openapi: 3.2.0 info: title: CoreStack External Security API version: 1.0.0 termsOfService: http://corestack.io/ license: name: CoreStack Inc License url: http://corestack.io/licenses/LICENSE-2.0.html description: Security Pillar servers: - url: / tags: - name: Security description: Security Pillar paths: /security/executive_dashboard/threats/by_cloud_accounts: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardThreatsSummaryAccountResponse' summary: Get Threat by Cloud Accounts description: Security Dashboard Threats by Accounts operationId: ThreatByAccounts security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardRequest' required: true /security/executive_dashboard/threats/by_region: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardThreatsByRegionResponse' summary: Get Threat by Region description: Security Dashboard Threat by Region operationId: ThreatByRegion security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardRequest' required: true /security/executive_dashboard/threats/by_resource_category: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardThreatsByResourceCategoryResponse' summary: Get Threat by Resource Category description: Security Dashboard Threat by Resource Category operationId: ThreatByResourceCategory security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardRequest' required: true /security/executive_dashboard/threats/trend_by_severity: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardThreatSummaryMonthResponse' summary: Get Threats by Trend description: Security Dashboard Threats by Trend operationId: ThreatByTrend security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardRequest' required: true /security/executive_dashboard/violations/by_cloud_account: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardViolationsByAccountResponse' summary: Get Config Violation by Cloud Account description: Security Dashboard Violations by Cloud Accounts operationId: violationsByCloudAccount security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardRequest' required: true /security/executive_dashboard/violations/by_region: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardViolationsByRegionResponse' summary: Get Config Violation By Region description: Security Dashboard Violations by Region operationId: violationsByRegion security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardRequest' required: true /security/executive_dashboard/violations/by_resource_category: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardViolationsByResourceCategoryResponse' summary: Get Config Violation by Resource Category description: Security Dashboard Violation by Resource Category operationId: violationsByResourceCategory security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardRequest' required: true /security/executive_dashboard/violations/trend_by_severity: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardViolationsByMonthResponse' summary: Get Config Violation trend by severity description: Security Dashboard Config Violation by Trend operationId: violationsTrend security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardRequest' required: true /security/executive_dashboard/vulnerabilities/by_cloud_account: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardVulnerabilitySummaryAccountResponse' summary: Get Vulnerability by Cloud Account description: SecOps Dashboard Vulnerabilities by Cloud Account operationId: VulnerabilityByAccount security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardRequest' required: true /security/executive_dashboard/vulnerabilities/by_region: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardVulnerabilitySummaryRegionResponse' summary: Get Vulnerability by Region description: SecOps Dashboard Vulnerabilities by Region operationId: VulnerabilityByRegion security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardRequest' required: true /security/executive_dashboard/vulnerabilities/trend_by_severity: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/SecurityVulnerabilitySummaryMonthResponse' summary: Get Vulnerability by Trend description: SecOps Dashboard Vulnerabilities by Trend operationId: VulnerabilityByTrend security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardRequest' required: true /security/posture/visibility/{tenant_id}/get/vulnerability: get: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/SecurityVulnerabilityResponse' summary: List Security Vulnerability Details description: Security Vulnerability for tenant or cloud account operationId: SecurityVulnerability parameters: - name: tenant_id in: path required: true description: Specify the tenant ID. This is a unique ID and can be retrieved using the List Tenants API. schema: type: string - description: ID of the service account. This can be fetched from list cloud accounts API. name: accounts in: query schema: type: string - description: Cloud service in: query x-cs-enum-type: CloudServiceName required: false name: services schema: type: string enum: - AWS - Azure - AzureStack - Azure_CSP - Azure_CSP-Direct - Azure_EA - Azure_MCA - Cloudstack - GCP - MS_VMM - OCI - Openstack - PrivateCloud - Rackspace - VMware - VMware_VCD - vCenter default: AWS security: - auth_token: [] tags: - Security /security/posture/visibility/{tenant_id}/get/{action_name}: get: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/SecurityVisibilityResponse' summary: List Security Visibility Details description: Security threat and guardrails details for tenant or cloud account operationId: SecurityVisibility parameters: - name: tenant_id in: path required: true description: Specify the tenant ID. This is a unique ID and can be retrieved using the List Tenants API. schema: type: string - name: action_name in: path required: true description: Action name to get visibility data schema: type: string enum: - threats_tenant_summary - guardrails_tenant_summary - description: ID of the service account. This can be fetched from list cloud accounts API. name: accounts in: query schema: type: string - description: Cloud service in: query x-cs-enum-type: CloudServiceName required: false name: services schema: type: string enum: - AWS - Azure - AzureStack - Azure_CSP - Azure_CSP-Direct - Azure_EA - Azure_MCA - Cloudstack - GCP - MS_VMM - OCI - Openstack - PrivateCloud - Rackspace - VMware - VMware_VCD - vCenter default: AWS - description: Number of records to display name: limit in: query schema: type: integer - description: Page number name: page in: query schema: type: integer security: - auth_token: [] tags: - Security /security/posture/{tenant_id}/get/securityops: get: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/SecurityPostureTenantResponse' summary: Get Security Posture Details By Tenant description: Security posture By Tenant operationId: SecurityPostureByTenant parameters: - name: tenant_id in: path required: true description: Specify the tenant ID. This is a unique ID and can be retrieved using the List Tenants API. schema: type: string - description: Severity of the violations. name: category in: query schema: type: string enum: - threats - vulnerability - guardrail - description: Number of records to display name: limit in: query schema: type: integer - description: Page number name: page in: query schema: type: integer - description: search by tenant_name wise name: search in: query schema: type: string security: - auth_token: [] tags: - Security /security/posture/{tenant_id}/get/securityops/{action_name}: get: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/SecurityPostureResponse' summary: Get Security Posture Details by Cloud Account & Cloud Service Provider description: Security posture by Cloud and Cloud Accounts operationId: SecurityPosture parameters: - name: tenant_id in: path required: true description: Specify the tenant ID. This is a unique ID and can be retrieved using the List Tenants API. schema: type: string - name: action_name in: path required: true description: Action name to get posture data by Cloud and Cloud Accounts category schema: type: string enum: - posture_by_cloud - posture_by_cloud_account - description: Severity of the violations. Choose any of the below when action_name is chosen as posture_by_cloud_account name: category in: query schema: type: string enum: - threats - vulnerability - guardrail - description: Select one from the supported services to display summary for that particular service in: query x-cs-enum-type: CloudServiceName required: false name: service_name schema: type: string enum: - AWS - Azure - AzureStack - Azure_CSP - Azure_CSP-Direct - Azure_EA - Azure_MCA - Cloudstack - GCP - MS_VMM - OCI - Openstack - PrivateCloud - Rackspace - VMware - VMware_VCD - vCenter default: AWS - description: Number of records to display name: limit in: query schema: type: integer - description: Page number name: page in: query schema: type: integer - description: Search by account_name wise name: search in: query schema: type: string security: - auth_token: [] tags: - Security /v1/secops/dashboard/infra_misconfig/summary: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '403': description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: type: array items: $ref: '#/components/schemas/SecurityInfraDashboardSummaryDetails' summary: Get summary of infra mis-configurations aggregated by region, resource category, or account for a given tenant description: Get summary of infra mis-configurations aggregated by region, resource category, or account for a given tenant. operationId: InfraMisConfigSummary security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityInfraDashboardSummaryRequest' required: true /v1/secops/dashboard/infra_misconfig/summary_by_resource: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '403': description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: type: array items: $ref: '#/components/schemas/SecurityInfraDashboardSummaryDetails' summary: Get summary of infra mis-configurations aggregated by resource(s) for a given tenant description: Get summary of infra mis-configurations aggregated by region, resource category, or account for a given tenant. operationId: InfraMisConfigSummaryByResource security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityInfraDashboardSummaryRequest' required: true /v1/secops/dashboard/infra_misconfig/trend/list: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '403': description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/InfraMisconfigurationTrendResponse' summary: List of infra misconfigurations IDs captured for given summary filters description: List of infra misconfigurations IDs captured for given trend summary. operationId: ListInfraMisConfigurationsTrendSummary security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/InfraMisConfigurationsTrendListRequest' required: true /v1/secops/dashboard/infra_misconfig/trend/summary: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '403': description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: type: array description: List of infrastructure misconfigurations trends items: $ref: '#/components/schemas/InfraMisConfigurationsTrendSummary' summary: Retrieves trend summary of infrastructure misconfigurations description: Retrieves trend summary of infrastructure misconfigurations operationId: InfraMisConfigurationsTrendSummary security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/InfraMisConfigurationsTrendSummaryRequest' required: true /v1/secops/dashboard/infra_threats/summary: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '403': description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: type: array items: $ref: '#/components/schemas/SecurityInfraDashboardSummaryDetails' summary: Get summary of infra threats aggregated by region, resource category, or account for a given tenant description: Get summary of infra threats aggregated by region, resource category, or account for a given tenant. operationId: InfraThreatSummary security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityInfraDashboardSummaryRequest' required: true /v1/secops/dashboard/infra_threats/summary_by_resource: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '403': description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: type: array items: $ref: '#/components/schemas/SecurityInfraDashboardSummaryDetails' summary: Get summary of infra threats aggregated by resource(s) for a given tenant description: Get summary of infra threats aggregated by resource(s) for a given tenant operationId: InfraThreatSummaryByResource security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityInfraDashboardSummaryRequest' required: true /v1/secops/dashboard/infra_threats/trend/list: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '403': description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/ListResponse' summary: List of infra threat IDs captured for given summary filters description: List of infra threat IDs captured for given trend summary. operationId: ListInfraThreatsTrendSummary security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/InfraThreatsTrendListRequest' required: true /v1/secops/dashboard/infra_threats/trend/summary: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '403': description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: type: array description: List of infrastructure threats trends items: $ref: '#/components/schemas/InfraThreatsTrendSummary' summary: Retrieves trend summary of infrastructure threats description: Retrieves trend summary of infrastructure threats operationId: InfraThreatsTrendSummary security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/InfraThreatsTrendSummaryRequest' required: true /v1/secops/dashboard/infra_vulnerabilities/summary: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '403': description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: type: array items: $ref: '#/components/schemas/SecurityInfraDashboardSummaryDetails' summary: Get summary of infra vulnerabilities aggregated by region, resource category, or account for a given tenant description: Get summary of infra vulnerabilities aggregated by region/account/resource category for a given tenant. operationId: InfraVulnerabilitySummary security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityInfraDashboardSummaryRequest' required: true /v1/secops/dashboard/infra_vulnerabilities/summary_by_resource: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '403': description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: type: array items: $ref: '#/components/schemas/SecurityInfraDashboardSummaryDetails' summary: Get summary of infra vulnerabilities aggregated by resource(s) for a given tenant description: Get summary of infra vulnerabilities aggregated by aggregated by resource(s) for a given tenant operationId: InfraVulnerabilitySummaryByResource security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityInfraDashboardSummaryRequest' required: true /v1/secops/dashboard/infra_vulnerabilities/trend/list: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '403': description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/ListResponse' summary: List of infra vulnerability IDs captured for given summary filters description: List of infra vulnerability IDs captured for given trend summary. operationId: ListInfraVulnerabilitiesTrendSummary security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/InfraVulnerabilitiesTrendListRequest' required: true /v1/secops/dashboard/infra_vulnerabilities/trend/summary: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '403': description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: type: array description: List of infrastructure vulnerability trends items: $ref: '#/components/schemas/InfraVulnerabilitiesTrendSummary' summary: Retrieves trend summary of infrastructure vulnerabilities description: Retrieves trend summary of infrastructure vulnerabilities operationId: InfraVulnerabilitiesTrendSummary security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/InfraVulnerabilitiesTrendSummaryRequest' required: true /v1/secops/infra_threats/batch: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '403': description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: type: array description: List of Threat details items: $ref: '#/components/schemas/ThreatResponse' summary: Details of the given batch of threat IDs description: Details of the given batch of threat IDs. Supports a maximum of 1000 IDs per request. operationId: BatchThreats security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/ObjectIdBatchRequest' required: true /v1/secops/infra_threats/list: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '403': description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/ListResponse' summary: Lists of threat IDs captured for cloud resources description: List of threat IDs captured for cloud resources. operationId: ListThreats security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/ThreatVulnerabilityRequest' required: true /v1/secops/infra_vulnerabilities/batch: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '403': description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: type: array description: List of vulnerability details items: $ref: '#/components/schemas/VulnerabilityResponse' summary: Details of the given batch of vulnerability IDs description: Details of the given batch of vulnerability IDs. Supports a maximum of 1000 IDs per request. operationId: BatchVulnerabilities@@@2 security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/ObjectIdBatchRequest' required: true /v1/secops/infra_vulnerabilities/list: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '403': description: Forbidden content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: $ref: '#/components/schemas/ListResponse' summary: List of vulnerability IDs captured for cloud resources description: List of vulnerability IDs captured for cloud resources. operationId: ListVulnerabilities security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/ThreatVulnerabilityRequest' required: true /v2/secops/dashboard/compliance/compliance_by_service_account: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: type: array items: $ref: '#/components/schemas/ComplianceServiceAccountSummary' summary: List Compliance summary by service accounts description: Compliance summary at Service Account level operationId: ComplianceServiceAccountSummary security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/ComplianceServiceAccountSummaryRequest' required: true /v2/secops/dashboard/compliance/compliance_by_tenant: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Success content: application/json: schema: type: array items: $ref: '#/components/schemas/ComplianceTenantSummary' summary: List Compliance summary by tenants description: Compliance summary at tenant level operationId: ComplianceTenantSummary security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/ComplianceTenantSummaryRequest' required: true /v2/security/executive_dashboard/access/by_cloud_account: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Fetched content: application/json: schema: type: array items: $ref: '#/components/schemas/SecurityDashboardViolationAccountDetails' summary: Get Access Violation by Cloud Account description: Security Dashboard Access Violations by Cloud Accounts operationId: accessViolationsByCloudAccount security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardRequest' required: true /v2/security/executive_dashboard/access/by_region: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Fetched content: application/json: schema: type: array items: $ref: '#/components/schemas/SecurityDashboardViolationByRegionCount' summary: Get Access Violation By Region description: Security Dashboard Access Violations by Region operationId: accessViolationsByRegion security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardRequest' required: true /v2/security/executive_dashboard/access/trend_by_severity: post: responses: '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/ModelError' '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/ModelError' '400': description: Bad Request content: application/json: schema: $ref: '#/components/schemas/ModelError' '200': description: Fetched content: application/json: schema: type: array items: $ref: '#/components/schemas/SecurityDashboardAccessViolationByTrend' summary: Get Access Violation trend by severity description: Security Dashboard Access Violation by Trend operationId: accessViolationsTrend security: - auth_token: [] tags: - Security requestBody: content: application/json: schema: $ref: '#/components/schemas/SecurityDashboardRequest' required: true components: schemas: ThreatVulnerabilityBaseResponse: properties: service_account_id: type: string description: ID of the service account to which the threat/vulnerability belongs to. x-cs-type: ObjectId cloud_provider: type: string description: Cloud Provider of the service account example: AWS enum: - AWS - Azure - AzureStack - Azure_CSP - Azure_CSP-Direct - Azure_EA - Azure_MCA - Cloudstack - GCP - MS_VMM - OCI - Openstack - PrivateCloud - Rackspace - VMware - VMware_VCD - vCenter x-cs-enum-type: CloudServiceName tenant_id: type: string description: Tenant ID where the service account belongs to x-cs-type: ObjectId resource_id: type: string description: ID of the resource where the threat/vulnerability is observed resource_name: type: string description: Name of the resource where the threat/vulnerability is observed resource_category: type: string description: Category of the resource to which the threat/vulnerability belongs to. resource_type: type: string description: Type of the resource to which the threat/vulnerability belongs to. resource: type: string description: Resource to which the threat/vulnerability belongs to. region: type: string description: Region the impacted resource is located in. location: type: string description: Location the impacted resource is located in. resource_group: type: string description: Resource Group of the resource to which the threat/vulnerability belongs to. severity: type: string description: Severity of the threat/vulnerability example: Critical enum: - Critical - High - Info - Low - Medium - None - Unknown x-cs-enum-type: Severity status: type: string description: Status of the threats/vulnerabilities example: active enum: - active - closed - inactive - resolved - skipped - suppressed x-cs-enum-type: ThreatVulnerabilityStatus source: type: string description: Source of the threat/vulnerability issue_type: type: string description: Issue Type of the threat/vulnerability provider_issue_id: type: string description: Unique id for threat/vulnerability as provided by the cloud provider title: type: string description: Title of the threat/vulnerability created_at: type: string format: date-time description: Date and time when the threat/vulnerability was created in corestack updated_at: type: string format: date-time description: Date and time when the threat/vulnerability was updated in corestack description: type: string description: Description of the threat/vulnerability detected_at: type: string format: date-time description: Date and time when the threat/vulnerability was detected recommendation: type: string description: Recommendation for the threat/vulnerability remediation: type: string description: Recommended remediation for the threat/vulnerability source_data: type: object description: Source data of the threat/vulnerability captured from the cloud. type: object SecurityInfraIssuesDashboardFilters: required: - tenant_id properties: tenant_id: type: string description: Tenant ID to filter the issues. This can be fetched from the List Tenants API call. x-cs-type: ObjectId query: description: Query based on Cloud Providers, Cloud Account Ids, Severities, ResourceCategories, ResourceTypes, Resources $ref: '#/components/schemas/QueryOperator' type: object InfraVulnerabilitiesTrendListFiltersSortCriteria: required: - column properties: column: type: string example: resource enum: - resource - severity - service_name - resource_id - status - resource_name - findings_id x-cs-enum-type: InfraVulnerabilitiesTrendListFiltersSortColumn ascending: type: boolean type: object InfraMisConfigurationsTrendListFiltersSortCriteria: required: - column properties: column: type: string example: resource enum: - resource - severity - service_name - resource_id - resource_name x-cs-enum-type: InfraMisConfigurationsTrendListFiltersSortColumn ascending: type: boolean type: object SecurityVulnerabilitySummaryMonthResponse: properties: summary_by_month: type: array description: Visibility of the vulnerabilities by Month items: $ref: '#/components/schemas/SecurityDashboardVulnerabilityMonth' type: object SecurityDashboardVulnerabilitySummaryAccountResponse: properties: summary_by_accounts: type: array description: Visibility of the vulnerabilities by Account items: $ref: '#/components/schemas/SecurityDashboardVulnerabilityAccountDetails' type: object SecurityInfraDashboardSummaryDetails: properties: cloud_provider: type: string description: Cloud Provider of the service account example: AWS enum: - AWS - Azure - AzureStack - Azure_CSP - Azure_CSP-Direct - Azure_EA - Azure_MCA - Cloudstack - GCP - MS_VMM - OCI - Openstack - PrivateCloud - Rackspace - VMware - VMware_VCD - vCenter x-cs-enum-type: CloudServiceName service_account_id: type: string description: ID of the service account to which the threat/vulnerability/misconfiguration belongs to. x-cs-type: ObjectId severity: type: string description: Severity values example: Critical enum: - Critical - High - Info - Low - Medium - None - Unknown x-cs-enum-type: Severity region: type: string description: Region the impacted resource is located in. resource_category: type: string description: Category of the resource to which the threat/vulnerability/misconfiguration belongs to. resource_type: type: string description: Type of the resource to which the threat/vulnerability/misconfiguration belongs to. resource_ids: type: array description: List of Resource ID(s) where the vulnerability/threat/misconfiguration is observed. items: type: string ids: type: array description: List of Unique ID(s) for vulnerability/threat/misconfiguration depending on the context. items: type: string x-cs-type: ObjectId type: object SecurityDashboardThreatsAccountDetails: properties: tenant_id: type: string description: Tenant value cloud_account_id: type: string description: Cloud Account value service_account_name: type: string description: Service Account Name cloud_provider: type: string description: Visibility for the Cloud Provider example: AWS enum: - AWS - Azure - AzureStack - Azure_CSP - Azure_CSP-Direct - Azure_EA - Azure_MCA - Cloudstack - GCP - MS_VMM - OCI - Openstack - PrivateCloud - Rackspace - VMware - VMware_VCD - vCenter x-cs-enum-type: CloudServiceName count_by_severity: description: Threats Severity Values $ref: '#/components/schemas/SecurityDashboardSeverity' type: object InfraVulnerabilitiesTrendSummaryRequest: allOf: - $ref: '#/components/schemas/InfraIssuesTimeRangeFilter' - properties: group_by: type: array description: Fields to group the infrastructure vulnerability results items: type: string description: Field to group the infrastructure vulnerability results example: severity enum: - severity x-cs-enum-type: InfraVulnerabilitiesTrendGroupBy filters: description: Filters applied to the issues trend data. $ref: '#/components/schemas/SecurityInfraIssuesDashboardFilters' type: object SecurityDashboardThreatsSummaryAccountResponse: properties: summary_by_accounts: type: array description: Visibility of the Threats by Account items: $ref: '#/components/schemas/SecurityDashboardThreatsAccountDetails' type: object InfraMisConfigurationsTrendListRequestFilters: allOf: - $ref: '#/components/schemas/InfraIssuesTimeRangeFilter' - properties: filters: description: Filters applied to the issues trend data. $ref: '#/components/schemas/SecurityInfraIssuesDashboardFilters' search: type: string description: Search text to filter the infrastructure misconfigurations based on resource name, resource id, service name, etc. type: object SecurityVisibilityResponse: required: - cloud_accounts - count_summary - findings_type - intent - resource_types properties: cloud_accounts: type: object description: Visibility of the findings by cloud_accounts findings_type: type: object description: Visibility of the findings by findings_type resource_types: type: object description: Visibility of the findings by resource_types intent: type: object description: Visibility of the findings by intent count_summary: type: object description: Visibility of the findings count_summary type: object SecurityPostureResponse: required: - cloud_account - page_count - service - total_count properties: service: type: object description: Service wise details of the security findings cloud_account: type: object description: Cloud Account wise details of the security findings total_count: type: integer description: Total count of cloud accounts page_count: type: integer description: Total number of page count type: object ObjectIdBatchRequest: properties: ids: type: array items: type: string x-cs-type: ObjectId type: object SecurityDashboardViolationAccountDetails: properties: tenant_id: type: string description: Tenant value cloud_account_id: type: string description: Cloud Account value service_account_name: type: string description: Service Account Name cloud_provider: type: string description: Visibility for the Cloud Provider example: AWS enum: - AWS - Azure - AzureStack - Azure_CSP - Azure_CSP-Direct - Azure_EA - Azure_MCA - Cloudstack - GCP - MS_VMM - OCI - Openstack - PrivateCloud - Rackspace - VMware - VMware_VCD - vCenter x-cs-enum-type: CloudServiceName count_by_severity: description: Severity Values $ref: '#/components/schemas/SecurityDashboardSeverity' type: object SecurityDashboardViolationsByResourceCategoryResponse: properties: summary_by_provider_category: type: array description: Visibility of the Config Violation by CloudProvider items: $ref: '#/components/schemas/SecurityDashboardViolationByResourceCategoryCount' type: object SecurityDashboardSeverity: properties: critical: type: integer description: Critical Total Count default: 0 high: type: integer description: High Total Count default: 0 medium: type: integer description: Medium Total Count default: 0 low: type: integer description: Low Total Count default: 0 none: type: integer description: None Total Count default: 0 info: type: integer description: Info Total Count default: 0 unknown: type: integer description: Unknown Total Count default: 0 type: object SecurityInfraDashboardSummaryRequest: allOf: - $ref: '#/components/schemas/SecurityInfraDashboardBaseFilters' - required: - group_by properties: group_by: type: array items: type: string description: Group by field to aggregate the summary data. example: Region enum: - Region - Service_Account - Resource_Category - Resource_Type - Severity x-cs-enum-type: SecurityInfraDashboardSummaryGroupBy type: object InfraIssuesTimeRangeFilter: required: - granularity - start_date properties: start_date: type: string format: date-time description: Start date of the time period end_date: type: string format: date-time description: End date of the time period granularity: type: string description: Granularity for aggregating issues trend data example: day enum: - day - month x-cs-enum-type: InfraIssuesTrendGranularity type: object SecurityDashboardVulnerabilityRegionValue: properties: region: type: string description: Visibility of Region Name vulnerabilityCount: type: integer description: Visibility of