroups_get_/v2/kubernetes/imageAssurance/image/podGroups parameters: - name: id in: query description: "Image ID (entityDome9Id).\n \n For results in the specific cluster.\n \ \ \n " schema: type: string nullable: true x-position: 1 - name: externalId in: query description: "External image id (Image SHA).\n \n External Image Id is built in the following\ \ format: sha256:[image sha]\n For results in all environments of the account.\n \n\ \ " schema: type: string nullable: true x-position: 2 responses: '200': description: Success (Empty list means no pods are running the image). content: application/json: schema: type: array items: $ref: '#/components/schemas/KubernetesImagePodGroupsViewModel' description: "Get pod groups that have running pod with specific image. \nUse either Dome9 Image Id for results\ \ in current environment, or External Image Id for results in all environments of the account." /v2/kubernetes/imageAssurance/account/{clusterId}/podsImages: get: tags: - Kubernetes Image Assurance operationId: KubernetesImageAssurance_GetClusterPodAndImages_get_/v2/kubernetes/imageAssurance/account/{clusterId}/podsImages parameters: - name: clusterId in: path required: true schema: type: string x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/KubernetesPodsImagesViewModel' description: '' summary: Get Cluster Pod And Images /v2/kubernetes/imageAssurance/policy/{id}: get: tags: - Kubernetes Image Assurance Policy summary: Get operationId: KubernetesImageAssurancePolicy_Get_get_/v2/kubernetes/imageAssurance/policy/{id} parameters: - name: id in: path required: true description: Policy's ID schema: type: string format: guid x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/ImageAssurancePolicyViewModel' deprecated: true description: 'Get single policy by its ID. Returns a policy matching a given ID. (move to use /v2/vulnerability/policy)' delete: tags: - Kubernetes Image Assurance Policy summary: Delete operationId: KubernetesImageAssurancePolicy_Delete_delete_/v2/kubernetes/imageAssurance/policy/{id} parameters: - name: id in: path required: true description: Policy's ID schema: type: string format: guid x-position: 1 responses: '200': description: '' deprecated: true description: Delete policy by its ID. (move to use /v2/vulnerability/policy) /v2/kubernetes/imageAssurance/policy: get: tags: - Kubernetes Image Assurance Policy summary: Get All operationId: KubernetesImageAssurancePolicy_GetAll_get_/v2/kubernetes/imageAssurance/policy responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/ImageAssurancePolicyViewModel' deprecated: true description: 'Get all policies for the requesting account. Returns a collection of policies. (move to use /v2/vulnerability/policy)' post: tags: - Kubernetes Image Assurance Policy summary: Post operationId: KubernetesImageAssurancePolicy_Post_post_/v2/kubernetes/imageAssurance/policy requestBody: x-name: kubernetesImageAssurancePolicyRequestModels description: Policies to create content: application/json: schema: type: array items: $ref: '#/components/schemas/ImageAssurancePolicyRequestModel' required: true x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/ImageAssurancePolicyViewModel' deprecated: true description: 'Create new policies. Returns a multi status response containing successfully created policies without an error message and failed policies with an error message. (move to use /v2/vulnerability/policy)' put: tags: - Kubernetes Image Assurance Policy summary: Put operationId: KubernetesImageAssurancePolicy_Put_put_/v2/kubernetes/imageAssurance/policy requestBody: x-name: kubernetesImageAssurancePolicyRequestModels description: Policies to update content: application/json: schema: type: array items: $ref: '#/components/schemas/ImageAssurancePolicyRequestModel' required: true x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/ImageAssurancePolicyViewModel' deprecated: true description: 'Update policies. Returns a multi status response containing successfully updated policies without an error message and failed policies with an error message. (move to use /v2/vulnerability/policy)' /v2/workload/imageAssurance/images: get: tags: - Workload Image Assurance summary: Get Workload Images By Dome9 Id operationId: WorkloadImageAssurance_GetWorkloadImagesByDome9Id_get_/v2/workload/imageAssurance/images parameters: - name: dome9Id in: query schema: type: string x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/WorkloadImageViewModel' description: Get images by workload dome9id /v2/workload/imageAssurance/image: get: tags: - Workload Image Assurance summary: Get Image operationId: WorkloadImageAssurance_GetImage_get_/v2/workload/imageAssurance/image parameters: - name: environmentId in: query description: UUID of the CloudGuard environment containing the image schema: type: string format: guid x-position: 1 - name: imageIdOrDigest in: query description: Image-id or digest of an image (with or without "sha256:" prefix) schema: type: string x-position: 2 responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/KubernetesImageViewModel' description: Get image details by image-id or digest /v2/workload/imageAssurance/image/workloads: get: tags: - Workload Image Assurance operationId: WorkloadImageAssurance_GetImageWorkloadsByImageId_get_/v2/workload/imageAssurance/image/workloads parameters: - name: imageIdOrDigest in: query description: ConfigSha of an image or a digest schema: type: string x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/ImageWorkloadsViewModel' description: '' summary: Get Image Workloads By Image Id /v2/workload/imageAssurance/EcsTask/Images: get: tags: - Workload Image Assurance summary: Get Task Images operationId: WorkloadImageAssurance_GetTaskImages_get_/v2/workload/imageAssurance/EcsTask/Images parameters: - name: id in: query description: the Dome9 EcsTask id schema: type: string x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: type: string description: Get EcsTask images /v2/workload/imageAssurance/EcsService/Images: get: tags: - Workload Image Assurance summary: Get Service Images operationId: WorkloadImageAssurance_GetServiceImages_get_/v2/workload/imageAssurance/EcsService/Images parameters: - name: id in: query description: the Dome9 Service id schema: type: string x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: type: string description: Get EcsService images /v2/workload/imageAssurance/EcsCluster/Images: get: tags: - Workload Image Assurance summary: Get Cluster Images operationId: WorkloadImageAssurance_GetClusterImages_get_/v2/workload/imageAssurance/EcsCluster/Images parameters: - name: id in: query description: the Dome9 Cluster id schema: type: string x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: type: string description: Get EcsCluster images /v2/workload/imageAssurance/scanImage: post: tags: - Workload Image Assurance operationId: WorkloadImageAssurance_ScanImage_post_/v2/workload/imageAssurance/scanImage requestBody: x-name: imageScanRequestModel content: application/json: schema: $ref: '#/components/schemas/ImageScanRequestModel' required: true x-position: 1 responses: '200': description: '' description: '' summary: Scan Image /v2/workload/imageAssurance/scanEnvironment/{environmentId}/all: post: tags: - Workload Image Assurance operationId: WorkloadImageAssurance_ScanEnvironmentAll_post_/v2/workload/imageAssurance/scanEnvironment/{environmentId}/all parameters: - name: environmentId in: path required: true schema: type: string format: guid x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/ImageScanRequestViewModel' description: '' summary: Scan Environment All /v2/workload/imageAssurance/scanEnvironment/{environmentId}/failed: post: tags: - Workload Image Assurance operationId: WorkloadImageAssurance_ScanEnvironmentFailed_post_/v2/workload/imageAssurance/scanEnvironment/{environmentId}/failed parameters: - name: environmentId in: path required: true schema: type: string format: guid x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/ImageScanRequestViewModel' description: '' summary: Scan Environment Failed /v2/ShiftLeftAccount: get: tags: - Shift Left Account summary: Get All operationId: ShiftLeftAccount_GetAll_get_/v2/ShiftLeftAccount responses: '200': description: A list of ShiftLeft accounts content: application/json: schema: type: array items: $ref: '#/components/schemas/ShiftLeftAccountViewModel' description: Get a list of all ShiftLeft accounts post: tags: - Shift Left Account summary: Post operationId: ShiftLeftAccount_Post_post_/v2/ShiftLeftAccount requestBody: x-name: model description: ShiftLeftGetViewModel content: application/json: schema: $ref: '#/components/schemas/ShiftLeftPostViewModel' required: true x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/ShiftLeftAccountViewModel' description: Add (onboard) a new ShiftLeft account to CloudGuard /v2/ShiftLeftAccount/{id}: get: tags: - Shift Left Account summary: Get operationId: ShiftLeftAccount_Get_get_/v2/ShiftLeftAccount/{id} parameters: - name: id in: path required: true description: the ShiftLeft account id schema: type: string format: guid x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/ShiftLeftAccountViewModel' description: Get details for a specific ShiftLeft Account delete: tags: - Shift Left Account summary: Delete operationId: ShiftLeftAccount_Delete_delete_/v2/ShiftLeftAccount/{id} parameters: - name: id in: path required: true description: The CloudGuard ShiftLeft account id (UUID) schema: type: string format: guid x-position: 1 responses: '200': description: '' description: Delete a ShiftLeft account and linked entities from CloudGuard. /v2/ShiftLeftAccount/{id}/AccountName: put: tags: - Shift Left Account summary: Update Account Name operationId: ShiftLeftAccount_UpdateAccountName_put_/v2/ShiftLeftAccount/{id}/AccountName parameters: - name: id in: path required: true description: the ShiftLeft account id schema: type: string format: guid x-position: 1 - name: name in: query description: the updated name as it will appear in CloudGuard schema: type: string maxLength: 500 pattern: ^[\p{L}\p{M}0-9\s\-_'.,#/@;:!=]*$ x-position: 2 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/ShiftLeftAccountViewModel' description: Update a ShiftLeft account name (as it appears in CloudGuard) /v2/ShiftLeftAccount/{id}/accountDescription: put: tags: - Shift Left Account summary: Update Account Description operationId: ShiftLeftAccount_UpdateAccountDescription_put_/v2/ShiftLeftAccount/{id}/accountDescription parameters: - name: id in: path required: true description: the ShiftLeft account id schema: type: string format: guid x-position: 1 - name: description in: query description: the updated description as it will appear in CloudGuard schema: type: string maxLength: 1000 pattern: ^[\p{L}\p{M}0-9\s\-_'.,#/@;:!=]*$ nullable: true x-position: 2 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/ShiftLeftAccountViewModel' description: Update a ShiftLeft account description (as it appears in CloudGuard) /v2/ShiftLeftAccount/{id}/DeleteForce: delete: tags: - Shift Left Account summary: Delete Force operationId: ShiftLeftAccount_DeleteForce_delete_/v2/ShiftLeftAccount/{id}/DeleteForce parameters: - name: id in: path required: true description: The CloudGuard ShiftLeft account id (UUID) schema: type: string format: guid x-position: 1 responses: '200': description: '' deprecated: true description: Delete a ShiftLeft account and linked entities from CloudGuard. /v2/ShiftLeftAccount/{id}/organizationalUnit: put: tags: - Shift Left Account summary: Update Organizational Id operationId: ShiftLeftAccount_UpdateOrganizationalId_put_/v2/ShiftLeftAccount/{id}/organizationalUnit parameters: - name: id in: path required: true description: The Guid ID of the ShiftLeft account schema: type: string format: guid x-position: 1 requestBody: x-name: updateData description: The Guid ID of the Organizational Unit to attach to. Use null in order to attach to root Organizational Unit content: application/json: schema: $ref: '#/components/schemas/UpdateIdViewModel' required: true x-position: 2 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/ShiftLeftAccountViewModel' description: 'Update the ID of the Organizational unit that this cloud account will be attached to. Use ''null'' for root organizational unit' /v2/ShiftLeftAccount/organizationalUnit/move: put: tags: - Shift Left Account summary: Move Cloud Accounts To Organizational Unit operationId: ShiftLeftAccount_MoveCloudAccountsToOrganizationalUnit_put_/v2/ShiftLeftAccount/organizationalUnit/move requestBody: x-name: moveData content: application/json: schema: $ref: '#/components/schemas/MoveOrganizationalUnitViewModel' required: true x-position: 1 responses: '200': description: '' content: application/octet-stream: schema: type: string format: binary description: 'Detach cloud accounts from an Organizational unit and attach them to another Organizational unit Use ''null'' for root organizational unit' /v2/ShiftLeftAccount/organizationalUnit/moveAll: put: tags: - Shift Left Account summary: Move All Cloud Accounts To Organizational Unit operationId: ShiftLeftAccount_MoveAllCloudAccountsToOrganizationalUnit_put_/v2/ShiftLeftAccount/organizationalUnit/moveAll requestBody: x-name: updateData content: application/json: schema: $ref: '#/components/schemas/UpdateIdViewModel' required: true x-position: 1 responses: '200': description: '' content: application/octet-stream: schema: type: string format: binary description: Detach all cloud accounts from their current organizational unit and attach them to a new one. Default is to root organizational unit /v2/ShiftLeftAccount/organizationalUnit/attach: post: tags: - Shift Left Account summary: Post Attach Multi operationId: ShiftLeftAccount_PostAttachMulti_post_/v2/ShiftLeftAccount/organizationalUnit/attach requestBody: x-name: attachData content: application/json: schema: $ref: '#/components/schemas/AttachCloudAccountsViewModel' required: true x-position: 1 responses: '200': description: '' content: application/octet-stream: schema: type: string format: binary description: Attach several cloud accounts to a specific Organizational Unit. User 'null' as root Organizational Unit as target /v2/ShiftLeftPolicy/{id}: get: tags: - Shift Left Policy summary: Get operationId: ShiftLeftPolicy_Get_get_/v2/ShiftLeftPolicy/{id} parameters: - name: id in: path required: true description: Policy's ID schema: type: string format: guid x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/ShiftLeftPolicyViewModel' deprecated: true description: 'Get single policy by its ID. Returns a policy matching a given ID. (move to use /v2/vulnerability/policy)' /v2/ShiftLeftPolicy: get: tags: - Shift Left Policy summary: Get All operationId: ShiftLeftPolicy_GetAll_get_/v2/ShiftLeftPolicy responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/ShiftLeftPolicyViewModel' deprecated: true description: 'Get all policies for the requesting account. Returns a collection of policies. (move to use /v2/vulnerability/policy)' post: tags: - Shift Left Policy summary: Post operationId: ShiftLeftPolicy_Post_post_/v2/ShiftLeftPolicy requestBody: x-name: shiftLeftPolicyRequestModels description: Policies to create content: application/json: schema: type: array items: $ref: '#/components/schemas/ShiftLeftPolicyRequestModel' required: true x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/ShiftLeftPolicyViewModel' deprecated: true description: 'Create new policies. Returns a multi status response containing successfully created policies without an error message and failed policies with an error message. (move to use /v2/vulnerability/policy)' put: tags: - Shift Left Policy summary: Put operationId: ShiftLeftPolicy_Put_put_/v2/ShiftLeftPolicy requestBody: x-name: shiftLeftPolicyRequestModels description: Policies to update content: application/json: schema: type: array items: $ref: '#/components/schemas/ShiftLeftPolicyRequestModel' required: true x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/ShiftLeftPolicyViewModel' deprecated: true description: 'Update policies. Returns a multi status response containing successfully updated policies without an error message and failed policies with an error message. (move to use /v2/vulnerability/policy)' delete: tags: - Shift Left Policy summary: Delete operationId: ShiftLeftPolicy_Delete_delete_/v2/ShiftLeftPolicy parameters: - name: id in: query description: Policy's ID schema: type: string format: guid x-position: 1 responses: '200': description: '' deprecated: true description: Delete policy by its ID. (move to use /v2/vulnerability/policy) /v2/kubernetes/admissionControl/policy/{id}: get: tags: - Kubernetes Admission Control summary: Get Policy operationId: KubernetesAdmissionControl_GetPolicy_get_/v2/kubernetes/admissionControl/policy/{id} parameters: - name: id in: path required: true description: Policy's ID schema: type: string format: guid x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/AdmissionControlPolicyViewModel' description: 'Get single policy by its ID. Returns a policy matching a given ID.' delete: tags: - Kubernetes Admission Control summary: Delete Policy operationId: KubernetesAdmissionControl_DeletePolicy_delete_/v2/kubernetes/admissionControl/policy/{id} parameters: - name: id in: path required: true description: Policy's ID schema: type: string format: guid x-position: 1 responses: '200': description: '' description: Delete policy by its ID. /v2/kubernetes/admissionControl/policy: get: tags: - Kubernetes Admission Control summary: Get Policy All operationId: KubernetesAdmissionControl_GetPolicyAll_get_/v2/kubernetes/admissionControl/policy responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/AdmissionControlPolicyViewModel' description: 'Get all policies for the requesting account. Returns a collection of policies.' post: tags: - Kubernetes Admission Control summary: Post Policy operationId: KubernetesAdmissionControl_PostPolicy_post_/v2/kubernetes/admissionControl/policy requestBody: x-name: admissionControlPolicyRequestModel description: Policies to create content: application/json: schema: type: array items: $ref: '#/components/schemas/AdmissionControlPolicyRequestModel' required: true x-position: 1 responses: '207': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/AdmissionControlPolicyViewModel' description: 'Create new policies. Returns a multi status response containing successfully created policies without an error message and failed policies with an error message.' put: tags: - Kubernetes Admission Control summary: Put Policy operationId: KubernetesAdmissionControl_PutPolicy_put_/v2/kubernetes/admissionControl/policy requestBody: x-name: admissionControlPolicyRequestModel description: Policies to update content: application/json: schema: type: array items: $ref: '#/components/schemas/AdmissionControlPolicyRequestModel' required: true x-position: 1 responses: '207': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/AdmissionControlPolicyViewModel' description: 'Update policies. Returns a multi status response containing successfully updated policies without an error message and failed policies with an error message.' /v2/kubernetes/admissionControl/policiesSummary/{id}: get: tags: - Kubernetes Admission Control summary: Get Agent Policies Summary operationId: KubernetesAdmissionControl_GetAgentPoliciesSummary_get_/v2/kubernetes/admissionControl/policiesSummary/{id} parameters: - name: id in: path required: true description: the Kubernetes account id schema: type: string format: guid x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/AdmissionControlPoliciesSummaryViewModel' description: Get Admission Control policies for a specific Kubernetes Account /v2/kubernetes/admissionControl/validation/validateAssessment: post: tags: - Kubernetes Admission Control summary: Validate Assessment operationId: KubernetesAdmissionControl_ValidateAssessment_post_/v2/kubernetes/admissionControl/validation/validateAssessment requestBody: x-name: verifyRequest description: Admission Control Verify GSL Rules Request content: application/json: schema: $ref: '#/components/schemas/AdmissionControlVerifyRequestViewModel' required: true x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/KubernetesAdmissionControlVerifyResult' description: 'Validate the GSL Rules Syntax and Run GSL rules assessment on inventory Returns the GSL verifications and Assessments result.' /v2/kubernetes/admissionControl/validation/validateRule: post: tags: - Kubernetes Admission Control summary: Validate Rule operationId: KubernetesAdmissionControl_ValidateRule_post_/v2/kubernetes/admissionControl/validation/validateRule requestBody: x-name: verifyRequest description: Admission Control Validate GSL Rules Request content: application/json: schema: $ref: '#/components/schemas/AdmissionControlVerifyRequestViewModel' required: true x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/AdmissionControlVerifyResultViewModel' description: 'Validate the GSL Rules Syntax Returns the GSL verifications result.' /v2/kubernetes/admissionControl/validation/validateHistorical: post: tags: - Kubernetes Admission Control summary: Validate Historical operationId: KubernetesAdmissionControl_ValidateHistorical_post_/v2/kubernetes/admissionControl/validation/validateHistorical requestBody: x-name: verifyRequest description: Historical Validate GSL Rules Request content: application/json: schema: $ref: '#/components/schemas/AdmissionControlVerifyRequestViewModel' required: true x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/AdmissionControlEvalResultViewModel' description: 'Running the GSL Rules on the Historical Admission Reviews for the Kubernetes Cluster Returns the Evaluation results when running the GSL Rules' /v2/kubernetes/admissionControl/exclusions: get: tags: - Kubernetes Admission Control summary: Get Exclusions operationId: KubernetesAdmissionControl_GetExclusions_get_/v2/kubernetes/admissionControl/exclusions responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/AdmissionControlExclusionPutRequestViewModel' description: 'Get all exclusions for the requesting account. Returns a collection of exclusions.' post: tags: - Kubernetes Admission Control summary: Post Exclusion operationId: KubernetesAdmissionControl_PostExclusion_post_/v2/kubernetes/admissionControl/exclusions requestBody: x-name: model description: details for the exclusion content: application/json: schema: $ref: '#/components/schemas/AdmissionControlExclusionPostRequestModel' required: true x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/AdmissionControlExclusionPutRequestViewModel' description: Add a new exclusion delete: tags: - Kubernetes Admission Control summary: Delete Exclusion operationId: KubernetesAdmissionControl_DeleteExclusion_delete_/v2/kubernetes/admissionControl/exclusions parameters: - name: id in: query description: the id of the exclusion to delete schema: type: string format: guid x-position: 1 responses: '200': description: '' description: Delete an ac exclusion put: tags: - Kubernetes Admission Control summary: Put Exclusion operationId: KubernetesAdmissionControl_PutExclusion_put_/v2/kubernetes/admissionControl/exclusions requestBody: x-name: model description: details for the exclusion content: application/json: schema: $ref: '#/components/schemas/AdmissionControlExclusionPutRequestViewModel' required: true x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/AdmissionControlExclusionPutRequestViewModel' description: Update an exclusion /v2/kubernetes/admissionControl/exclusions/{id}: get: tags: - Kubernetes Admission Control summary: Get Exclusion operationId: KubernetesAdmissionControl_GetExclusion_get_/v2/kubernetes/admissionControl/exclusions/{id} parameters: - name: id in: path required: true description: Exclusion's ID schema: type: string format: guid x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/AdmissionControlExclusionPutRequestViewModel' description: 'Get single exclusion by its ID. Returns an exclusion matching a given ID.' /v2/kubernetes/admissionControl/imageAdmissionExclusion/{id}: get: tags: - Image Admission Exclusion summary: Get operationId: ImageAdmissionExclusion_Get_get_/v2/kubernetes/admissionControl/imageAdmissionExclusion/{id} parameters: - name: id in: path required: true description: exclusion ID schema: type: string format: guid x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/KubernetesImageAdmissionExclusionViewModel' description: 'Get single exclusion by exclusion ID. Returns an exclusion matching a given exclusion ID.' delete: tags: - Image Admission Exclusion summary: Delete operationId: ImageAdmissionExclusion_Delete_delete_/v2/kubernetes/admissionControl/imageAdmissionExclusion/{id} parameters: - name: id in: path required: true description: exclusion ID schema: type: string format: guid x-position: 1 responses: '200': description: '' description: Delete exclusion by exclusion ID. /v2/kubernetes/admissionControl/imageAdmissionExclusion: get: tags: - Image Admission Exclusion summary: Get All operationId: ImageAdmissionExclusion_GetAll_get_/v2/kubernetes/admissionControl/imageAdmissionExclusion responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/KubernetesImageAdmissionExclusionViewModel' description: 'Get all exclusions for the requesting account. Returns a collection of exclusions.' put: tags: - Image Admission Exclusion summary: Put operationId: ImageAdmissionExclusion_Put_put_/v2/kubernetes/admissionControl/imageAdmissionExclusion requestBody: x-name: exclusionViewModel description: exclusions to update content: application/json: schema: $ref: '#/components/schemas/KubernetesImageAdmissionExclusionViewModel' required: true x-position: 1 responses: '207': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/KubernetesImageAdmissionExclusionViewModel' description: 'Update exclusions. Returns updated exclusion.' post: tags: - Image Admission Exclusion summary: Post operationId: ImageAdmissionExclusion_Post_post_/v2/kubernetes/admissionControl/imageAdmissionExclusion requestBody: x-name: exclusionViewModel description: exclusions to create content: application/json: schema: $ref: '#/components/schemas/KubernetesImageAdmissionPostExclusionViewModel' required: true x-position: 1 responses: '207': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/KubernetesImageAdmissionExclusionViewModel' description: 'Create new exclusions. Returns created exclusion.' /v2/kubernetes/imageAssurance/admissionExclusion/{id}: get: tags: - Kubernetes Image Admission Exclusion summary: Get operationId: KubernetesImageAdmissionExclusion_Get_get_/v2/kubernetes/imageAssurance/admissionExclusion/{id} parameters: - name: id in: path required: true description: ruleset ID schema: type: integer format: int64 x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/DeprecatedKubernetesImageAdmissionExclusionViewModel' deprecated: true description: 'Get single exclusion by ruleset ID. Returns a exclusion matching a given ruleset ID. (this api is deprecated, please use ''/v2/kubernetes/admissionControl/imageAdmissionExclusion'' instead)' delete: tags: - Kubernetes Image Admission Exclusion summary: Delete operationId: KubernetesImageAdmissionExclusion_Delete_delete_/v2/kubernetes/imageAssurance/admissionExclusion/{id} parameters: - name: id in: path required: true description: ruleset ID schema: type: integer format: int64 x-position: 1 responses: '200': description: '' deprecated: true description: Delete exclusion by ruleset ID. (this api is deprecated, please use '/v2/kubernetes/admissionControl/imageAdmissionExclusion' instead) /v2/kubernetes/imageAssurance/admissionExclusion: get: tags: - Kubernetes Image Admission Exclusion summary: Get All operationId: KubernetesImageAdmissionExclusion_GetAll_get_/v2/kubernetes/imageAssurance/admissionExclusion responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/DeprecatedKubernetesImageAdmissionExclusionViewModel' deprecated: true description: 'Get all exclusions for the requesting account. Returns a collection of exclusions. (this api is deprecated, please use ''/v2/kubernetes/admissionControl/imageAdmissionExclusion'' instead)' put: tags: - Kubernetes Image Admission Exclusion summary: Put operationId: KubernetesImageAdmissionExclusion_Put_put_/v2/kubernetes/imageAssurance/admissionExclusion requestBody: x-name: exclusionViewModel description: exclusions to create content: application/json: schema: $ref: '#/components/schemas/DeprecatedKubernetesImageAdmissionExclusionViewModel' required: true x-position: 1 responses: '207': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/DeprecatedKubernetesImageAdmissionExclusionViewModel' deprecated: true description: 'Create or update new exclusions. Returns created\updated exclusion. (this api is deprecated, please use ''/v2/kubernetes/admissionControl/imageAdmissionExclusion'' instead)' /v2/cloudAccount/ecs/{cloudAccountId}: post: tags: - Ecs Image Scan summary: Enable Or Disable Ecs Image Scan operationId: EcsImageScan_EnableOrDisableEcsImageScan_post_/v2/cloudAccount/ecs/{cloudAccountId} parameters: - name: cloudAccountId in: path required: true schema: type: string format: guid x-position: 1 requestBody: x-name: ecsImageScanConfig content: application/json: schema: $ref: '#/components/schemas/EcsImageScanConfigViewModel' required: true x-position: 2 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/EcsImageScanConfigViewModel' description: Enable or Disable ECS Image Scan get: tags: - Ecs Image Scan summary: Get Ecs Image Scan Config operationId: EcsImageScan_GetEcsImageScanConfig_get_/v2/cloudAccount/ecs/{cloudAccountId} parameters: - name: cloudAccountId in: path required: true schema: type: string format: guid x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/EcsImageScanConfigViewModel' description: Get ECS Image Scan Enable/Disable status /v2/vulnerability/policy/{id}: get: tags: - Vulnerability Policy summary: Get operationId: VulnerabilityPolicy_Get_get_/v2/vulnerability/policy/{id} parameters: - name: id in: path required: true description: Policy's ID schema: type: string format: guid x-position: 1 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/VlmWorkloadPolicyViewModel' description: 'Get single policy by its ID. Returns a policy matching a given ID.' /v2/vulnerability/policy: get: tags: - Vulnerability Policy summary: Get All operationId: VulnerabilityPolicy_GetAll_get_/v2/vulnerability/policy responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/VlmWorkloadPolicyViewModel' description: 'Get all policies for the requesting account. Returns a collection of policies.' post: tags: - Vulnerability Policy summary: Post operationId: VulnerabilityPolicy_Post_post_/v2/vulnerability/policy requestBody: x-name: vlmPolicyRequestModels description: Policies to create content: application/json: schema: type: array items: $ref: '#/components/schemas/VlmWorkloadPolicyRequestModel' required: true x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/VlmWorkloadPolicyViewModel' description: 'Create new policies. Returns a multi status response containing successfully created policies without an error message and failed policies with an error message.' put: tags: - Vulnerability Policy summary: Put operationId: VulnerabilityPolicy_Put_put_/v2/vulnerability/policy requestBody: x-name: vlmPolicyRequestModels description: Policies to update content: application/json: schema: type: array items: $ref: '#/components/schemas/VlmWorkloadPolicyRequestModel' required: true x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/VlmWorkloadPolicyViewModel' description: 'Update policies. Returns a multi status response containing successfully updated policies without an error message and failed policies with an error message.' delete: tags: - Vulnerability Policy summary: Delete operationId: VulnerabilityPolicy_Delete_delete_/v2/vulnerability/policy parameters: - name: id in: query description: Policy's ID schema: type: string format: guid x-position: 1 responses: '200': description: '' description: Delete policy by its ID. /v2/sbom/formats: get: tags: - SBOM Export summary: SBOM Format Versions operationId: SBOMExport_SBOMFormatVersions_get_/v2/sbom/formats responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/SBOMFormatVersions' description: Get the available SBOM formats /v2/sbom/export: get: tags: - SBOM Export summary: ExportSBOM operationId: SBOMExport_ExportSBOM_get_/v2/sbom/export parameters: - name: EnvironmentId in: query required: true description: the id of the environment containing the entity schema: type: string format: guid x-position: 1 - name: EntityType in: query required: true description: the type of entity schema: $ref: '#/components/schemas/VlmEntityType' x-position: 2 - name: ExternalId in: query required: true description: external id of the entity (with 'sha256:' prefix) schema: type: string x-position: 3 - name: SBOMVersionFormatId in: query required: true description: the ID of the requaired SBOM format schema: $ref: '#/components/schemas/SBOMVersionFormatId' x-position: 4 responses: '200': description: '' content: application/octet-stream: schema: type: string format: binary description: Export SBOM to a file /v2/vulnerability/scan-results: get: tags: - Vulnerabilities summary: Get Scan Results operationId: Vulnerabilities_GetScanResults_get_/v2/vulnerability/scan-results parameters: - name: EnvironmentId in: query description: the id of the environment containing the entity (not required if EntityType is Image) schema: type: string nullable: true x-position: 2 - name: EntityType in: query required: true description: the type of entity schema: $ref: '#/components/schemas/VlmEntityTypeBC' x-position: 3 - name: EntityId in: query required: true description: image id for images (with 'sha256:' prefix), for all others external id schema: type: string x-position: 4 - name: HasRemediation in: query description: return only Packages and Cves which are fixable (has remediation) schema: type: boolean nullable: true x-position: 100 responses: '200': description: returns the vulnerabilities scan results for the entity content: application/json: schema: {} deprecated: true description: Get vulnerabilities scan results for an entity /v2/vulnerability/scan-results-metadata: get: tags: - Vulnerabilities summary: Get Scan Results Metadata operationId: Vulnerabilities_GetScanResultsMetadata_get_/v2/vulnerability/scan-results-metadata parameters: - name: EnvironmentId in: query description: the id of the environment containing the entity (not required if EntityType is Image) schema: type: string nullable: true x-position: 1 - name: EntityType in: query required: true description: the type of entity schema: $ref: '#/components/schemas/VlmEntityTypeBC' x-position: 2 - name: EntityId in: query required: true description: image id for images (with 'sha256:' prefix), for all others external id schema: type: string x-position: 3 responses: '200': description: returns the vulnerabilities scan results metadata for the entity content: application/json: schema: $ref: '#/components/schemas/VlmScanResultMetadataViewModel' deprecated: true description: Get vulnerabilities scan results metadata for an entity /v2/vulnerability/scan-metadata: get: tags: - Vulnerabilities summary: Get Scan Metadata operationId: Vulnerabilities_GetScanMetadata_get_/v2/vulnerability/scan-metadata parameters: - name: EnvironmentId in: query required: true description: the id of the environment containing the entity schema: type: string format: guid x-position: 1 - name: EntityType in: query required: true description: the type of entity schema: $ref: '#/components/schemas/VlmEntityType' x-position: 2 - name: EntityId in: query required: true description: external id of the entity schema: type: string x-position: 3 responses: '200': description: returns the vulnerabilities scan results metadata for the entity content: application/json: schema: $ref: '#/components/schemas/VlmScanMetadataViewModel' description: Get vulnerabilities scan results metadata for an entity /v2/vulnerability/scan: get: tags: - Vulnerabilities summary: Get Scan operationId: Vulnerabilities_GetScan_get_/v2/vulnerability/scan parameters: - name: InUse in: query description: return only Packages which are in use schema: type: boolean nullable: true x-position: 2 - name: EnvironmentId in: query required: true description: the id of the environment containing the entity schema: type: string format: guid x-position: 3 - name: EntityType in: query required: true description: the type of entity schema: $ref: '#/components/schemas/VlmEntityType' x-position: 4 - name: EntityId in: query required: true description: external id of the entity schema: type: string x-position: 5 - name: HasRemediation in: query description: return only Packages and Cves which are fixable (has remediation) schema: type: boolean nullable: true x-position: 100 responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/ScanResultViewModel' description: retrieve vulnerability scan report for an entity /v2/vulnerability/scan-results-export-csvs: get: tags: - Vulnerabilities summary: Export Scan Results To Csv operationId: Vulnerabilities_ExportScanResultsToCsv_get_/v2/vulnerability/scan-results-export-csvs parameters: - name: EnvironmentId in: query description: the id of the environment containing the entity (not required if EntityType is Image) schema: type: string nullable: true x-position: 2 - name: EntityType in: query required: true description: the type of entity schema: $ref: '#/components/schemas/VlmEntityTypeBC' x-position: 3 - name: EntityId in: query required: true description: image id for images (with 'sha256:' prefix), for all others external id schema: type: string x-position: 4 - name: HasRemediation in: query description: return only Packages and Cves which are fixable (has remediation) schema: type: boolean nullable: true x-position: 100 responses: '200': description: returns a zip file contains csv files for cves, threats, secrets, and remidiation summary content: application/octet-stream: schema: type: string format: binary deprecated: true description: export vulnerabilities scan results for an entity /v2/vulnerability/scan-export-csvs: get: tags: - Vulnerabilities summary: Export Scan To Csv operationId: Vulnerabilities_ExportScanToCsv_get_/v2/vulnerability/scan-export-csvs parameters: - name: InUse in: query description: return only Packages which are in use schema: type: boolean nullable: true x-position: 2 - name: EnvironmentId in: query required: true description: the id of the environment containing the entity schema: type: string format: guid x-position: 3 - name: EntityType in: query required: true description: the type of entity schema: $ref: '#/components/schemas/VlmEntityType' x-position: 4 - name: EntityId in: query required: true description: external id of the entity schema: type: string x-position: 5 - name: HasRemediation in: query description: return only Packages and Cves which are fixable (has remediation) schema: type: boolean nullable: true x-position: 100 responses: '200': description: returns a zip file contains csv files for cves, threats, secrets, and remidiation summary content: application/octet-stream: schema: type: string format: binary description: export vulnerabilities scan results for an entity /v2/vulnerability/exclusions: get: tags: - Vulnerability Exclusions operationId: VulnerabilityExclusions_GetAllExclusionsVulnerabilities_get_/v2/vulnerability/exclusions responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/VulnerabilityExclusionViewModel' description: '' summary: Get All Exclusions Vulnerabilities post: tags: - Vulnerability Exclusions operationId: VulnerabilityExclusions_CreateExclusionsVulnerabilities_post_/v2/vulnerability/exclusions requestBody: x-name: req content: application/json: schema: type: array items: $ref: '#/components/schemas/VulnerabilityExclusionPostRequestModel' required: true x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/VulnerabilityExclusionViewModel' description: '' summary: Create Exclusions Vulnerabilities put: tags: - Vulnerability Exclusions operationId: VulnerabilityExclusions_UpdateExclusion_put_/v2/vulnerability/exclusions requestBody: x-name: req content: application/json: schema: type: array items: $ref: '#/components/schemas/VulnerabilityExclusionPutRequestModel' required: true x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/VulnerabilityExclusionViewModel' description: '' summary: Update Exclusion /v2/vulnerability/exclusions/bulk-delete: post: tags: - Vulnerability Exclusions operationId: VulnerabilityExclusions_DeleteExclusions_post_/v2/vulnerability/exclusions/bulk-delete requestBody: x-name: req content: application/json: schema: type: array items: type: string format: guid required: true x-position: 1 responses: '200': description: '' content: application/json: schema: type: array items: $ref: '#/components/schemas/VulnerabilityExclusionDeleteViewModel' description: '' summary: Delete Exclusions tags: - name: AccessLease description: Access Leases - name: AccessLeaseInvitation description: Access Lease Invitations - name: Account - name: AccountLimitation - name: AccountPollingInterval - name: AccountRegistration - name: AccountTrust description: "Allow you to define a trust between accounts in order to allow users in a certain account to make changes\ \ and operation on another account.\nActions can be taken on a trustee account via a role which is defined on it. \nThe\ \ role should be assumed by a user from the trusted account." - name: Agent - name: Agentless description: Agentless Workload Posture - name: Alert - name: AlibabaCloudAccount description: Alibaba Cloud Accounts - name: Application - name: Assessment description: Run and View Compliance Assessments - name: AssessmentHistory - name: AssessmentHistoryV2 description: Compliance Assessment History - name: Audit description: Audit logs - name: Auth - name: Aws Cloud Account description: Manage AWS Cloud Accounts - name: AwsAppSync - name: AwsBackupVault - name: AwsConfigSettings - name: AwsCustomerGateway - name: AwsEcsTask - name: AwsEks - name: AwsElasticIp - name: AwsElasticsearchDomain - name: AwsEmrCluster - name: AwsInspectorFindings - name: AwsInspectorRuns - name: AwsLoadBalancersNetworkInterfaces - name: AwsOrganizations - name: AwsQuickSightAccount - name: AwsQuickSightGroup - name: AwsQuickSightUser - name: AwsQuickSightVpcConnections - name: AwsSageMaker - name: AwsSecurityGroup - name: AwsSecurityGroupPolicy - name: AwsSecurityGroupsIndex - name: AwsUnifiedOnboarding description: Aws Unified Onboarding - name: AwsVpcEndpoint - name: AzureAnalysisService - name: AzureApplicationGateway - name: AzureApplicationSecurityGroup - name: AzureCloudAccount description: Onboard Azure accounts - name: AzureComputeGalleryImage - name: AzureCosmosDbAccount - name: AzureDisk - name: AzureFunction - name: AzureKeyVault - name: AzureKubernetes - name: AzureLoadBalancer - name: AzureLock - name: AzureLogicApp - name: AzureLogProfile - name: AzurePolicyAssignment - name: AzureRedisCache - name: AzureResourceGroup - name: AzureRouteTable - name: AzureSecurityGroup - name: AzureSecurityGroupPolicy description: Azure Network Security Group Policies - name: AzureSnapshot - name: AzureSqlDb - name: AzureSqlServer - name: AzureStorageAccounts - name: AzureStorageBlobContainer - name: AzureSubnet - name: AzureUser - name: AzureVirtualMachine - name: AzureVirtualMachineImage - name: AzureVirtualMachineScaleSet - name: AzureVirtualNetworkPeering - name: AzureWebApp - name: BigTable - name: BillableAssets description: Retrieve billable assets data - name: BillableAssetsReport description: Billable Assets Report - name: Billing - name: Clarity - name: CloudAcmCertificate - name: CloudAmi - name: CloudAutoScalingGroup - name: CloudDbInstance - name: CloudDirectConnect - name: CloudDynamoDb - name: CloudEcsCluster - name: CloudEcsService description: Cloud Ecs Service - name: CloudEcsTaskDefinition - name: CloudEfs - name: CloudElastiCacheCluster - name: CloudFlowLogs - name: CloudFrontDistribution - name: CloudGuardDutyDetector - name: CloudIamAccountSummary - name: CloudIamCredentialReport - name: CloudIamGroup - name: CloudIamPasswordPolicy - name: CloudIamPolicy - name: CloudIamRole - name: CloudIamServerCertificate - name: CloudIamUser - name: CloudIamVirtualMfaDevice - name: CloudInfraUser description: CloudInfra Users - name: CloudInstance description: Cloud Instances - name: CloudInternetGateway - name: CloudKinesisStream - name: CloudKms - name: CloudKmsAlias - name: CloudLambdaFunction description: Cloud Lambda Function - name: CloudLoadBalancer - name: CloudLogGroups - name: CloudMetricAlarm - name: CloudNacl - name: CloudNetworkInterfaces - name: CloudRedshiftCluster - name: CloudRegion - name: CloudRoute53Domain - name: CloudRoute53HostedZone - name: CloudRoute53RecordSetGroup - name: CloudRouteTable - name: CloudS3Bucket description: '' - name: CloudSecurityGroup description: AWS Security Groups - name: CloudSnsSubscription - name: CloudSnsTopic - name: CloudSql - name: CloudSqs description: '' - name: CloudSubnet - name: CloudTrail description: CloudTrail - name: CloudVolume - name: CloudVpc - name: CloudVpcPeeringConnection - name: CloudVPNConnection - name: CloudVpnGateway - name: CloudWAFRegional - name: CloudWatchEventsRule description: CloudWatchEventsRule - name: ComplianceExclusion description: Compliance Exclusions - name: CompliancePolicy - name: ComplianceRemediation description: Compliance Remediation - name: ComplianceRemediationOld description: Compliance Remediation - DEPRECATED - please use /Compliance/Remediation instead - name: ComplianceRuleset description: ComplianceRuleset - name: ContinuousComplianceNotification description: Continuous Compliance Notification Policies - name: ContinuousCompliancePolicy - name: ContinuousCompliancePolicyV2 description: Continuous Compliance Policies - name: EmergencyPolicy - name: EntityFetchStatus - name: EntityReport - name: ExclusionOld description: Compliance Exclusions - DEPRECATED - please use /Compliance/Exclusion instead - name: ExternalFindings description: Findings from External (3rd-party) systems - name: Fim - name: Finding description: Compliance Findings - name: FindingsReport description: Compliance Findings csv reports - name: GcpBigQuery - name: GcpDisk - name: GcpGkeCluster - name: GcpImage - name: GcpKmsKeyRing - name: GcpProjectInfo description: Google Cloud Project Info - name: GcpPubSub - name: GcpSecurityGroup - name: GcpServiceAccount - name: GcpStorageBucket - name: GenericList description: Generic Lists - name: GlobalSearch description: Global search for all CloudGuard services - name: GoogleCloudAccount description: Google Cloud Accounts - name: GoogleCloudFirewallRule - name: GoogleCloudFunction - name: GoogleCloudIamPolicy - name: GoogleCloudNetwork description: Google Cloud Network - name: GoogleCloudSubnet - name: GoogleCloudVMInstance - name: Home - name: IamSafeLease description: IAM Safety Leases - name: IncidentsStatus - name: InfrastructureAssessment - name: Intelligence description: CloudGuard Intelligence allows you to visualize and analyze Account Activity and Network Traffic into and out of your cloud environment. - name: IpAddressMetadata description: IP Address Metadata - name: IpList description: IP Lists - name: LicenseActivator - name: Licensing - name: ManagedGenericList - name: Msp - name: OrganizationalUnit description: Manage Organizational Units - name: Permission - name: ProtectedAsset - name: ProtectedAssetsReport description: Compliance Protected Asset csv reports - name: ProtegoStatistics description: Protego statistics by dates - name: Role description: CloudGuard Roles - name: RulesEngine - name: SecurityGroup - name: Serverless - name: ServerlessPolicy description: Serverless policy - name: ServiceAccount description: CloudGuard Service Accounts - name: ServicePort - name: Settings description: Account Settings - name: ShiftLeft description: ShiftLeft - name: SystemHealth - name: TenableAccount description: Onboard Tenable accounts - name: User description: CloudGuard account users - name: BaseImage description: '' - name: ContainerRegistryAccount description: Container Registry Account - name: ContainerRegistryAccountInternal description: '' - name: ContainerRegistryImageAssurancePolicy description: '(deprecated: move to use /v2/vulnerability/policy)' - name: Dashboard description: '' - name: EcsConfiguration description: '' - name: EcsImageAssurancePolicy description: '(deprecated: move to use /v2/vulnerability/policy)' - name: EcsImageScan description: ECS Image Scan Configuration - name: Environment description: '' - name: ImageAdmissionExclusion description: '[Preview feature] Kubernetes Image admission exclusions' - name: ImageAssuranceDashboard description: '' - name: ImageAssuranceReport description: '' - name: KubernetesAccount description: Kubernetes Accounts - name: KubernetesAccountInternal description: '' - name: KubernetesAccountOld description: '(deprecated: this api is deprecated, please use ''/v2/kubernetes/account'' instead)' - name: KubernetesAdmissionControl description: Kubernetes Admission Control - name: KubernetesAdmissionControlPoliciesSummary description: '' - name: KubernetesClusterRole description: '' - name: KubernetesImage description: '' - name: KubernetesImageAdmissionExclusion description: '[Preview feature] Kubernetes Image admission exclusions (deprecated: this api is deprecated, please use ''/v2/kubernetes/admissionControl/imageAdmissionExclusion'' instead)' - name: KubernetesImageAssurance description: Kubernetes Image Assurance - name: KubernetesImageAssurancePolicy description: 'Kubernetes Image Assurance Policy (deprecated: move to use /v2/vulnerability/policy)' - name: KubernetesIngress description: '' - name: KubernetesNetworkPolicy description: '' - name: KubernetesNode description: '' - name: KubernetesPod description: '' - name: KubernetesPodGroup description: Kubernetes Pod Groups - name: KubernetesPodGroupOwner description: '' - name: KubernetesPodSecurityPolicy description: '' - name: KubernetesRole description: '' - name: KubernetesRuntimeAssurance description: '' - name: KubernetesService description: '' - name: KubernetesServiceAccount description: '' - name: Shiftleft description: '' - name: ShiftLeftAccount description: ShiftLeft - name: ShiftLeftPolicy description: 'ShiftLeft Policy (deprecated: move to use /v2/vulnerability/policy)' - name: Workload description: '' - name: WorkloadAccountSetting description: Workload Account Setting - name: WorkloadChangeMonitoring description: '' - name: WorkloadImageAssurance description: Workload Image Assurance - name: WorkloadImageAssuranceInternal description: '' - name: WorkloadInternal description: '' - name: WorkloadRuntimeProtection description: '' - name: Alerts description: '' - name: Azure description: '' - name: FindingOrchestration description: '' - name: FindingsUpdate description: '' - name: Gcp description: '' - name: Remediation description: Remediation Actions - name: Reports description: '' - name: CloudInfraMigration description: infinity-portal-connect - name: GslBuilder description: '' - name: Infrastructure description: '' - name: InternalLicense description: '' - name: NotificationIntegrationInternal description: '(deprecated: This controller is deprecated and will be removed in the future)' - name: OciCloudAccount description: Onboard OCI accounts - name: PlatformReports description: '' - name: Regions description: '' - name: Spectral description: '' - name: RestrictedWorkloadClientModules description: '' - name: WorkloadClientModules description: '' - name: WorkloadTelemetry description: '' - name: Integration description: Integration - name: IntegrationInternal description: '' - name: Notification description: Notification - name: NotificationInternal description: '' - name: AssetMetadataSyncNow description: '' - name: BusinessPriorityModifier description: Business Priority Rules - name: CustomRuleset description: Risk Management Rulesets - name: Dspm description: DSPM Controller - name: Exposure description: '' - name: GroupRiskManagement description: Groups Risk Management - name: RemediationActions description: Remediation Actions - name: RiskModifiers description: Risk Modifiers - name: SecurityEvents description: '' - name: SimilarAssetGroups description: '' - name: Waf description: WAF Protection - name: AwsOrganizationManagement description: AwsOrganizationManagement - name: AwsOrganizationManagementOnboarding description: AwsOrganizationManagementOnboarding - name: AzureOrganizationManagement description: AzureOrganizationManagement - name: GcpOrganizationManagement description: GcpOrganizationManagement - name: OnboardingManagement description: OnboardingManagement - name: InternalSBOM description: '' - name: InternalVulnerabilityAccountStatsBatch description: '' - name: InternalVulnerabilityCleanup description: '' - name: InternalVulnerabilityPolicy description: '' - name: InternalVulnerabilityScanResults description: '' - name: SBOM description: '' - name: SBOMExport description: SBOM Export - name: Vulnerabilities description: Vulnerabilities - name: VulnerabilityAssessment description: '' - name: VulnerabilityExclusions description: Vulnerability Exclusions - name: VulnerabilityPolicy description: Vulnerability Policy - name: VulnerabilitySBOM description: '' - name: CloudApplicationLoadBalancer description: '' - name: CloudNetworkLoadBalancer description: '' - name: GcpMachineImage description: '' - name: OciCompartment description: '' - name: AssetLabelsService description: '' - name: AssetOpenFindings description: '' - name: EntityTypes description: The entity types endpoint allows you to get the supported entity types and the platform they're supported for. - name: EvidencePath description: The evidence path endpoint allows you to get the evidence path for a given findingId. - name: Exclusions description: The exclusion endpoint provides API to perform CRUD operations on the resource. - name: IgnoreCves description: The ignore CVEs endpoint provides API to perform CRUD operations on the resource. - name: IgnoreMalwares description: The ignore malwares endpoint provides API to perform CRUD operations on the resource. - name: Rules description: The rules endpoint provides APIs to get the security rules data - name: SecurityGraphIssues description: API for issue enrichments - name: SecurityGraphQuery description: The query endpoint provides APIs to run queries (rules) to preview possible issues. - name: EntitySchema description: The entity schema endpoint presents schema of toxic issues entities. - name: SecurityIssues description: The Findings endpoint provides APIs query the findings store which contains findings such as security issues. It provides APIs to get, search and group findings. - name: AutomatedActions description: The Automated Actions resource provides API to perform CRUD operations on the resource. components: schemas: Dome9.Web.Api.Agentless.AddAgentlessAwsAccountRequestBody: required: - crossAccountRoleName - crossAccountRoleExternalId type: object properties: crossAccountRoleName: description: The AWP cross account role name type: string crossAccountRoleExternalId: description: The AWP cross account role external id type: string cloudGuardAWPStackName: description: The AWP stack name type: string scanMode: description: Scan mode enum: - saas - inAccount type: string isTerraform: description: Indicates whether the account is onboarded