Vulnerability Count by region default: 0 type: object ComplianceServiceAccountSummaryRequest: properties: filters: description: Query based on Tenant IDs, Cloud Providers, Cloud Account Ids and Compliance URIs $ref: '#/components/schemas/QueryOperator' type: object ComplianceServiceAccountSummary: allOf: - $ref: '#/components/schemas/ComplianceTenantSummary' - properties: service_account_id: type: string x-cs-type: ObjectId type: object ThreatResponse: allOf: - $ref: '#/components/schemas/ThreatVulnerabilityBaseResponse' - properties: intent: type: array description: List of threat intents, representing the potential goals or purposes behind the threat, such as "Persistence", "CredentialAccess", or "DefenseEvasion". These help categorize and understand the threat behavior. items: type: string threat_id: type: string description: Unique identifier of the threat. x-cs-type: ObjectId type: object ThreatVulnerabilityRequest: properties: list_context: description: Optional list context $ref: '#/components/schemas/ListContext' sort: type: array description: Sort criteria items: $ref: '#/components/schemas/ThreatVulnerabilitiesFiltersRequestSortCriteria' filters: description: Filters for the request $ref: '#/components/schemas/ThreatVulnerabilityFilters' type: object ModelError: required: - message properties: message: type: string description: Error response message. type: object SecurityDashboardThreatSummaryMonthResponse: properties: summary_by_month: type: array description: Visibility of the Threats by Month items: $ref: '#/components/schemas/SecurityDashboardThreatsMonth' type: object SecurityDashboardViolationsByAccountResponse: properties: summary_by_accounts: type: array description: Visibility of the Violations by Account items: $ref: '#/components/schemas/SecurityDashboardViolationAccountDetails' type: object SecurityDashboardRequest: properties: filter: $ref: '#/components/schemas/SecurityDashboardAccountFilters' type: object InfraMisConfigurationsTrendSummary: properties: date: type: string format: date description: Date of the time period severity: type: string description: Severity of the misconfiguration example: critical enum: - critical - high - medium - low - informational x-cs-enum-type: MisconfigurationSeverity count: type: integer description: Count of misconfigurations for the given date and severity type: object InfraThreatsTrendListRequestFilters: allOf: - $ref: '#/components/schemas/InfraIssuesTimeRangeFilter' - properties: filters: description: Filters applied to the issues trend data. $ref: '#/components/schemas/SecurityInfraIssuesDashboardFilters' search: type: string description: Search text to filter the infrastructure threats based on resource name, resource id, service name, etc. type: object SecurityDashboardThreatsByRegionCount: properties: cloud_provider: type: string description: Visibility for the Cloud Provider example: AWS enum: - AWS - Azure - AzureStack - Azure_CSP - Azure_CSP-Direct - Azure_EA - Azure_MCA - Cloudstack - GCP - MS_VMM - OCI - Openstack - PrivateCloud - Rackspace - VMware - VMware_VCD - vCenter x-cs-enum-type: CloudServiceName region: type: string description: Threats Count by region name threat_count: type: integer description: Threats Total Count by region type: object SecurityDashboardVulnerabilityAccountDetails: required: - cloud_account_id - service_account_name - tenant_id properties: tenant_id: type: string description: Tenant value cloud_account_id: type: string description: Cloud Account value service_account_name: type: string description: Service Account Name cloud_provider: type: string description: Visibility for the Cloud Provider example: AWS enum: - AWS - Azure - AzureStack - Azure_CSP - Azure_CSP-Direct - Azure_EA - Azure_MCA - Cloudstack - GCP - MS_VMM - OCI - Openstack - PrivateCloud - Rackspace - VMware - VMware_VCD - vCenter x-cs-enum-type: CloudServiceName count_by_severity: description: Vulnerability Severity Values $ref: '#/components/schemas/SecurityDashboardSeverity' type: object ListContext: properties: batch_size: type: integer description: Max number of ids in the response batch_offset: type: integer description: Offset of batches into the results. First batch is 0 total: type: integer description: Total number of results type: object InfraThreatsTrendListFiltersSortCriteria: required: - column properties: column: type: string example: resource enum: - resource - severity - service_name - resource_id - status - resource_name x-cs-enum-type: InfraThreatsTrendListFiltersSortColumn ascending: type: boolean type: object ComplianceTenantSummary: properties: tenant_id: type: string x-cs-type: ObjectId compliance_uri: type: string logo: type: string description: File name of the logo associated with the compliance standard. control_status: type: array description: Compliance control status details items: $ref: '#/components/schemas/ComplianceControls' type: object SecurityDashboardViolationByRegionCount: properties: cloud_provider: type: string description: Visibility for the Cloud Provider example: AWS enum: - AWS - Azure - AzureStack - Azure_CSP - Azure_CSP-Direct - Azure_EA - Azure_MCA - Cloudstack - GCP - MS_VMM - OCI - Openstack - PrivateCloud - Rackspace - VMware - VMware_VCD - vCenter x-cs-enum-type: CloudServiceName region: type: string description: Config Violation Count by region name guardrail_violation_count: type: integer description: Violation Total Count by region type: object InfraVulnerabilitiesTrendListRequestFilters: allOf: - $ref: '#/components/schemas/InfraIssuesTimeRangeFilter' - properties: filters: description: Filters applied to the issues trend data. $ref: '#/components/schemas/SecurityInfraIssuesDashboardFilters' search: type: string description: Search text to filter the infrastructure vulnerabilities based on resource name, resource id, service name, etc. type: object SecurityDashboardThreatsByRegionResponse: properties: summary_by_cloudprovider: type: array description: Visibility of the threats by CloudProvider items: $ref: '#/components/schemas/SecurityDashboardThreatsByRegionCount' type: object InfraMisconfigurationTrendResponse: properties: items: type: array description: List of infra misconfiguration trend recommendation items items: $ref: '#/components/schemas/InfraMisConfiguration' next_list_context: description: Pagination context for the next batch $ref: '#/components/schemas/ListContext' type: object QueryOperator: required: - __type properties: {} discriminator: propertyName: __type type: object x-cs-subtypes: - subtype_model: QueryOperatorTrue subtype_name: QueryOperatorTrue - subtype_model: QueryOperatorFalse subtype_name: QueryOperatorFalse - subtype_model: QueryOperatorBinary subtype_name: QueryOperatorBinary - subtype_model: QueryOperatorBinaryLogic subtype_name: QueryOperatorBinaryLogic - subtype_model: QueryOperatorNary subtype_name: QueryOperatorNary - subtype_model: QueryOperatorNaryLogic subtype_name: QueryOperatorNaryLogic - subtype_model: QueryOperatorComparator subtype_name: QueryOperatorComparator - subtype_model: QueryOperatorComparatorLogic subtype_name: QueryOperatorComparatorLogic - subtype_model: QueryOperatorUnary subtype_name: QueryOperatorUnary - subtype_model: QueryOperatorUnaryNot subtype_name: QueryOperatorUnaryNot - subtype_model: QueryOperatorBinaryForGraph subtype_name: QueryOperatorBinaryForGraph - subtype_model: QueryOperatorBinaryLogicForGraph subtype_name: QueryOperatorBinaryLogicForGraph - subtype_model: QueryOperatorNaryForGraph subtype_name: QueryOperatorNaryForGraph - subtype_model: QueryOperatorNaryLogicForGraph subtype_name: QueryOperatorNaryLogicForGraph - subtype_model: QueryOperatorUnaryForGraph subtype_name: QueryOperatorUnaryForGraph - subtype_model: QueryOperatorUnaryNotForGraph subtype_name: QueryOperatorUnaryNotForGraph - subtype_model: ServiceAccountQueryOperator subtype_name: ServiceAccountQueryOperator - subtype_model: TenantQueryOperator subtype_name: TenantQueryOperator - subtype_model: DescendantServiceAccountQueryOperator subtype_name: DescendantServiceAccountQueryOperator - subtype_model: DescendantServiceAccountInTenantQueryOperator subtype_name: DescendantServiceAccountInTenantQueryOperator - subtype_model: TenantTagKeyQueryOperator subtype_name: TenantTagKeyQueryOperator - subtype_model: TenantTagKeyValueQueryOperator subtype_name: TenantTagKeyValueQueryOperator - subtype_model: LocationQueryOperator subtype_name: LocationQueryOperator - subtype_model: AvailabilityZoneQueryOperator subtype_name: AvailabilityZoneQueryOperator - subtype_model: BillingSourceQueryOperator subtype_name: BillingSourceQueryOperator - subtype_model: CurrencyQueryOperator subtype_name: CurrencyQueryOperator - subtype_model: ProductCategoryQueryOperator subtype_name: ProductCategoryQueryOperator - subtype_model: ProductFamilyQueryOperator subtype_name: ProductFamilyQueryOperator - subtype_model: ProductServiceCodeQueryOperator subtype_name: ProductServiceCodeQueryOperator - subtype_model: ProductSkuQueryOperator subtype_name: ProductSkuQueryOperator - subtype_model: PublisherQueryOperator subtype_name: PublisherQueryOperator - subtype_model: ResourceCategoryQueryOperator subtype_name: ResourceCategoryQueryOperator - subtype_model: ResourceIdQueryOperator subtype_name: ResourceIdQueryOperator - subtype_model: ResourceGroupQueryOperator subtype_name: ResourceGroupQueryOperator - subtype_model: ResourceNameQueryOperator subtype_name: ResourceNameQueryOperator - subtype_model: ResourceOperationQueryOperator subtype_name: ResourceOperationQueryOperator - subtype_model: ResourceQueryExtraPresence subtype_name: ResourceQueryExtraPresence - subtype_model: ResourceQueryExtraKey subtype_name: ResourceQueryExtraKey - subtype_model: ScopeContainsTenantQueryOperator subtype_name: ScopeContainsTenantQueryOperator - subtype_model: ScopeContainsServiceAccountQueryOperator subtype_name: ScopeContainsServiceAccountQueryOperator - subtype_model: ScopeIsQueryOperator subtype_name: ScopeIsQueryOperator - subtype_model: ServiceCategoryQueryOperator subtype_name: ServiceCategoryQueryOperator - subtype_model: ServiceTypeQueryOperator subtype_name: ServiceTypeQueryOperator - subtype_model: CompartmentNameQueryOperator subtype_name: CompartmentNameQueryOperator - subtype_model: ResourceQueryExtraKeyValue subtype_name: ResourceQueryExtraKeyValue - subtype_model: WorkFlowIdQueryOperator subtype_name: WorkFlowIdQueryOperator - subtype_model: RecommendationSubClassificationQueryOperator subtype_name: RecommendationSubClassificationQueryOperator - subtype_model: ServiceNowCmdbQuerySyncLogResourceId subtype_name: ServiceNowCmdbQuerySyncLogResourceId - subtype_model: ServiceNowCmdbQuerySyncLogResourceType subtype_name: ServiceNowCmdbQuerySyncLogResourceType - subtype_model: ServiceNowCmdbQuerySyncLogAction subtype_name: ServiceNowCmdbQuerySyncLogAction - subtype_model: ServiceNowCmdbQuerySyncLogStatus subtype_name: ServiceNowCmdbQuerySyncLogStatus - subtype_model: ServiceNowCmdbQuerySyncLogService subtype_name: ServiceNowCmdbQuerySyncLogService - subtype_model: ServiceAccountNativeDetailsQueryOperator subtype_name: ServiceAccountNativeDetailsQueryOperator - subtype_model: ServiceAccountStatusQueryOperator subtype_name: ServiceAccountStatusQueryOperator - subtype_model: ServiceAccountTagKeyQueryOperator subtype_name: ServiceAccountTagKeyQueryOperator - subtype_model: ServiceAccountTagKeyRegexQueryOperator subtype_name: ServiceAccountTagKeyRegexQueryOperator - subtype_model: ServiceAccountTagKeyValueQueryOperator subtype_name: ServiceAccountTagKeyValueQueryOperator - subtype_model: ApplicableHealthMetricsQueryOperator subtype_name: ApplicableHealthMetricsQueryOperator - subtype_model: EpssScoreRangeQueryOperator subtype_name: EpssScoreRangeQueryOperator - subtype_model: CvssMetricScoreRangeQueryOperator subtype_name: CvssMetricScoreRangeQueryOperator - subtype_model: GraphionScoreRangeQueryOperator subtype_name: GraphionScoreRangeQueryOperator - subtype_model: AppSecopsApplicationIdQueryOperator subtype_name: AppSecopsApplicationIdQueryOperator - subtype_model: AppSecopsPortfolioIdQueryOperator subtype_name: AppSecopsPortfolioIdQueryOperator - subtype_model: AppSecopsProjectIdQueryOperator subtype_name: AppSecopsProjectIdQueryOperator - subtype_model: AppSecopsSbomComponentIdQueryOperator subtype_name: AppSecopsSbomComponentIdQueryOperator - subtype_model: AppSecopsSbomVersionIdQueryOperator subtype_name: AppSecopsSbomVersionIdQueryOperator - subtype_model: AppSecopsComponentProductQueryOperator subtype_name: AppSecopsComponentProductQueryOperator - subtype_model: AppSecopsSbomComponentTypeQueryOperator subtype_name: AppSecopsSbomComponentTypeQueryOperator - subtype_model: AppSecopsSbomVersionSubmittedByQueryOperator