with Terraform (Setting True will make AWP assume no cloud formation stack, hence no indication on CFT version updates) type: boolean agentlessAccountSettings: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessAccountSettingsViewModel' description: AWP account settings Dome9.Web.Api.Agentless.AgentlessAccountSettingsViewModel: type: object properties: disabledRegions: description: The list of regions that are disabled for the account type: array items: type: string skipFunctionAppsScan: description: Skip Azure Function Apps scan (supported for inAccount and inAccountSub scan modes) type: boolean inAccountScannerVPC: description: The VPC mode (supported for inAccount scan mode) enum: - ManagedByAWP - ManagedByCustomer type: string scanMachineIntervalInHours: format: int32 description: The interval in hours to scan the account type: integer maxConcurrenceScansPerRegion: format: int32 description: The max number of scans that can run concurrently per region type: integer customTags: description: A Dictionary of custom tags that will be added to each resource created by AWP type: object additionalProperties: type: string scanAWSLicensedImages: description: Scan AWS licensed images (supported for AWS inAccount mode) type: boolean Dome9.Web.Api.Agentless.AddAgentlessAzureAccountRequestBody: type: object properties: onboardingCustomizations: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AzureOnboardingCustomizationViewModel' description: AWP Azure Onboarding Customizations scanMode: description: Scan mode enum: - saas - inAccount type: string isTerraform: description: Indicates whether the account is onboarded with Terraform (Setting True will make AWP assume no cloud formation stack, hence no indication on CFT version updates) type: boolean agentlessAccountSettings: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessAccountSettingsViewModel' description: AWP account settings Dome9.Web.Api.Agentless.AzureOnboardingCustomizationViewModel: type: object properties: virtualMachineDataShareRoleName: type: string virtualMachineScanOperatorRoleName: type: string functionAppScanOperatorRoleName: type: string functionAppScannerRoleName: type: string resourceGroupName: type: string scannerManagedIdentityName: type: string Dome9.Web.Api.Agentless.AddAgentlessAwsCentralizedAccountRequestBody: required: - crossAccountRoleName - crossAccountRoleExternalId type: object properties: crossAccountRoleName: description: The AWP cross account role name type: string crossAccountRoleExternalId: description: The AWP cross account role external id type: string cloudGuardAWPStackName: description: The AWP stack name type: string isTerraform: description: Indicates whether the account is onboarded with Terraform (Setting True will make AWP assume no cloud formation stack, hence no indication on CFT version updates) type: boolean agentlessAccountSettings: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessCentralizedAccountSettingsViewModel' description: AWP account settings Dome9.Web.Api.Agentless.AgentlessCentralizedAccountSettingsViewModel: type: object properties: inAccountScannerVPC: description: The VPC mode enum: - ManagedByAWP - ManagedByCustomer type: string Dome9.Web.Api.Agentless.AddAgentlessAzureCentralizedAccountRequestBody: type: object properties: onboardingCustomizations: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.CentralizedAccountOnboardingCustomizationViewModel' description: Azure Centralized Account Onboarding Customizations managementGroupId: description: The Azure Management group id associated with the enabled Centralized Account type: string isTerraform: description: Indicates whether the account is onboarded with Terraform (Setting True will make AWP assume no cloud formation stack, hence no indication on CFT version updates) type: boolean agentlessAccountSettings: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessAzureCentralizedAccountSettingsViewModel' description: AWP account settings Dome9.Web.Api.Agentless.CentralizedAccountOnboardingCustomizationViewModel: type: object properties: virtualMachineScanOperatorRoleName: type: string functionAppScanOperatorRoleName: type: string virtualMachineDataShareRoleName: type: string functionAppScannerRoleName: type: string cryptoCreatorRoleName: type: string diskEncryptorRoleName: type: string resourceGroupName: type: string scannerManagedIdentityName: type: string Dome9.Web.Api.Agentless.AgentlessAzureCentralizedAccountSettingsViewModel: type: object properties: sseCmkEncryptedDisksScan: description: To enable SSE CMK scanning type: boolean inAccountScannerVPC: description: The VPC mode enum: - ManagedByAWP - ManagedByCustomer type: string Dome9.Web.Api.Agentless.AddAgentlessAwsSubAccountRequestBody: required: - crossAccountRoleName - crossAccountRoleExternalId - centralizedCloudAccountId type: object properties: crossAccountRoleName: description: The AWP cross account role name type: string crossAccountRoleExternalId: description: The AWP cross account role external id type: string cloudGuardAWPStackName: description: The AWP stack name type: string centralizedCloudAccountId: description: Centralized cloud account Id that AWP scanners will run in type: string isTerraform: description: Indicates whether the account is onboarded with Terraform (Setting True will make AWP assume no cloud formation stack, hence no indication on CFT version updates) type: boolean agentlessAccountSettings: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessAccountSettingsViewModel' description: AWP account settings Dome9.Web.Api.Agentless.AddAgentlessAzureSubAccountRequestBody: required: - centralizedCloudAccountId type: object properties: centralizedCloudAccountId: description: Centralized cloud account Id that AWP scanners will run type: string agentlessAccountSettings: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessAccountSettingsViewModel' description: AWP account settings onboardingCustomizations: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.SubAccountOnboardingCustomizationViewModel' description: Azure Sub Account Onboarding Customizations isTerraform: description: Indicates whether the account is onboarded with Terraform (Setting True will make AWP assume no cloud formation stack, hence no indication on CFT version updates) type: boolean Dome9.Web.Api.Agentless.SubAccountOnboardingCustomizationViewModel: type: object properties: resourceGroupName: description: Custom name for the scans resource group at the centralized account type: string Dome9.Web.Api.Agentless.AccountStateViewModel: type: object properties: cloudAccountId: description: The D9 cloud account id type: string agentlessProtectionEnabled: description: A flag indicating whether AWP protection is enabled type: boolean scanMode: description: OSne of saas, inAccount, inAccountHub, inAccountSub type: string provider: description: The cloud provider enum: - aws - azure type: string shouldUpdate: description: A flag indicating whether AWP resources should be updated type: boolean isOrgOnboarding: description: A flag indicating whether AWP was enabled as part of the organization onboarding type: boolean isOrgOnboardingManagement: description: A flag indicating whether AWP was enabled as part of the organization onboarding as management account type: boolean isTerraform: description: A flag indicating whether AWP was enabled from terraform type: boolean centralizedCloudAccountId: description: Centralized account id in case using centralized-sub accounts type: string Dome9.Web.Api.Agentless.AccountViewModel: type: object properties: agentlessAccountSettings: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessAccountSettingsViewModel' missingAwpPrivateNetworkRegions: type: array items: type: string accountIssues: $ref: '#/components/schemas/Dome9.BL.Std.Services.Agentless.AccountIssues' createdTime: type: string cloudAccountId: description: The D9 cloud account id type: string agentlessProtectionEnabled: description: A flag indicating whether AWP protection is enabled type: boolean scanMode: description: OSne of saas, inAccount, inAccountHub, inAccountSub type: string provider: description: The cloud provider enum: - aws - azure type: string shouldUpdate: description: A flag indicating whether AWP resources should be updated type: boolean isOrgOnboarding: description: A flag indicating whether AWP was enabled as part of the organization onboarding type: boolean isOrgOnboardingManagement: description: A flag indicating whether AWP was enabled as part of the organization onboarding as management account type: boolean isTerraform: description: A flag indicating whether AWP was enabled from terraform type: boolean centralizedCloudAccountId: description: Centralized account id in case using centralized-sub accounts type: string Dome9.BL.Std.Services.Agentless.AccountIssues: type: object properties: regions: type: object additionalProperties: $ref: '#/components/schemas/Dome9.BL.Std.Services.Agentless.IssueItem' account: $ref: '#/components/schemas/Dome9.BL.Std.Services.Agentless.IssueItem' Dome9.BL.Std.Services.Agentless.IssueItem: type: object properties: issueType: type: string Dome9.Web.Api.Agentless.AgentlessInstanceViewModel: type: object properties: state: type: string timestamp: type: string stateDetails: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessInstanceStateDetailsViewModel' Dome9.Web.Api.Agentless.AgentlessInstanceStateDetailsViewModel: type: object properties: type: description: The scan result type type: string description: description: The scan result description type: string Dome9.Web.Api.Agentless.GenerateAgentlessAwsOnboardingDataRequest: type: object properties: scanMode: description: One of saas, inAccount, inAccountHub, inAccountSub enum: - saas - inAccount - inAccountHub - inAccountSub type: string crossAccountRoleExternalId: description: The AWP stack external id type: string cloudGuardAWPStackName: description: The AWP stack name type: string centralizedCloudAccountId: description: In case of inAccountSub, the account id of the centralized account type: string Dome9.Web.Api.Agentless.AgentlessAwsOnboardingDataViewModel: type: object properties: crossAccountTemplateUrl: description: AWP onboarding CloudFormation stack template url type: string crossAccountCloudFormationQuickCreateUrl: description: AWP onboarding CloudFormation stack template quick create url type: string version: description: AWP onboarding script version type: string Dome9.Web.Api.Agentless.GenerateAgentlessAzureOnboardingDataRequest: type: object properties: scanMode: description: One of saas, inAccount, inAccountHub, inAccountSub enum: - saas - inAccount - inAccountHub - inAccountSub type: string centralizedId: description: In case of inAccountSub, the account id of the centralized account type: string skipFunctionAppsScan: description: Skip function apps scan (supported for inAccount and inAccountSub scan modes) type: boolean sseCmkEncryptedDisksScan: description: Scan disks that are encrypted with Azure CMK (supported for inAccountHub scan mode) type: boolean managementGroupId: description: The Azure Management group id associated with the enabled Centralized Account. In case not defined, the scope will be the tenant type: string onboardingCustomizations: $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AzureOnboardingCustomizationDataViewModel' description: AWP Azure Onboarding Customizations Dome9.Web.Api.Agentless.AzureOnboardingCustomizationDataViewModel: type: object properties: virtualMachineDataShareRoleName: description: Custom name for the virtual machine data share role, applicable for saas, centralized, and in account mode type: string virtualMachineScanOperatorRoleName: description: Custom name for the virtual machine scan operator role, applicable for centralized, and in account mode type: string functionAppScanOperatorRoleName: description: Custom name for the function-app scan operator role, applicable for centralized, and in account mode type: string functionAppScannerRoleName: description: Custom name for the function-app scanner role, applicable for centralized and in account mode type: string cryptoCreatorRoleName: description: Custom name for the crypto resources creator role, applicable for centralized with SseCmkEncryptedDisksScan enabled type: string diskEncryptorRoleName: description: Custom name for the disk encryptor role, applicable for centralized with SseCmkEncryptedDisksScan enabled type: string resourceGroupName: description: Custom name for the resource group, applicable for centralized, sub and in account mode type: string scannerManagedIdentityName: description: Custom name for the managed-identity used by the function-app scanner, applicable for centralized and in account mode type: string Dome9.Web.Api.Agentless.AgentlessAzureOnboardingDataViewModel: type: object properties: onboardingScriptCommand: description: The AWP onboarding script command type: string onboardingScriptURL: description: The AWP onboarding script url type: string version: description: AWP onboarding script version type: string Dome9.Web.Api.Agentless.AgentlessAzureOffboardingDataViewModel: type: object properties: offboardingScriptCommand: description: The AWP offboarding script command type: string offboardingScriptURL: description: The AWP offboarding script url type: string version: description: AWP offboarding script version type: string Dome9.Web.Api.Agentless.AgentlessAwsValidateStackDataViewModel: type: object properties: shouldUpdate: type: boolean updateStackCloudFormationTemplateURL: type: string version: type: string Dome9.Web.Api.Agentless.CentralizedAzureAccountViewModel: type: object properties: accountId: description: The CloudGuard account ID type: string cloudAccountId: description: The CloudGuard cloud account ID type: string externalAccountNumber: description: The external account number type: string Dome9.Web.Api.Agentless.AgentlessSettingsViewModel: type: object properties: scanMachineIntervalInHours: format: int32 description: The interval in hours to scan the account type: integer maxConcurrenceScansPerRegion: format: int32 description: The max number of scans that can run concurrently per region type: integer customTags: description: A Dictionary of custom tags that will be added to each resource created by AWP type: object additionalProperties: type: string scanAWSLicensedImages: description: Scan AWS licensed images (supported for AWS inAccount mode) type: boolean Falconetix.Model.Serverless.Protego.ProtegoInvocationsEntity: type: object properties: date: format: date-time type: string sum: format: double type: number Dome9.Web.Api.Serverless.ServerlessAddAccountRequest: required: - cloudAccountId type: object properties: cloudAccountId: type: string cloudProvider: enum: - aws - azure type: string Dome9.Web.Api.Serverless.ServerlessAccountViewModel: type: object properties: cloudAccountId: format: uuid type: string example: 00000000-0000-0000-0000-000000000000 cloudVendor: enum: - aws - azure - kubernetes type: string state: type: string crossAccountRoleTemplateURL: type: string accountId: format: int64 type: integer status: type: string reason: type: string shouldUpdate: type: boolean isOrgOnboarding: type: boolean isOrgOnboardingManagement: type: boolean hasMissingPermissions: type: boolean deleteAccountRoleTemplateURL: type: string genericTemplateUrl: type: string fspAutoInstrumentation: type: boolean fspAutoInstrumentationState: type: string fspStickyVersion: type: string Dome9.Web.Api.Serverless.ServerlessPutAccountViewModel: type: object properties: fspAutoInstrumentation: type: boolean fspStickyVersion: type: string policiesAction: $ref: '#/components/schemas/Falconetix.Model.Serverless.ServerlessPoliciesAction' Falconetix.Model.Serverless.ServerlessPoliciesAction: type: object properties: signature: enum: - alert - block type: string malware: enum: - alert - block type: string Dome9.Web.Api.Serverless.ServerlessAccountStatusViewModel: type: object properties: cloudAccountId: format: uuid type: string example: 00000000-0000-0000-0000-000000000000 externalAccountNumber: type: string cloudVendor: enum: - aws - azure - kubernetes type: string state: type: string accountId: format: int64 type: integer reason: type: string shouldUpdate: type: boolean isOrgOnboarding: type: boolean isOrgOnboardingManagement: type: boolean hasMissingPermissions: type: boolean validatePermissionsStatus: enum: - Success - InProgress - Error type: string lastValidatePermissionsTimestamp: format: int64 type: integer Dome9.Web.Api.Serverless.ServerlessExclusionViewModel: type: object properties: scope: enum: - Account - Function - FunctionGroup - FunctionVersion - FunctionApp type: string id: type: string name: type: string payloadsType: enum: - String - IoFingerprint - IoFeature - SignatureName type: string target: enum: - Host - Ip - File - Process - Api - Http - Io - Signature type: string payloads: type: array items: type: object functions: type: array items: type: string Dome9.Web.Api.Serverless.ServerlessExclusionModel: type: object properties: id: type: string name: type: string payloadsType: enum: - String - IoFingerprint - IoFeature - SignatureName type: string target: enum: - Host - Ip - File - Process - Api - Http - Io - Signature type: string payloads: type: array items: type: object functions: type: array items: type: string Dome9.Web.Api.Serverless.ServerlessRuleViewModel: type: object properties: scope: enum: - Account - Function - FunctionGroup - FunctionVersion - FunctionApp type: string id: type: string name: type: string payloadsType: enum: - String - SignatureName type: string target: enum: - Host - Ip - File - Process - Api - Http - Io - Signature type: string payloads: type: array items: type: object functions: type: array items: type: string Dome9.Web.Api.Serverless.ServerlessRuleModel: type: object properties: id: type: string name: type: string payloadsType: enum: - String - SignatureName type: string target: enum: - Host - Ip - File - Process - Api - Http - Io - Signature type: string payloads: type: array items: type: object functions: type: array items: type: string Dome9.Web.Api.Serverless.ServerlessDeleteRuleViewModel: type: object properties: name: type: string Dome9.Web.Api.Serverless.ServerlessMissingPermissionsViewModel: type: object properties: lastValidatePermissionsTimestamp: format: int64 type: integer validatePermissionsStatus: enum: - Success - InProgress - Error type: string denyPermissionsList: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessPermissionViewModel' Dome9.Web.Api.Serverless.ServerlessPermissionViewModel: type: object properties: serviceAction: type: string roleArn: type: string roleName: type: string resources: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessPermissionResourceViewModel' Dome9.Web.Api.Serverless.ServerlessPermissionResourceViewModel: type: object properties: arn: type: string description: type: string Falconetix.Model.ServiceInterfaces.Serverless.ServerlessApiResponse: type: object properties: data: type: object nextToken: type: string statusCode: format: int32 type: integer message: type: string Dome9.Web.Api.Serverless.ServerlessFunctionViewModel: type: object properties: functionArn: type: string region: type: string accountId: format: int64 type: integer cloudAccountId: format: uuid type: string example: 00000000-0000-0000-0000-000000000000 id: type: string name: type: string vpc: type: string funcRiskLevel: type: string funcPostureScore: format: int32 type: integer includesFSP: type: boolean isRuntimeSupported: type: boolean fspMode: enum: - Alert - Block type: string fspVersion: type: string scanStatus: enum: - Disabled - Complete - Partial type: string timeout: format: int32 type: integer whiteListProgressPercent: format: int32 type: integer runtime: type: string handler: type: string fspAutoInstrumentation: type: boolean fspAutoInstrumentationSupported: type: boolean fspAutoInstrumentationState: type: string fspAutoInstrumentationProgressStep: type: string triggersAnalysis: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.FunctionPermissionViewModel' rolePermissionsAnalysis: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.FunctionPermissionViewModel' serverlessErrors: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessErrorViewModel' fspFeatures: type: array items: type: string Dome9.Web.Api.Serverless.FunctionPermissionViewModel: type: object properties: name: type: string suggestedPolicy: type: object resources: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.FunctionPermissionResourceViewModel' Dome9.Web.Api.Serverless.ServerlessErrorViewModel: type: object properties: type: type: string status: type: string message: type: string Dome9.Web.Api.Serverless.FunctionPermissionResourceViewModel: type: object properties: status: type: string message: type: string resource: type: string action: type: string severity: type: string Dome9.Web.Api.Serverless.ServerlessFunctionAppViewModel: type: object properties: includesFSP: type: boolean fspMode: enum: - Alert - Block type: string fspFeatures: type: array items: type: string isRuntimeSupported: type: boolean runtime: type: string functionsSummary: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessFunctionSummaryViewModel' serverlessErrors: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessErrorViewModel' Dome9.Web.Api.Serverless.ServerlessFunctionSummaryViewModel: type: object properties: name: type: string whiteListProgress: format: int32 type: integer Dome9.Web.Api.Serverless.ServerlessPodGroupViewModel: type: object properties: isLearningModeActive: type: boolean fspMode: enum: - Alert - Block type: string learningModeStartTime: type: string learningModeEndTime: type: string learningModePeriod: format: int32 type: integer whiteListProgressPercent: format: int32 type: integer Dome9.Web.Api.Serverless.ServerlessPutFunctionsListViewModel: type: object properties: functionsData: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessPutFunctionViewModel' Dome9.Web.Api.Serverless.ServerlessPutFunctionViewModel: type: object properties: functionId: type: string fspAutoInstrumentation: type: boolean isLearningModeActive: type: boolean learningModePeriod: format: int32 type: integer fspStickyVersion: type: string fspMode: enum: - Alert - Block type: string Dome9.Web.Api.Serverless.ServerlessPutFunctionResponseViewModel: type: object properties: functionId: type: string status: type: string statusCode: enum: - Continue - SwitchingProtocols - OK - Created - Accepted - NonAuthoritativeInformation - NoContent - ResetContent - PartialContent - MultipleChoices - Ambiguous - MovedPermanently - Moved - Found - Redirect - SeeOther - RedirectMethod - NotModified - UseProxy - Unused - TemporaryRedirect - RedirectKeepVerb - BadRequest - Unauthorized - PaymentRequired - Forbidden - NotFound - MethodNotAllowed - NotAcceptable - ProxyAuthenticationRequired - RequestTimeout - Conflict - Gone - LengthRequired - PreconditionFailed - RequestEntityTooLarge - RequestUriTooLong - UnsupportedMediaType - RequestedRangeNotSatisfiable - ExpectationFailed - UpgradeRequired - InternalServerError - NotImplemented - BadGateway - ServiceUnavailable - GatewayTimeout - HttpVersionNotSupported type: string Dome9.Web.Api.Serverless.ServerlessPutSingleFunctionViewModel: type: object properties: fspAutoInstrumentation: type: boolean isLearningModeActive: type: boolean learningModePeriod: format: int32 type: integer fspMode: enum: - Alert - Block type: string fspStickyVersion: type: string Dome9.Web.Api.Serverless.EnableFSPViewModel: type: object properties: enable: type: boolean Dome9.Web.Api.Serverless.ServerlessEnableFunctionFSPBlockBody: type: object properties: fspMode: enum: - Alert - Block type: string Dome9.Web.Api.Serverless.ServerlessWhiteListViewModel: type: object properties: completed: type: boolean whiteListProgressPercent: format: int32 type: integer files: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.WhiteListResourceTypeViewModel' ips: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.WhiteListResourceTypeViewModel' hosts: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.WhiteListResourceTypeViewModel' apis: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.WhiteListResourceTypeViewModel' processes: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.WhiteListResourceTypeViewModel' https: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.WhiteListResourceTypeViewModel' inputs: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.WhiteListResourceTypeViewModel' signatures: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.WhiteListResourceTypeViewModel' Dome9.Web.Api.Serverless.WhiteListResourceTypeViewModel: type: object properties: status: type: string items: type: array items: $ref: '#/components/schemas/Dome9.Web.Api.Serverless.WhiteListResourceViewModel' Dome9.Web.Api.Serverless.WhiteListResourceViewModel: type: object properties: name: type: string action: type: string source: type: array items: type: string callstackInfo: type: array items: type: string Dome9.Web.Api.Serverless.ServerlessFspVersioViewModel: type: object properties: fspVersion: type: string versionState: type: string unsupportedRuntimes: type: array items: type: string Dome9.Web.Api.Serverless.ServerlessFSPSupportedRuntimesViewModel: type: object properties: supportedRuntimes: type: array items: type: string Dome9.Web.Api.Compliance.Serverless.Policy.ServerlessPolicyViewModel: type: object properties: id: format: uuid type: string example: 00000000-0000-0000-0000-000000000000 cloudAccountId: format: uuid type: string example: 00000000-0000-0000-0000-000000000000 topic: enum: - TASK - SECURITY_EVENT - MANAGEMENT type: string notificationIds: type: array items: format: uuid type: string example: 00000000-0000-0000-0000-000000000000 provider: enum: - aws - azure - kubernetes type: string errorMessage: type: string Dome9.Web.Api.Compliance.Serverless.Policy.ServerlessPolicyRequestModel: required: - cloudAccountId - topic - notificationIds type: object properties: cloudAccountId: format: uuid type: string example: 00000000-0000-0000-0000-000000000000 topic: enum: - TASK - SECURITY_EVENT - MANAGEMENT type: string notificationIds: type: array items: format: uuid type: string example: 00000000-0000-0000-0000-000000000000 provider: enum: - aws - azure - kubernetes type: string ImageAssurancePolicyViewModel: type: object additionalProperties: false required: - id - targetType - targetPlatform - targetId - rulesetId - notificationIds - errorMessage - admissionControllerAction - admissionControlUnScannedAction properties: id: type: string format: guid targetType: deprecated: true x-deprecatedMessage: use TargetPlatform instead oneOf: - $ref: '#/components/schemas/ImageAssurancePolicyType' targetPlatform: $ref: '#/components/schemas/ImageAssurancePolicyPlatform' targetId: type: string format: guid rulesetId: type: integer format: int64 notificationIds: type: array default: [] items: type: string format: guid errorMessage: type: string nullable: true admissionControllerAction: type: string description: '[Preview feature - Image Admission] Image Admission action to block non-compliant images according to the relevant ruleset. Options: ''Prevention'', ''Detection'', or null.' nullable: true admissionControlUnScannedAction: type: string description: '[Preview feature - Image Admission] Image Admission unScanned action of Detection or Prevention to alert on or block images that have not been scanned. Options: ''Prevention'', ''Detection'', or null.' nullable: true ImageAssurancePolicyType: type: string description: '' x-enumNames: - Environment - OrganizationalUnit enum: - Environment - OrganizationalUnit ImageAssurancePolicyPlatform: type: string description: '' x-enumNames: - Aws - Kubernetes - OrganizationalUnit - ShiftLeft - ContainerRegistry enum: - Aws - Kubernetes - OrganizationalUnit - ShiftLeft - ContainerRegistry ImageAssurancePolicyRequestModelOld: type: object additionalProperties: false required: - targetId - notificationIds - rulesetId - id - targetType - targetPlatform properties: id: type: string format: guid targetId: type: string format: guid minLength: 1 targetType: deprecated: true x-deprecatedMessage: use TargetPlatform instead oneOf: - $ref: '#/components/schemas/ImageAssurancePolicyType' targetPlatform: nullable: true oneOf: - $ref: '#/components/schemas/ImageAssurancePolicyPlatform' notificationIds: type: array default: [] items: type: string format: guid rulesetId: type: integer format: int64 ContinuousCompliancePolicyTargetType: type: string description: '' x-enumNames: - Aws - Azure - Gcp - Kubernetes - OrganizationalUnit - Terraform - Generic - KubernetesRuntimeAssurance - ShiftLeft - Alibaba - Cft - ContainerRegistry - Vendor - Oci - CIEM enum: - Aws - Azure - Gcp - Kubernetes - OrganizationalUnit - Terraform - Generic - KubernetesRuntimeAssurance - ShiftLeft - Alibaba - Cft - ContainerRegistry - Vendor - Oci - CIEM KubernetesRuntimeAssuranceAction: type: string description: '' x-enumNames: - Detection - Prevention enum: - Detection - Prevention RuleObject: type: object additionalProperties: false required: - name - severity - logic - logicHash - description properties: name: type: string nullable: true severity: $ref: '#/components/schemas/RuleSeverity' logic: type: string nullable: true logicHash: type: string nullable: true description: type: string nullable: true RuleSeverity: type: string description: '' x-enumNames: - Informational - Low - Medium - High - Critical enum: - Informational - Low - Medium - High - Critical NotificationObject: type: object additionalProperties: false required: - id - name properties: id: type: string format: guid name: type: string nullable: true AssessmentExclusionEntity: allOf: - $ref: '#/components/schemas/RootEntityBase' - type: object additionalProperties: false required: - id - exclusion properties: id: type: string format: guid exclusion: nullable: true oneOf: - $ref: '#/components/schemas/AssessmentExclusion' AssessmentExclusion: type: object additionalProperties: false required: - rlmIds - ruleLogicHashes - logicExpressions - severities - bundleId - cloudAccountIds - organizationalUnitIds - regions - comment - cloudAccountType - dateTimeRange - createdBy - platform properties: rlmIds: type: array nullable: true items: type: string format: guid ruleLogicHashes: type: array nullable: true items: type: string logicExpressions: type: array nullable: true items: type: string severities: type: array nullable: true items: $ref: '#/components/schemas/RuleSeverity' bundleId: type: integer format: int64 cloudAccountIds: type: array nullable: true items: type: string format: guid organizationalUnitIds: type: array nullable: true items: type: string format: guid regions: type: array nullable: true items: type: string comment: type: string nullable: true cloudAccountType: $ref: '#/components/schemas/AssessmentCloudAccountType' dateTimeRange: nullable: true oneOf: - $ref: '#/components/schemas/DateTimeRange' createdBy: type: string nullable: true platform: $ref: '#/components/schemas/AssessmentCloudAccountType' AssessmentCloudAccountType: type: string description: '' x-enumNames: - Aws - Azure - Google - Kubernetes - Terraform - Generic - KubernetesRuntimeAssurance - ShiftLeft - SourceCodeAssurance - ImageAssurance - Alibaba - Cft - ContainerRegistry - Oci - CIEM enum: - Aws - Azure - Google - Kubernetes - Terraform - Generic - KubernetesRuntimeAssurance - ShiftLeft - SourceCodeAssurance - ImageAssurance - Alibaba - Cft - ContainerRegistry - Oci - CIEM DateTimeRange: type: object deprecated: true x-deprecatedMessage: 'This class was duplicated to new Domain (as part of DDD refactoring effort), please refer to the new Project: CGN.RuleEngine.Common.Infra.DateTimeRange' additionalProperties: false required: - from - to properties: from: type: string description: From date time format: date-time nullable: true to: type: string description: To date time format: date-time nullable: true RootEntityBase: type: object x-abstract: true additionalProperties: false required: - accountId - _created - _updated properties: accountId: type: integer format: int64 _created: type: string format: date-time _updated: type: string format: date-time KubernetesImageScanTotalsViewModel: type: object additionalProperties: false required: - critical - high - medium - low - unknown - maliciousFile - sensitiveContent - maliciousUrl - maliciousIp - cve properties: critical: type: integer format: int32 high: type: integer format: int32 medium: type: integer format: int32 low: type: integer format: int32 unknown: type: integer format: int32 maliciousFile: type: integer format: int32 sensitiveContent: type: integer format: int32 maliciousUrl: type: integer format: int32 maliciousIp: type: integer format: int32 cve: type: integer format: int32 KubernetesImageViewModel: type: object additionalProperties: false required: - labels - name - id - size - registry - repository - tag - scanDetails - lastRunningDate - isRunning - ecsClusterName - isScannable properties: labels: type: object additionalProperties: type: string name: type: string id: type: string size: type: integer format: int64 registry: type: string repository: type: string tag: type: string scanDetails: $ref: '#/components/schemas/KubernetesImageScanDetailsViewModel' lastRunningDate: type: string format: date-time nullable: true isRunning: type: boolean ecsClusterName: type: string isScannable: type: boolean KubernetesImageScanDetailsViewModel: type: object additionalProperties: false required: - riskScore - scanStatus - scanStatusDetails - scanEngineVersion - totals properties: riskScore: type: string scanStatus: type: string scanStatusDetails: type: string scanEngineVersion: type: string totals: $ref: '#/components/schemas/KubernetesImageScanTotalsViewModel' KubernetesImageScanVulnerabilitiesViewModel: type: object additionalProperties: false required: - vulnerabilities properties: vulnerabilities: type: array items: $ref: '#/components/schemas/KubernetesImageScanVulnerabilityViewModel' KubernetesImageScanVulnerabilityViewModel: type: object additionalProperties: false required: - type - sourceGuardAction - remediation - severity - description - source - lines - cveList - payload properties: type: type: string sourceGuardAction: type: string remediation: type: string severity: type: string description: type: string source: type: string lines: type: array items: type: integer format: int32 cveList: type: array items: $ref: '#/components/schemas/CveFindingOnPackage' payload: type: string CveFindingOnPackage: type: object additionalProperties: false required: - id - severity - description - lastModified - cvssInfo properties: id: type: string nullable: true severity: type: string nullable: true description: type: string nullable: true lastModified: type: string format: date-time nullable: true cvssInfo: nullable: true oneOf: - $ref: '#/components/schemas/CvssData' CvssData: type: object additionalProperties: false required: - version - metrics - source properties: base-score: type: number format: float impact-score: type: number format: float nullable: true exploitability-score: type: number format: float nullable: true vector-string: type: string nullable: true version: type: string nullable: true metrics: nullable: true oneOf: - $ref: '#/components/schemas/CvssMetrics' source: type: string nullable: true CvssMetrics: type: object additionalProperties: false required: - scope properties: attack-vector: type: string nullable: true attack-complexity: type: string nullable: true privileges-required: type: string nullable: true user-interaction: type: string nullable: true scope: type: string nullable: true confidentiality-impact: type: string nullable: true integrity-impact: type: string nullable: true availability-impact: type: string nullable: true exploit-code_maturity: type: string nullable: true remediation-level: type: string nullable: true report-confidence: type: string nullable: true KubernetesImagePodGroupsViewModel: type: object additionalProperties: false required: - type - podGroups properties: type: type: string podGroups: type: array default: [] items: $ref: '#/components/schemas/KubernetesImagePodGroupDetailsViewModel' KubernetesImagePodGroupDetailsViewModel: type: object additionalProperties: false required: - id - externalId - name - namespace - labels - annotations - desiredPodsNumber - readyPodsNumber - environmentId properties: id: type: string externalId: type: string name: type: string namespace: type: string labels: type: object additionalProperties: type: string annotations: type: object additionalProperties: type: string desiredPodsNumber: type: integer format: int32 readyPodsNumber: type: integer format: int32 environmentId: type: string format: guid KubernetesPodsImagesViewModel: type: object additionalProperties: false required: - pods - cronJobs properties: pods: type: array items: $ref: '#/components/schemas/PodImagesViewModel' cronJobs: type: array items: $ref: '#/components/schemas/CronJobViewModel' PodImagesViewModel: type: object additionalProperties: false required: - podId - name - namespace - images - containers properties: podId: type: string name: type: string namespace: type: string images: type: array nullable: true items: $ref: '#/components/schemas/ImageViewModel' containers: type: array nullable: true items: $ref: '#/components/schemas/ContainerViewModel' ImageViewModel: type: object additionalProperties: false required: - imageId - imageSha - name properties: imageId: type: string imageSha: type: string name: type: string ContainerViewModel: type: object additionalProperties: false required: - image properties: image: type: string CronJobViewModel: type: object additionalProperties: false required: - cronjobId - name - namespace - lastScheduleTime - schedule - images - containers properties: cronjobId: type: string name: type: string namespace: type: string lastScheduleTime: type: string format: date-time schedule: type: string images: type: array nullable: true items: $ref: '#/components/schemas/ImageViewModel' containers: type: array nullable: true items: $ref: '#/components/schemas/ContainerViewModel' ImageAssurancePolicyRequestModel: allOf: - $ref: '#/components/schemas/ImageAssurancePolicyRequestModelOld' - type: object additionalProperties: false required: - admissionControllerAction - admissionControlUnScannedAction properties: admissionControllerAction: type: string description: '[Preview feature - Image Admission] Image Admission action to block non-compliant images according to the relevant ruleset. Options: ''Prevention'', ''Detection'', or null.' nullable: true admissionControlUnScannedAction: type: string description: '[Preview feature - Image Admission] Image Admission unScanned action of Detection or Prevention to alert on or block images that have not been scanned. Options: ''Prevention'', ''Detection'', or null.' nullable: true CloudVendor: type: string description: '' x-enumNames: - aws - hp - mellanox - awsgov - azure - google - awschina - azuregov - kubernetes - azurechina - terraform - generic - kubernetesruntimeassurance - shiftleft - sourcecodeassurance - imageassurance - alibaba - cft - containerregistry - oci - ocigov - ocigovuk - CIEM enum: - aws - hp - mellanox - awsgov - azure - google - awschina - azuregov - kubernetes - azurechina - terraform - generic - kubernetesruntimeassurance - shiftleft - sourcecodeassurance - imageassurance - alibaba - cft - containerregistry - oci - ocigov - ocigovuk - CIEM UpdateIdViewModel: type: object additionalProperties: false required: - organizationalUnitId properties: organizationalUnitId: type: string format: guid nullable: true MoveOrganizationalUnitViewModel: type: object additionalProperties: false required: - sourceOrganizationalUnitId - targetOrganizationalUnitId properties: sourceOrganizationalUnitId: type: string format: guid nullable: true targetOrganizationalUnitId: type: string format: guid nullable: true AttachCloudAccountsViewModel: type: object additionalProperties: false required: - entries - organizationalUnitId properties: entries: type: array default: [] nullable: true items: type: string organizationalUnitId: type: string format: guid nullable: true WorkloadImageViewModel: type: object additionalProperties: false required: - id - imageId - externalId - name - registry - repository - tag - type - digest - riskScore - scanStatus properties: id: type: string imageId: type: string externalId: type: string name: type: string registry: type: string repository: type: string tag: type: string type: $ref: '#/components/schemas/ImageType' digest: type: string riskScore: type: string nullable: true scanStatus: nullable: true oneOf: - $ref: '#/components/schemas/ImageStatus' ImageType: type: string description: '' x-enumNames: - EcsImage - KubernetesImage enum: - EcsImage - KubernetesImage ImageStatus: type: string description: '' x-enumNames: - Pending - Requested - InternalError - Scanned - PartialResult - UnsupportedOS - Unmatched - UnsupportedArtifactType - NetworkError - Unauthorized - NewImage - InsufficientResources - Timeout enum: - Pending - Requested - InternalError - Scanned - PartialResult - UnsupportedOS - Unmatched - UnsupportedArtifactType - NetworkError - Unauthorized - NewImage - InsufficientResources - Timeout ImageWorkloadsViewModel: type: object additionalProperties: false required: - kubernetesImageWorkloads - ecsImageWorkloads properties: kubernetesImageWorkloads: type: array default: [] items: $ref: '#/components/schemas/KubernetesImageWorkloadViewModel' ecsImageWorkloads: type: array default: [] items: $ref: '#/components/schemas/EcsImageWorkloadViewModel' KubernetesImageWorkloadViewModel: type: object additionalProperties: false required: - id - externalId - name - namespace - labels - annotations - desiredPodsNumber - readyPodsNumber - environmentId - createdAt - kind properties: id: type: string externalId: type: string name: type: string namespace: type: string labels: type: object additionalProperties: type: string annotations: type: object additionalProperties: type: string desiredPodsNumber: type: integer format: int32 readyPodsNumber: type: integer format: int32 environmentId: type: string format: guid createdAt: type: string format: date-time kind: type: string EcsImageWorkloadViewModel: type: object additionalProperties: false required: - id - externalId - type - awsAccount - region - cluster - name - tags - environmentId - desiredTasksNumber - createdAt properties: id: type: string externalId: type: string type: type: string awsAccount: type: string region: $ref: '#/components/schemas/CloudRegion' cluster: type: string name: type: string tags: type: object additionalProperties: type: string environmentId: type: string format: guid desiredTasksNumber: type: integer format: int32 createdAt: type: string format: date-time CloudRegion: type: string description: '' x-enumNames: - us_east_1 - us_west_1 - eu_west_1 - ap_southeast_1 - ap_northeast_1 - us_west_2 - sa_east_1 - az_1_region_a_geo_1 - az_2_region_a_geo_1 - az_3_region_a_geo_1 - ap_southeast_2 - mellanox_region - us_gov_west_1 - eu_central_1 - ap_northeast_2 - ap_south_1 - us_east_2 - ca_central_1 - eu_west_2 - eu_west_3 - eu_north_1 - cn_north_1 - cn_northwest_1 - us_gov_east_1 - ap_east_1 - me_south_1 - af_south_1 - eu_south_1 - ap_northeast_3 - me_central_1 - ap_south_2 - ap_southeast_3 - ap_southeast_4 - eu_central_2 - eu_south_2 - il_central_1 - ca_west_1 - mx_central_1 - ap_southeast_5 - ap_southeast_7 - westus - eastus - eastus2 - northcentralus - westus2 - southcentralus - centralus - usgovlowa - usgovvirginia - northeurope - westeurope - eastasia - southeastasia - japaneast - japanwest - brazilsouth - australiaeast - australiasoutheast - centralindia - southindia - westindia - canadaeast - westcentralus - chinaeast - chinanorth - canadacentral - germanycentral - germanynortheast - koreacentral - uksouth - ukwest - koreasouth - francecentral - francesouth - germanywestcentral - usdodcentral - usdodeast - usgovarizona - usgovtexas - australiacentral - australiacentral2 - chinaeast2 - chinanorth2 - southafricanorth - southafricawest - uaecentral - uaenorth - ussecwest - usseceast - germanynorth - switzerlandwest - norwaywest - norwayeast - switzerlandnorth - westus3 - swedencentral - chinanorth3 - brazilsoutheast - eastus2euap - jioindiawest - jioindiacentral - qatarcentral - spaincentral - italynorth - polandcentral - mexicocentral - asia - asia_east1 - asia_northeast1 - asia_south1 - asia_southeast1 - australia_southeast1 - europe - europe_north1 - europe_west1 - europe_west2 - europe_west3 - europe_west4 - northamerica_northeast1 - southamerica_east1 - us - us_central1 - us_east1 - us_east4 - us_west1 - us_west2 - global - asia_east2 - eur4 - nam4 - europe_west6 - japan_west - asia_northeast2 - asia_northeast3 - us_west3 - us_west4 - asia_southeast2 - nam3 - nam5 - nam6 - nam7 - nam10 - nam_eur_asia1 - eur3 - eur5 - asia1 - nam11 - eu - northamerica_northeast2 - southamerica_west1 - us_east5 - us_south1 - europe_central2 - europe_southwest1 - europe_west8 - europe_west9 - europe_west10 - europe_west12 - asia_south2 - australia_southeast2 - me_central1 - me_central2 - me_west1 - ap_sydney_1 - ap_melbourne_1 - sa_saopaulo_1 - sa_vinhedo_1 - ca_montreal_1 - ca_toronto_1 - sa_santiago_1 - eu_paris_1 - eu_marseille_1 - eu_frankfurt_1 - ap_hyderabad_1 - ap_mumbai_1 - il_jerusalem_1 - eu_milan_1 - ap_osaka_1 - ap_tokyo_1 - mx_queretaro_1 - eu_amsterdam_1 - me_jeddah_1 - ap_singapore_1 - af_johannesburg_1 - ap_seoul_1 - ap_chuncheon_1 - eu_madrid_1 - eu_stockholm_1 - eu_zurich_1 - me_abudhabi_1 - me_dubai_1 - uk_london_1 - uk_cardiff_1 - us_ashburn_1 - us_phoenix_1 - us_sanjose_1 - us_gov_ashburn_1 - us_gov_chicago_1 - us_gov_phoenix_1 - us_langley_1 - us_luke_1 - uk_gov_london_1 - uk_gov_cardiff_1 - sa_bogota_1 - us_chicago_1 - sa_valparaiso_1 - mx_monterrey_1 - eu_jovanovac_1 - ap_singapore_2 enum: - us_east_1 - us_west_1 - eu_west_1 - ap_southeast_1 - ap_northeast_1 - us_west_2 - sa_east_1 - az_1_region_a_geo_1 - az_2_region_a_geo_1 - az_3_region_a_geo_1 - ap_southeast_2 - mellanox_region - us_gov_west_1 - eu_central_1 - ap_northeast_2 - ap_south_1 - us_east_2 - ca_central_1 - eu_west_2 - eu_west_3 - eu_north_1 - cn_north_1 - cn_northwest_1 - us_gov_east_1 - ap_east_1 - me_south_1 - af_south_1 - eu_south_1 - ap_northeast_3 - me_central_1 - ap_south_2 - ap_southeast_3 - ap_southeast_4 - eu_central_2 - eu_south_2 - il_central_1 - ca_west_1 - mx_central_1 - ap_southeast_5 - ap_southeast_7 - westus - eastus - eastus2 - northcentralus - westus2 - southcentralus - centralus - usgovlowa - usgovvirginia - northeurope - westeurope - eastasia - southeastasia - japaneast - japanwest - brazilsouth - australiaeast - australiasoutheast - centralindia - southindia - westindia - canadaeast - westcentralus - chinaeast - chinanorth - canadacentral - germanycentral - germanynortheast - koreacentral - uksouth - ukwest - koreasouth - francecentral - francesouth - germanywestcentral - usdodcentral - usdodeast - usgovarizona - usgovtexas - australiacentral - australiacentral2 - chinaeast2 - chinanorth2 - southafricanorth - southafricawest - uaecentral - uaenorth - ussecwest - usseceast - germanynorth - switzerlandwest - norwaywest - norwayeast - switzerlandnorth - westus3 - swedencentral - chinanorth3 - brazilsoutheast - eastus2euap - jioindiawest - jioindiacentral - qatarcentral - spaincentral - italynorth - polandcentral - mexicocentral - asia - asia_east1 - asia_northeast1 - asia_south1 - asia_southeast1 - australia_southeast1 - europe - europe_north1 - europe_west1 - europe_west2 - europe_west3 - europe_west4 - northamerica_northeast1 - southamerica_east1 - us - us_central1 - us_east1 - us_east4 - us_west1 - us_west2 - global - asia_east2 - eur4 - nam4 - europe_west6 - japan_west - asia_northeast2 - asia_northeast3 - us_west3 - us_west4 - asia_southeast2 - nam3 - nam5 - nam6 - nam7 - nam10 - nam_eur_asia1 - eur3 - eur5 - asia1 - nam11 - eu - northamerica_northeast2 - southamerica_west1 - us_east5 - us_south1 - europe_central2 - europe_southwest1 - europe_west8 - europe_west9 - europe_west10 - europe_west12 - asia_south2 - australia_southeast2 - me_central1 - me_central2 - me_west1 - ap_sydney_1 - ap_melbourne_1 - sa_saopaulo_1 - sa_vinhedo_1 - ca_montreal_1 - ca_toronto_1 - sa_santiago_1 - eu_paris_1 - eu_marseille_1 - eu_frankfurt_1 - ap_hyderabad_1 - ap_mumbai_1 - il_jerusalem_1 - eu_milan_1 - ap_osaka_1 - ap_tokyo_1 - mx_queretaro_1 - eu_amsterdam_1 - me_jeddah_1 - ap_singapore_1 - af_johannesburg_1 - ap_seoul_1 - ap_chuncheon_1 - eu_madrid_1 - eu_stockholm_1 - eu_zurich_1 - me_abudhabi_1 - me_dubai_1 - uk_london_1 - uk_cardiff_1 - us_ashburn_1 - us_phoenix_1 - us_sanjose_1 - us_gov_ashburn_1 - us_gov_chicago_1 - us_gov_phoenix_1 - us_langley_1 - us_luke_1 - uk_gov_london_1 - uk_gov_cardiff_1 - sa_bogota_1 - us_chicago_1 - sa_valparaiso_1 - mx_monterrey_1 - eu_jovanovac_1 - ap_singapore_2 ImageScanRequestModel: type: object additionalProperties: false required: - environmentId - imageIdOrDigest properties: environmentId: type: string format: guid imageIdOrDigest: type: string ImageScanRequestViewModel: type: object additionalProperties: false required: - imagesToScanCount properties: imagesToScanCount: type: integer format: int32 ShiftLeftAccountViewModel: type: object additionalProperties: false required: - id - name - description - creationDate - vendor - organizationalUnitId - organizationalUnitPath - organizationalUnitName properties: id: type: string description: ShiftLeft id format: guid name: type: string description: ShiftLeft account name in Dome9 description: type: string description: ShiftLeft environment description in Dome9 nullable: true creationDate: type: string description: creation date for project in ShiftLeft format: date-time vendor: $ref: '#/components/schemas/CloudVendor' organizationalUnitId: type: string description: ShiftLeft account organizational unit ID format: guid nullable: true organizationalUnitPath: type: string organizationalUnitName: type: string ShiftLeftPostViewModel: type: object additionalProperties: false required: - name - description - organizationalUnitId properties: name: type: string description: ShiftLeft account name in Dome9 maxLength: 500 minLength: 1 pattern: ^[\p{L}\p{M}0-9\s\-_'.,#/@;:!=]*$ description: type: string description: ShiftLeft environment description in Dome9 maxLength: 1000 pattern: ^[\p{L}\p{M}0-9\s\-_'.,#/@;:!=]*$ nullable: true organizationalUnitId: type: string description: ShiftLeft account organizational unit ID format: guid nullable: true ShiftLeftPolicyViewModel: type: object additionalProperties: false required: - id - targetType - targetId - accountExternalId - rulesetId - notificationIds - errorMessage - admissionControllerAction - admissionControlUnScannedAction properties: id: type: string format: guid targetType: $ref: '#/components/schemas/ContinuousCompliancePolicyTargetType' targetId: type: string format: guid accountExternalId: type: string rulesetId: type: integer format: int64 notificationIds: type: array items: type: string format: guid errorMessage: type: string nullable: true admissionControllerAction: type: string description: '[Preview feature - Image Admission] Image Admission action to block non-compliant images according to the relevant ruleset. Options: ''Prevention'', ''Detection'', or null.' nullable: true admissionControlUnScannedAction: type: string description: '[Preview feature - Image Admission] Image Admission unScanned action of Detection or Prevention to alert on or block images that have not been scanned. Options: ''Prevention'', ''Detection'', or null.' nullable: true ShiftLeftPolicyRequestModel: type: object additionalProperties: false required: - targetId - targetType - notificationIds - rulesetId - id - externalAccountId - admissionControllerAction - admissionControlUnScannedAction properties: id: type: string format: guid targetId: type: string format: guid minLength: 1 targetType: $ref: '#/components/schemas/ContinuousCompliancePolicyTargetType' notificationIds: type: array items: type: string format: guid rulesetId: type: integer format: int64 externalAccountId: type: string nullable: true admissionControllerAction: type: string description: '[Preview feature - Image Admission] Image Admission action to block non-compliant images according to the relevant ruleset. Options: ''Prevention'', ''Detection'', or null.' nullable: true admissionControlUnScannedAction: type: string description: '[Preview feature - Image Admission] Image Admission unScanned action of Detection or Prevention to alert on or block images that have not been scanned. Options: ''Prevention'', ''Detection'', or null.' nullable: true AdmissionControlPolicyViewModel: type: object additionalProperties: false required: - id - targetId - targetType - rulesetId - action - notificationIds - errorMessage properties: id: type: string format: guid targetId: type: string format: guid targetType: $ref: '#/components/schemas/KubernetesAdmissionControlPolicyType' rulesetId: type: integer format: int64 action: $ref: '#/components/schemas/KubernetesRuntimeAssuranceAction' notificationIds: type: array items: type: string format: guid errorMessage: type: string KubernetesAdmissionControlPolicyType: type: string description: '' x-enumNames: - Environment - OrganizationalUnit enum: - Environment - OrganizationalUnit AdmissionControlPolicyRequestModel: type: object additionalProperties: false required: - targetId - targetType - notificationIds - action - rulesetId - id properties: id: type: string format: guid targetId: type: string format: guid minLength: 1 targetType: default: 1 $ref: '#/components/schemas/KubernetesAdmissionControlPolicyType' notificationIds: type: array items: type: string format: guid action: $ref: '#/components/schemas/KubernetesRuntimeAssuranceAction' rulesetId: type: integer format: int64 AdmissionControlPoliciesSummaryViewModel: type: object additionalProperties: false required: - admissionControlAgentPoliciesSummary - admissionControlAgentOUPoliciesSummary properties: admissionControlAgentPoliciesSummary: type: array items: $ref: '#/components/schemas/AdmissionControlAgentPolicySummaryViewModel2' admissionControlAgentOUPoliciesSummary: type: array items: $ref: '#/components/schemas/AdmissionControlAgentPolicySummaryViewModel2' AdmissionControlAgentPolicySummaryViewModel2: type: object additionalProperties: false required: - action - rules - notifications - exclusions - policyId - bundleName properties: action: type: string rules: type: array items: $ref: '#/components/schemas/RuleObject' notifications: type: array items: $ref: '#/components/schemas/NotificationObject' exclusions: type: array items: $ref: '#/components/schemas/AssessmentExclusionEntity' policyId: type: string format: guid bundleName: type: string KubernetesAdmissionControlVerifyResult: type: object additionalProperties: false required: - syntaxResults - assesmentResults properties: syntaxResults: type: array nullable: true items: $ref: '#/components/schemas/KubernetesRuntimeAssuranceVerifyResult' assesmentResults: nullable: true oneOf: - $ref: '#/components/schemas/MultipleCloudAccountsAssessmentResultViewModelOfAssessmentHistoryMinimizedEntity' KubernetesRuntimeAssuranceVerifyResult: type: object additionalProperties: false required: - rule - valid - error properties: rule: type: string nullable: true valid: type: boolean error: type: string nullable: true MultipleCloudAccountsAssessmentResultViewModelOfAssessmentHistoryMinimizedEntity: type: object additionalProperties: false properties: requestId: type: string format: guid results: type: array nullable: true items: $ref: '#/components/schemas/SingleCloudAccountsAssessmentResultViewModelOfAssessmentHistoryMinimizedEntity' SingleCloudAccountsAssessmentResultViewModelOfAssessmentHistoryMinimizedEntity: type: object additionalProperties: false properties: cloudAccount: description: cloud account metadata nullable: true oneOf: - $ref: '#/components/schemas/AssessmentResultCloudAccountMetadataViewModel' tests: type: array description: Tests results nullable: true items: $ref: '#/components/schemas/RuleTestResult' testEntities: type: object description: 'list of the cloud entities that were tested by the bundle ' nullable: true additionalProperties: type: array items: $ref: '#/components/schemas/AssessmentHistoryMinimizedEntity' dataSyncStatus: type: array description: data sync status of the entities nullable: true items: $ref: '#/components/schemas/AssessmentDataSyncStatusEntityViewModel' assessmentPassed: type: boolean description: assessment passed hasTestsErrors: type: boolean description: 'assessment tests has errors ' assessmentId: type: string description: assessment id format: guid assessmentError: type: string description: assessment run error nullable: true AssessmentResultCloudAccountMetadataViewModel: type: object additionalProperties: false required: - name - id - externalId properties: name: type: string nullable: true id: type: string nullable: true externalId: type: string nullable: true RuleTestResult: type: object additionalProperties: false required: - error - testedCount - relevantCount - nonComplyingCount - exclusionStats - entityResults - rule - testPassed properties: error: type: string nullable: true testedCount: type: integer format: int32 relevantCount: type: integer format: int32 nonComplyingCount: type: integer format: int32 exclusionStats: nullable: true oneOf: - $ref: '#/components/schemas/RuleTestResultStats' entityResults: type: array nullable: true items: $ref: '#/components/schemas/ValidationResult' rule: nullable: true oneOf: - $ref: '#/components/schemas/RuleEntity' testPassed: type: boolean RuleTestResultStats: type: object additionalProperties: false required: - testedCount - relevantCount - nonComplyingCount properties: testedCount: type: integer format: int32 relevantCount: type: integer format: int32 nonComplyingCount: type: integer format: int32 ValidationResult: type: object additionalProperties: false required: - validationStatus - isRelevant - isValid - isExcluded - exclusionId - remediationId - error - testObj properties: validationStatus: $ref: '#/components/schemas/ValidationStatusResult' isRelevant: type: boolean description: 'means if entity is relevant for this rule for example rule = "Instance where name like ''%db%'' should have...", returns false in instance name = ''scheduler1''' isValid: type: boolean description: 'means if entity is compliant. for example for rule="Instance should have vpc", return true if instance i-123 is under vpc-234, and false if not' isExcluded: type: boolean description: 'means if entity is excluded. for example for rule="Instance should have vpc exclude name=''test''", return true if instance name is test, and false if not' exclusionId: type: string format: guid nullable: true remediationId: type: string format: guid nullable: true error: type: string description: note that the lambda is not aware of this field default: '' nullable: true testObj: description: note that the lambda is not aware of this field nullable: true ValidationStatusResult: type: string description: '' x-enumFlags: true x-enumNames: - Relevant - Valid - Excluded enum: - Relevant - Valid - Excluded RuleEntity: type: object deprecated: true x-deprecatedMessage: 'This class was duplicated to new Domain (as part of DDD refactoring effort), please refer to the new Project: CGN.Common.Model.RuleEngine.RuleEntity' additionalProperties: false required: - rlmId - name - severity - logic - description - remediation - cloudbots - complianceTag - domain - priority - controlTitle - ruleId - category - labels - logicHash - isDefault properties: rlmId: type: string description: rlm rule id, do not expose this on API for now format: guid nullable: true name: type: string description: rule name default: '' nullable: true severity: description: rule severity (High/Medium/Low) default: 1 oneOf: - $ref: '#/components/schemas/RuleSeverity' logic: type: string description: the GSL statement for the rule (text string) default: '' nullable: true description: type: string description: description of the rule (text) default: '' nullable: true remediation: type: string description: remediation text for the rule (text) default: '' nullable: true cloudbots: type: string description: the Cloudbots section for the rule (optional) default: '' nullable: true complianceTag: type: string description: the compliance section for the rule (optional) default: '' nullable: true domain: type: string description: this field is not used default: '' nullable: true priority: type: string description: this field is not used default: '' nullable: true controlTitle: type: string description: this field is not used default: '' nullable: true ruleId: type: string description: this field is not used default: '' nullable: true category: type: string description: Rule Category default: '' nullable: true labels: type: array nullable: true items: type: string logicHash: type: string description: MD5 hash of the rule logic (serves as a unique ID for the rule), returned in response default: 1B2M2Y8AsgTpgAmY7PhCfg nullable: true isDefault: type: boolean description: The property represents default rule AssessmentHistoryMinimizedEntity: allOf: - $ref: '#/components/schemas/AssessmentHistoryMinimizedEntityBase' - type: object additionalProperties: false required: - dome9Id - name - category - region - vpc - network - virtualNetwork - tags - accountNumber - vendorIdentifier properties: dome9Id: type: string nullable: true name: type: string nullable: true category: type: string nullable: true region: type: string nullable: true vpc: nullable: true oneOf: - $ref: '#/components/schemas/VpcMinimizedEntity' network: type: string nullable: true virtualNetwork: type: string nullable: true tags: type: array nullable: true items: $ref: '#/components/schemas/TagRuleEntity' accountNumber: type: string nullable: true vendorIdentifier: type: string nullable: true VpcMinimizedEntity: type: object additionalProperties: false required: - id - name properties: id: type: string nullable: true name: type: string nullable: true TagRuleEntity: type: object additionalProperties: false required: - key - value properties: key: type: string nullable: true value: type: string nullable: true AssessmentHistoryMinimizedEntityBase: type: object additionalProperties: false required: - id - type properties: id: type: string nullable: true type: type: string nullable: true AssessmentDataSyncStatusEntityViewModel: type: object additionalProperties: false required: - entityType - recentlySuccessfulSync - generalFetchPermissionIssues - entitiesWithPermissionIssues properties: entityType: type: string nullable: true recentlySuccessfulSync: type: boolean nullable: true generalFetchPermissionIssues: type: boolean entitiesWithPermissionIssues: type: array nullable: true items: $ref: '#/components/schemas/EntityWithPermissionIssueViewModel' EntityWithPermissionIssueViewModel: type: object additionalProperties: false required: - externalId - name - cloudVendorIdentifier properties: externalId: type: string nullable: true name: type: string nullable: true cloudVendorIdentifier: type: string nullable: true AdmissionControlVerifyRequestViewModel: type: object additionalProperties: false required: - cloudAccountId - rules - gslVersion properties: cloudAccountId: type: string minLength: 1 rules: type: array items: type: string gslVersion: type: integer nullable: true AdmissionControlVerifyResultViewModel: type: object additionalProperties: false required: - rule - valid - error properties: rule: type: string valid: type: boolean error: type: string AdmissionControlEvalResultViewModel: type: object additionalProperties: false required: - violatedRules - result - error - object properties: violatedRules: type: array items: $ref: '#/components/schemas/AdmissionControlGSLRule' result: type: boolean error: type: string object: {} AdmissionControlGSLRule: type: object additionalProperties: false required: - rule properties: rule: type: string AdmissionControlExclusionPutRequestViewModel: allOf: - $ref: '#/components/schemas/AdmissionControlExclusionPostRequestModel' - type: object additionalProperties: false required: - id properties: id: type: string description: '[Required] Exclusion ID' format: guid AdmissionControlExclusionPostRequestModel: allOf: - $ref: '#/components/schemas/ExclusionPostRequestBaseModel' - type: object additionalProperties: false required: - rulesetId properties: rulesetId: type: integer description: Ruleset ID to apply exclusion on. Use '0' to apply on all rulesets. format: int64 ExclusionPostRequestBaseModel: type: object x-abstract: true additionalProperties: false required: - rules - logicExpressions - severities - cloudAccountIds - organizationalUnitIds - comment - dateRange properties: rules: type: array description: '[Optional] List of rules to apply the exclusion on.' nullable: true items: $ref: '#/components/schemas/RuleViewModel' logicExpressions: type: array description: '[Optional] The GSL logic expressions of the exclusion.' pattern: ((name|id|accountNumber) like '[a-zA-Z0-9/.\-_:%"*{},;()=!&|\$#~^+@?<>\[\] À-ÖØ-öø-ÿ]+')|(tags contain \[(key like '[a-zA-Z0-9/.\-_:%"*{},;()=!&|\$#~^+@?<>\[\] À-ÖØ-öø-ÿ]+' and value like '[a-zA-Z0-9/.\-_:%"*{},;()=!&|\$#~^+@?<>\[\] À-ÖØ-öø-ÿ]+')( or key like '[a-zA-Z0-9/.\-_:%"*{},;()=!&|\$#~^+@?<>\[\] À-ÖØ-öø-ÿ]+' and value like '[a-zA-Z0-9/.\-_:%"*{},;()=!&|\$#~^+@?<>\[\] À-ÖØ-öø-ÿ]+')*\])|(eventInfo\.userInfo\.username like '[a-zA-Z0-9/.\-_:%"*{},;()=!&|\$#~^+@?<>\[\] À-ÖØ-öø-ÿ]+')|('[a-zA-Z0-9/.\-_:%"*{},;()=!&|\$#~^+@?<>\[\] À-ÖØ-öø-ÿ]+' in\(eventInfo\.userInfo\.roles\))|(namespace like '[a-zA-Z0-9/.\-_:%"*{},;()=!&|\$#~^+@?<>\[\] À-ÖØ-öø-ÿ]+')|(rootOwner\.kind like '[a-zA-Z0-9/.\-_:%"*{},;()=!&|\$#~^+@?<>\[\] À-ÖØ-öø-ÿ]+' and rootOwner\.name like '[a-zA-Z0-9/.\-_:%"*{},;()=!&|\$#~^+@?<>\[\] À-ÖØ-öø-ÿ]+')|(labels contain-any [ key like '[a-zA-Z0-9/.\-_:%"*{},;()=!&|\$#~^+@?<>\[\] À-ÖØ-öø-ÿ]+' ])|(labels contain-any [ value like '[a-zA-Z0-9/.\-_:%"*{},;()=!&|\$#~^+@?<>\[\] À-ÖØ-öø-ÿ]+' ])|(labels contain-any [ key like '[a-zA-Z0-9/.\-_:%"*{},;()=!&|\$#~^+@?<>\[\] À-ÖØ-öø-ÿ]+' and value like '[a-zA-Z0-9/.\-_:%"*{},;()=!&|\$#~^+@?<>\[\] À-ÖØ-öø-ÿ]+' ])|(annotations contain-any [ key like '[a-zA-Z0-9/.\-_:%"*{},;()=!&|\$#~^+@?<>\[\] À-ÖØ-öø-ÿ]+' ])|(annotations contain-any [ value like '[a-zA-Z0-9/.\-_:%"*{},;()=!&|\$#~^+@?<>\[\] À-ÖØ-öø-ÿ]+' ])|(annotations contain-any [ key like '[a-zA-Z0-9/.\-_:%"*{},;()=!&|\$#~^+@?<>\[\] À-ÖØ-öø-ÿ]+' and value like '[a-zA-Z0-9/.\-_:%"*{},;()=!&|\$#~^+@?<>\[\] À-ÖØ-öø-ÿ]+' ]) nullable: true items: type: string severities: type: array description: '[Optional] List of severities to exclude. Valid values: [''Informational'', ''Low'', ''Medium'', ''High'', ''Critical'']' nullable: true items: $ref: '#/components/schemas/RuleSeverity' cloudAccountIds: type: array description: '[Optional] List of cloud account IDs to apply exclusion on. If neither cloud account IDs nor organizational unit IDs are supplied, exclusion will apply on all cloud accounts. If both organizational unit IDs and cloud account IDs are supplied, only organizational unit IDs will take effect.' nullable: true items: type: string format: guid organizationalUnitIds: type: array description: '[Optional] List of organizational unit IDs to apply exclusion on. If neither organizational unit IDs nor cloud account IDs are supplied, exclusion will apply on all cloud accounts. If both organizational unit IDs and cloud account IDs are supplied, only organizational unit IDs will take effect.' nullable: true items: type: string format: guid comment: type: string description: Comment text (free text) nullable: true dateRange: description: '[Optional] Date range for the exclusion to take effect. The exclusion will take effect permanently unless a specific date range is specified. Leaving ''From'' null will take only ''To'' into account. Leaving ''To'' null will take only ''From'' into account. DateRange with both ''From'' and ''To'' null will be disregarded.' nullable: true oneOf: - $ref: '#/components/schemas/DateTimeRange' RuleViewModel: type: object additionalProperties: false required: - name - logic - severity - rlmId - description - remediation - cloudbots - complianceTag - domain - priority - controlTitle - ruleId - category - labels - logicHash - isDefault properties: name: type: string description: rule name default: '' minLength: 1 severity: description: rule severity (High/Medium/Low) default: 1 oneOf: - $ref: '#/components/schemas/RuleSeverity' rlmId: type: string format: guid nullable: true logic: type: string description: the GSL statement for the rule (text string) default: '' minLength: 1 description: type: string description: description of the rule (text) default: '' nullable: true remediation: type: string description: remediation text for the rule (text) default: '' nullable: true cloudbots: type: string description: the Cloudbots section for the rule (optional) default: '' nullable: true complianceTag: type: string description: the compliance section for the rule (optional) default: '' nullable: true domain: type: string description: this field is not used default: '' nullable: true priority: type: string description: this field is not used default: '' nullable: true controlTitle: type: string description: this field is not used default: '' nullable: true ruleId: type: string description: this field is not used default: '' nullable: true category: type: string description: Rule Category default: '' nullable: true labels: type: array nullable: true items: type: string logicHash: type: string description: MD5 hash of the rule logic (serves as a unique ID for the rule), returned in response nullable: true isDefault: type: boolean description: The property represents default rule KubernetesImageAdmissionExclusionViewModel: allOf: - $ref: '#/components/schemas/KubernetesImageAdmissionPostExclusionViewModel' - type: object additionalProperties: false required: - id properties: id: type: string description: '[Required] Exclusion ID - Unique identifier for the exclusion. ' format: guid minLength: 1 KubernetesImageAdmissionPostExclusionViewModel: type: object additionalProperties: false required: - rulesetId - environmentIds - organizationalUnitIds - imageNameExclusion - usernameExclusion - roleExclusion - namespaceExclusion - groupExclusion - comment properties: rulesetId: type: integer description: '[Required] List of rules to apply the exclusion on.' format: int64 environmentIds: type: array description: '[Optional] List of environment IDs to apply exclusion on. If neither environment IDs nor organizational unit IDs are supplied, exclusion will apply on all environment. If both organizational unit IDs and environment IDs are supplied, only organizational unit IDs will take effect.' nullable: true items: type: string format: guid organizationalUnitIds: type: array description: '[Optional] List of organizational unit IDs to apply exclusion on. If neither organizational unit IDs nor environment IDs are supplied, exclusion will apply on all environment. If both organizational unit IDs and environment IDs are supplied, only organizational unit IDs will take effect.' nullable: true items: type: string format: guid imageNameExclusion: type: string description: '[Optional] an image to exclude.' nullable: true usernameExclusion: type: string description: '[Optional] a user to exclude.' nullable: true roleExclusion: type: string description: '[Optional] a role of a user to exclude.' nullable: true namespaceExclusion: type: string description: '[Optional] a namespace to exclude.' nullable: true groupExclusion: type: string description: '[Optional] a group of a user to exclude.' nullable: true comment: type: string description: '[Optional] Comment text (free text)' nullable: true DeprecatedKubernetesImageAdmissionExclusionViewModel: type: object additionalProperties: false required: - rulesetId - exclusions properties: rulesetId: type: integer format: int64 exclusions: type: array items: $ref: '#/components/schemas/ImageAdmissionExclusionModel' ImageAdmissionExclusionModel: type: object description: Use exclusions to bypass specific registries, specific images, usernames, roles, groups, or namespaces; Use "%" as a wildcard. additionalProperties: false required: - imageNameExclusion - usernameExclusion - roleExclusion - namespaceExclusion - groupExclusion properties: imageNameExclusion: type: string usernameExclusion: type: string roleExclusion: type: string namespaceExclusion: type: string groupExclusion: type: string VulnerabilityStats: type: object additionalProperties: false required: - cve - cveFixable - threat - secret - knownExploit - cveExcluded - threatsExcluded - secretExcluded properties: cve: default: All: 0 Critical: 0 High: 0 Medium: 0 Low: 0 Informational: 0 Unknown: 0 nullable: true oneOf: - $ref: '#/components/schemas/VulnerabilitySeverityStats' cveFixable: default: All: 0 Critical: 0 High: 0 Medium: 0 Low: 0 Informational: 0 Unknown: 0 nullable: true oneOf: - $ref: '#/components/schemas/VulnerabilitySeverityStats' threat: default: All: 0 Critical: 0 High: 0 Medium: 0 Low: 0 Informational: 0 Unknown: 0 nullable: true oneOf: - $ref: '#/components/schemas/VulnerabilitySeverityStats' secret: default: All: 0 Critical: 0 High: 0 Medium: 0 Low: 0 Informational: 0 Unknown: 0 nullable: true oneOf: - $ref: '#/components/schemas/VulnerabilitySeverityStats' knownExploit: default: All: 0 Critical: 0 High: 0 Medium: 0 Low: 0 Informational: 0 Unknown: 0 nullable: true oneOf: - $ref: '#/components/schemas/VulnerabilitySeverityStats' cveExcluded: default: All: 0 Critical: 0 High: 0 Medium: 0 Low: 0 Informational: 0 Unknown: 0 nullable: true oneOf: - $ref: '#/components/schemas/VulnerabilitySeverityStats' threatsExcluded: default: All: 0 Critical: 0 High: 0 Medium: 0 Low: 0 Informational: 0 Unknown: 0 nullable: true oneOf: - $ref: '#/components/schemas/VulnerabilitySeverityStats' secretExcluded: default: All: 0 Critical: 0 High: 0 Medium: 0 Low: 0 Informational: 0 Unknown: 0 nullable: true oneOf: - $ref: '#/components/schemas/VulnerabilitySeverityStats' VulnerabilitySeverityStats: type: object additionalProperties: false required: - all - critical - high - medium - low - informational - unknown properties: all: type: integer format: int32 critical: type: integer format: int32 high: type: integer format: int32 medium: type: integer format: int32 low: type: integer format: int32 informational: type: integer format: int32 unknown: type: integer format: int32 EcsImageScanConfigViewModel: type: object additionalProperties: false required: - ecsImageScan properties: ecsImageScan: type: boolean VlmScannedAsset: type: object additionalProperties: false required: - id - platform - environmentId - entityType - externalId - entityName - operatingSystem - additionalFields - imageGroups properties: id: type: string nullable: true platform: nullable: true oneOf: - $ref: '#/components/schemas/AssessmentCloudAccountType' environmentId: type: string format: guid nullable: true entityType: nullable: true oneOf: - $ref: '#/components/schemas/VlmEntityType' externalId: type: string nullable: true entityName: type: string nullable: true operatingSystem: type: string nullable: true additionalFields: type: object default: {} nullable: true additionalProperties: {} imageGroups: type: array nullable: true items: $ref: '#/components/schemas/VlmImageGroupDetails' VlmEntityType: type: string description: '' x-enumNames: - Instance - VirtualMachine - VMInstance - Lambda - FunctionApp - CloudFunction - KubernetesImage - ContainerRegistryImage - EcsImage - ShiftLeftImage enum: - Instance - VirtualMachine - VMInstance - Lambda - FunctionApp - CloudFunction - KubernetesImage - ContainerRegistryImage - EcsImage - ShiftLeftImage VlmImageGroupDetails: type: object additionalProperties: false required: - type - name properties: type: $ref: '#/components/schemas/VlmImageGroupType' name: type: string nullable: true VlmImageGroupType: type: string description: '' x-enumNames: - None - VendorImage - BaseImage enum: - None - VendorImage - BaseImage VlmScanInfo: type: object additionalProperties: false required: - scanProducer - scanDate properties: scanProducer: type: string nullable: true scanDate: type: string format: date-time nullable: true VlmWorkloadPolicyViewModel: type: object additionalProperties: false required: - id - targetType - targetId - accountExternalId - rulesetId - notificationIds - errorMessage - admissionControllerAction - admissionControlUnScannedAction properties: id: type: string format: guid targetType: $ref: '#/components/schemas/ContinuousCompliancePolicyTargetType' targetId: type: string format: guid accountExternalId: type: string rulesetId: type: integer format: int64 notificationIds: type: array items: type: string format: guid errorMessage: type: string nullable: true admissionControllerAction: type: string nullable: true admissionControlUnScannedAction: type: string nullable: true VlmWorkloadPolicyRequestModel: type: object additionalProperties: false required: - targetId - targetType - notificationIds - rulesetId - id - externalAccountId - admissionControllerAction - admissionControlUnScannedAction properties: id: type: string format: guid targetId: type: string format: guid minLength: 1 targetType: $ref: '#/components/schemas/ContinuousCompliancePolicyTargetType' notificationIds: type: array items: type: string format: guid rulesetId: type: integer format: int64 externalAccountId: type: string nullable: true admissionControllerAction: type: string nullable: true admissionControlUnScannedAction: type: string nullable: true UnifiedScanResultSBOMPackage: allOf: - $ref: '#/components/schemas/UnifiedScanResultBase' - type: object additionalProperties: false required: - category - type - name - description - version - os - source - inUse - licenses - cgType properties: category: type: string default: Package nullable: true type: type: string default: Package nullable: true package-manager: nullable: true oneOf: - $ref: '#/components/schemas/UnifiedPackageManager' name: type: string nullable: true description: type: string nullable: true version: type: string nullable: true is-os-package: type: boolean nullable: true os: type: string nullable: true source: type: string nullable: true inUse: type: boolean nullable: true licenses: type: array nullable: true items: $ref: '#/components/schemas/UnifiedLicense' cgType: type: string default: Package nullable: true UnifiedPackageManager: type: object additionalProperties: false required: - name - path properties: name: type: string nullable: true path: type: string nullable: true UnifiedLicense: type: object additionalProperties: false required: - value - spdxExpression - locations properties: value: type: string nullable: true spdxExpression: type: string nullable: true locations: type: array nullable: true items: $ref: '#/components/schemas/UnifiedLicenseLocation' UnifiedLicenseLocation: type: object additionalProperties: false required: - path - layerID properties: path: type: string nullable: true layerID: type: string nullable: true UnifiedScanResultBase: type: object additionalProperties: false required: - scannedAsset - scanInfo - id - severity - scanEngineVersion - affectedAssetsSnapshot - type - category - remediation - cgType - customUniqueKeyHash - image - baseImages properties: scannedAsset: nullable: true oneOf: - $ref: '#/components/schemas/VlmScannedAsset' scanInfo: nullable: true oneOf: - $ref: '#/components/schemas/VlmScanInfo' id: type: string nullable: true severity: type: string nullable: true scanEngineVersion: type: string nullable: true affectedAssetsSnapshot: type: array nullable: true items: $ref: '#/components/schemas/VlmAffectedAssetSnapshot' type: type: string nullable: true category: type: string nullable: true remediation: type: string nullable: true cgType: type: string nullable: true customUniqueKeyHash: type: string nullable: true image: deprecated: true nullable: true oneOf: - $ref: '#/components/schemas/ImageMetadata' baseImages: type: array nullable: true items: $ref: '#/components/schemas/VlmBaseImageDetails' VlmAffectedAssetSnapshot: type: object additionalProperties: false required: - id - platform - environmentId - entityType - externalId - entityName - additionalFields properties: id: type: string nullable: true platform: $ref: '#/components/schemas/AssessmentCloudAccountType' environmentId: type: string format: guid entityType: type: string nullable: true externalId: type: string nullable: true entityName: type: string nullable: true additionalFields: type: object nullable: true additionalProperties: {} ImageMetadata: type: object deprecated: true additionalProperties: false properties: image-id: type: string nullable: true repo-tag: type: string nullable: true repo-url: type: string nullable: true external-id: type: string nullable: true image-digest: type: string nullable: true VlmBaseImageDetails: type: object additionalProperties: false required: - names - externalId - groups properties: names: type: array nullable: true items: type: string externalId: type: string nullable: true groups: type: array nullable: true items: type: string SBOMFormatVersions: type: object additionalProperties: false required: - formats properties: formats: type: array items: $ref: '#/components/schemas/SBOMFormatVersionDetails' SBOMFormatVersionDetails: type: object additionalProperties: false required: - id - name properties: id: type: string name: type: string SBOMVersionFormatId: type: string description: '' x-enumNames: - SPDX23 - CycloneDX15 - CycloneDX16 enum: - SPDX23 - CycloneDX15 - CycloneDX16 VlmEntityTypeBC: type: string description: '' x-enumNames: - Image - Instance - VirtualMachine - VMInstance - Lambda - FunctionApp - CloudFunction enum: - Image - Instance - VirtualMachine - VMInstance - Lambda - FunctionApp - CloudFunction UnifiedScanResultScanSummary: allOf: - $ref: '#/components/schemas/UnifiedScanResultBase' - type: object additionalProperties: nullable: true required: - category - type - description - vulnerabilityStats - cgType properties: risk-score: type: number format: float nullable: true category: type: string default: ScanSummary nullable: true type: type: string default: ScanSummary nullable: true description: type: string nullable: true vulnerabilityStats: nullable: true oneOf: - $ref: '#/components/schemas/VulnerabilityStats' remediation-summary: type: array nullable: true items: $ref: '#/components/schemas/UnifiedRemediationSummary' cgType: type: string default: ScanSummary nullable: true UnifiedRemediationSummary: type: object additionalProperties: false required: - categories properties: file-path: type: string nullable: true categories: type: array default: [] nullable: true items: $ref: '#/components/schemas/UnifiedRemediationSummaryCategory' UnifiedRemediationSummaryCategory: type: object additionalProperties: false required: - category - remediations properties: category: type: string nullable: true remediations: type: array default: [] nullable: true items: $ref: '#/components/schemas/UnifiedRemediationSummaryCategoryRemediations' UnifiedRemediationSummaryCategoryRemediations: type: object additionalProperties: false required: - finding - severity - action - lines properties: finding: type: string nullable: true severity: type: string nullable: true action: type: string nullable: true lines: type: array default: [] nullable: true items: type: integer format: int32 UnifiedScanResultPackage: allOf: - $ref: '#/components/schemas/UnifiedScanResultSBOMPackage' - type: object additionalProperties: false required: - category - type - layerId - parents - isFixable - cves - relatedCves - cgType properties: category: type: string default: Package nullable: true type: type: string default: Package nullable: true layerId: type: string nullable: true parents: type: array default: [] nullable: true items: $ref: '#/components/schemas/UnifiedPackageParent' isFixable: type: boolean cves: type: array default: [] nullable: true items: $ref: '#/components/schemas/UnifiedPackageCve' relatedCves: type: array default: [] nullable: true items: $ref: '#/components/schemas/UnifiedPackageCve' cgType: type: string default: Package nullable: true UnifiedPackageParent: type: object additionalProperties: false required: - name - version - line properties: name: type: string nullable: true version: type: string nullable: true line: type: integer format: int32 UnifiedPackageCve: type: object additionalProperties: false required: - id - sourceUrl - severity - remediation - description - isFixedByPackageRemediation - source - epssScore - knownExploit - knownExploitDueDate - urls - relatedIds - isExcluded - exclusion properties: id: type: string nullable: true sourceUrl: type: string nullable: true severity: type: string nullable: true remediation: type: string nullable: true description: type: string nullable: true last-modified: type: string format: date-time nullable: true isFixedByPackageRemediation: type: boolean source: type: string nullable: true cvss-info: nullable: true oneOf: - $ref: '#/components/schemas/CvssData' epssScore: type: number format: double nullable: true knownExploit: type: boolean nullable: true knownExploitDueDate: type: string format: date-time nullable: true urls: type: array default: [] nullable: true items: type: string relatedIds: type: array nullable: true items: type: string isExcluded: type: boolean exclusion: nullable: true oneOf: - $ref: '#/components/schemas/UnifiedVulnerabilityExclusion' UnifiedVulnerabilityExclusion: type: object additionalProperties: false required: - id - comment - includeInAssessment - author - creationDate properties: id: type: string format: guid nullable: true comment: type: string nullable: true includeInAssessment: type: boolean author: type: string nullable: true creationDate: type: string format: date-time UnifiedScanResultInsecureContent: allOf: - $ref: '#/components/schemas/UnifiedScanResultWithFiles' - type: object additionalProperties: false required: - type - classification - cgType properties: type: type: string default: InsecureContent nullable: true classification: type: string nullable: true cgType: type: string default: InsecureContent nullable: true UnifiedScanResultWithFiles: allOf: - $ref: '#/components/schemas/UnifiedScanResultBase' - type: object additionalProperties: false required: - name - description - isExcluded - exclusion - files properties: name: type: string nullable: true description: type: string nullable: true isExcluded: type: boolean exclusion: nullable: true oneOf: - $ref: '#/components/schemas/UnifiedVulnerabilityExclusion' files: type: array default: [] nullable: true items: $ref: '#/components/schemas/UnifiedScanResultFile' UnifiedScanResultFile: type: object additionalProperties: nullable: true required: - sha256 - md5 - contents - layerId properties: file-path: type: string nullable: true sha256: type: string nullable: true md5: type: string nullable: true contents: type: array default: [] nullable: true items: $ref: '#/components/schemas/UnifiedScanResultFileContent' layerId: type: string nullable: true UnifiedScanResultFileContent: type: object additionalProperties: nullable: true required: - payload - lines properties: payload: type: string nullable: true payload-sha256: type: string nullable: true lines: type: array default: [] nullable: true items: type: integer format: int32 UnifiedScanResultMalware: allOf: - $ref: '#/components/schemas/UnifiedScanResultWithFiles' - type: object additionalProperties: false required: - type - classification - cgType properties: type: type: string default: Malware nullable: true classification: type: string nullable: true cgType: type: string default: Malware nullable: true Layer: type: object additionalProperties: false required: - created - author - comment properties: created: type: string nullable: true created_by: type: string nullable: true author: type: string nullable: true comment: type: string nullable: true empty_layer: type: boolean VlmScanResultMetadataViewModel: type: object deprecated: true additionalProperties: false required: - platform - environmentId - entityType - entityExternalId - entityExternalIds - scanProducer - scanTime - vulnerabilityStats properties: platform: type: string environmentId: type: string format: guid entityType: type: string entityExternalId: type: string entityExternalIds: type: array items: type: string scanProducer: type: string scanTime: type: string format: date-time vulnerabilityStats: $ref: '#/components/schemas/VulnerabilityStats' VlmScanMetadataViewModel: type: object additionalProperties: false required: - scannedAsset - scanInfo - vulnerabilityStats - layersDetails properties: scannedAsset: $ref: '#/components/schemas/VlmScannedAsset' scanInfo: $ref: '#/components/schemas/VlmScanInfo' vulnerabilityStats: $ref: '#/components/schemas/VulnerabilityStats' layersDetails: type: object additionalProperties: $ref: '#/components/schemas/Layer' ScanResultViewModel: type: object additionalProperties: false required: - scannedAsset - scanInfo - ScanSummary - LayersDetails properties: scannedAsset: $ref: '#/components/schemas/VlmScannedAsset' scanInfo: $ref: '#/components/schemas/VlmScanInfo' ScanSummary: $ref: '#/components/schemas/UnifiedScanResultScanSummary' Package: type: array items: $ref: '#/components/schemas/UnifiedScanResultPackage' InsecureContent: type: array items: $ref: '#/components/schemas/UnifiedScanResultInsecureContent' Malware: type: array items: $ref: '#/components/schemas/UnifiedScanResultMalware' LayersDetails: type: object nullable: true additionalProperties: $ref: '#/components/schemas/Layer' VulnerabilityExclusionViewModel: type: object additionalProperties: false required: - id - name - type - filter - includeInAssessment - comment - author - creationDate - errorMessage properties: id: type: string format: guid name: type: string type: $ref: '#/components/schemas/VulnerabilityExclusionTypeEnum' filter: $ref: '#/components/schemas/VulnerabilityExclusionFilterViewModel' includeInAssessment: type: boolean comment: type: string author: type: string creationDate: type: string format: date-time errorMessage: type: string nullable: true VulnerabilityExclusionTypeEnum: type: string description: '' x-enumNames: - CVE - Threat - Secret enum: - CVE - Threat - Secret VulnerabilityExclusionFilterViewModel: type: object additionalProperties: false required: - cveId - packageName - packageVersion - filePath - maliciousCategory - entityNames - entityId - environmentsIds - organizationalUnitsIds - startDate - endDate properties: cveId: type: string nullable: true packageName: type: string nullable: true packageVersion: type: string nullable: true filePath: type: string nullable: true maliciousCategory: nullable: true oneOf: - $ref: '#/components/schemas/MaliciousCategory' entityNames: type: array nullable: true items: type: string entityId: type: string nullable: true environmentsIds: type: array nullable: true items: type: string format: guid organizationalUnitsIds: type: array nullable: true items: type: string format: guid startDate: type: string format: date-time nullable: true endDate: type: string format: date-time nullable: true MaliciousCategory: type: string description: '' x-enumNames: - MaliciousFile - MaliciousIP - MaliciousURL enum: - MaliciousFile - MaliciousIP - MaliciousURL VulnerabilityExclusionPostRequestModel: type: object additionalProperties: false required: - name - comment - type - filter - includeInAssessment properties: name: type: string minLength: 1 type: $ref: '#/components/schemas/VulnerabilityExclusionTypeEnum' comment: type: string minLength: 1 filter: $ref: '#/components/schemas/VulnerabilityExclusionFilterViewModel' includeInAssessment: type: boolean VulnerabilityExclusionPutRequestModel: type: object additionalProperties: false required: - name - comment - id - type - filter - includeInAssessment properties: id: type: string format: guid name: type: string minLength: 1 comment: type: string minLength: 1 type: $ref: '#/components/schemas/VulnerabilityExclusionTypeEnum' filter: $ref: '#/components/schemas/VulnerabilityExclusionFilterViewModel' includeInAssessment: type: boolean VulnerabilityExclusionDeleteViewModel: type: object additionalProperties: false required: - id - errorMessage properties: id: type: string format: guid errorMessage: type: string nullable: true securitySchemes: basic: type: http scheme: basic security: - basic: [] x-readme: explorer-enabled: true proxy-enabled: true