subtype_name: AppSecopsSbomVersionSubmittedByQueryOperator - subtype_model: AppSecopsSbomVersionSubmittedDateQueryOperator subtype_name: AppSecopsSbomVersionSubmittedDateQueryOperator - subtype_model: AppSecopsSbomVersionBuildIdQueryOperator subtype_name: AppSecopsSbomVersionBuildIdQueryOperator - subtype_model: AppSecopsSbomNameQueryOperator subtype_name: AppSecopsSbomNameQueryOperator - subtype_model: AppSecopsCveIdQueryOperator subtype_name: AppSecopsCveIdQueryOperator - subtype_model: AppSecopsEpssScoreQueryOperator subtype_name: AppSecopsEpssScoreQueryOperator - subtype_model: AppSecopsCvssScoreQueryOperator subtype_name: AppSecopsCvssScoreQueryOperator - subtype_model: AppSecopsGraphionScoreQueryOperator subtype_name: AppSecopsGraphionScoreQueryOperator - subtype_model: SecopsVulnerabilitySeverityQueryOperator subtype_name: SecopsVulnerabilitySeverityQueryOperator - subtype_model: AppSecopsIsKnownExploitedVulnerabilityQueryOperator subtype_name: AppSecopsIsKnownExploitedVulnerabilityQueryOperator - subtype_model: AppSecopsVulnerabilityExploitabilityMetricAttackVectorV31QueryOperator subtype_name: AppSecopsVulnerabilityExploitabilityMetricAttackVectorV31QueryOperator - subtype_model: AppSecopsFixAvailableQueryOperator subtype_name: AppSecopsFixAvailableQueryOperator - subtype_model: AppSecopsVulnerabilityExploitabilityMetricAttackComplexityV31QueryOperator subtype_name: AppSecopsVulnerabilityExploitabilityMetricAttackComplexityV31QueryOperator - subtype_model: AppSecopsVulnerabilityExploitabilityMetricPrivilegesRequiredV31QueryOperator subtype_name: AppSecopsVulnerabilityExploitabilityMetricPrivilegesRequiredV31QueryOperator - subtype_model: AppSecopsVulnerabilityExploitabilityMetricScopeV31QueryOperator subtype_name: AppSecopsVulnerabilityExploitabilityMetricScopeV31QueryOperator - subtype_model: AppSecopsVulnerabilityExploitabilityUserInteractionV31QueryOperator subtype_name: AppSecopsVulnerabilityExploitabilityUserInteractionV31QueryOperator - subtype_model: AppSecopsVulnerabilityImpactMetricConfidentialityImpactV31QueryOperator subtype_name: AppSecopsVulnerabilityImpactMetricConfidentialityImpactV31QueryOperator - subtype_model: AppSecopsVulnerabilityImpactMetricIntegrityImpactV31QueryOperator subtype_name: AppSecopsVulnerabilityImpactMetricIntegrityImpactV31QueryOperator - subtype_model: AppSecopsVulnerabilityImpactMetricAvailabilityImpactV31QueryOperator subtype_name: AppSecopsVulnerabilityImpactMetricAvailabilityImpactV31QueryOperator - subtype_model: AppSecopsContainerFindingsSBOMVersionIdsQueryOperator subtype_name: AppSecopsContainerFindingsSBOMVersionIdsQueryOperator - subtype_model: AppSecopsContainerFindingsCategoryQueryOperator subtype_name: AppSecopsContainerFindingsCategoryQueryOperator - subtype_model: AppSecopsContainerFindingsExecutionPhaseQueryOperator subtype_name: AppSecopsContainerFindingsExecutionPhaseQueryOperator - subtype_model: AppSecopsContainerFindingsSeverityQueryOperator subtype_name: AppSecopsContainerFindingsSeverityQueryOperator - subtype_model: AppSecopsContainerFindingsStatusQueryOperator subtype_name: AppSecopsContainerFindingsStatusQueryOperator - subtype_model: DimensionSourceQueryOperator subtype_name: DimensionSourceQueryOperator - subtype_model: DimensionQueryOperator subtype_name: DimensionQueryOperator - subtype_model: ResourceTypeQueryOperator subtype_name: ResourceTypeQueryOperator - subtype_model: PodIdRegexQueryOperator subtype_name: PodIdRegexQueryOperator - subtype_model: PodNameRegexQueryOperator subtype_name: PodNameRegexQueryOperator - subtype_model: ContainerIdRegexQueryOperator subtype_name: ContainerIdRegexQueryOperator - subtype_model: PodNamesQueryOperator subtype_name: PodNamesQueryOperator - subtype_model: PodIdsQueryOperator subtype_name: PodIdsQueryOperator - subtype_model: UtilizationTypeQueryOperator subtype_name: UtilizationTypeQueryOperator - subtype_model: ResourceIdRegexQueryOperator subtype_name: ResourceIdRegexQueryOperator - subtype_model: ResourceNameRegexQueryOperator subtype_name: ResourceNameRegexQueryOperator - subtype_model: ExtrasValueRegexQueryOperator subtype_name: ExtrasValueRegexQueryOperator - subtype_model: TagKeyValueRegexQueryOperator subtype_name: TagKeyValueRegexQueryOperator - subtype_model: ResourceQueryTagKeyKind subtype_name: ResourceQueryTagKeyKind - subtype_model: ResourceQueryTagKeyValuesKind subtype_name: ResourceQueryTagKeyValuesKind - subtype_model: TagKeyStringValueRegexQueryOperator subtype_name: TagKeyStringValueRegexQueryOperator - subtype_model: TagKindStringKeyRegexQueryOperator subtype_name: TagKindStringKeyRegexQueryOperator - subtype_model: ServiceAccountNameRegexQueryOperator subtype_name: ServiceAccountNameRegexQueryOperator - subtype_model: TenantNameRegexQueryOperator subtype_name: TenantNameRegexQueryOperator - subtype_model: PlatFormAccountQueryOperator subtype_name: PlatFormAccountQueryOperator - subtype_model: BillingLineItemTypeQueryOperator subtype_name: BillingLineItemTypeQueryOperator - subtype_model: BillingEntityQueryOperator subtype_name: BillingEntityQueryOperator - subtype_model: LineItemDescriptionQueryOperator subtype_name: LineItemDescriptionQueryOperator - subtype_model: LineItemDescriptionRegexQueryOperator subtype_name: LineItemDescriptionRegexQueryOperator - subtype_model: MeterSubCategoryQueryOperator subtype_name: MeterSubCategoryQueryOperator - subtype_model: PricingCategoryQueryOperator subtype_name: PricingCategoryQueryOperator - subtype_model: PricingPurchaseOptionQueryOperator subtype_name: PricingPurchaseOptionQueryOperator - subtype_model: TagKeyRegexQueryOperator subtype_name: TagKeyRegexQueryOperator - subtype_model: BillingLineItemTypeRegexQueryOperator subtype_name: BillingLineItemTypeRegexQueryOperator - subtype_model: ResourceGroupRegexQueryOperator subtype_name: ResourceGroupRegexQueryOperator - subtype_model: ResourceCategoryRegexQueryOperator subtype_name: ResourceCategoryRegexQueryOperator - subtype_model: ProductCategoryRegexQueryOperator subtype_name: ProductCategoryRegexQueryOperator - subtype_model: BillingEntityRegexQueryOperator subtype_name: BillingEntityRegexQueryOperator - subtype_model: ResourceOperationRegexQueryOperator subtype_name: ResourceOperationRegexQueryOperator - subtype_model: ResourceQueryFieldPresence subtype_name: ResourceQueryFieldPresence - subtype_model: AssessmentRunReportDetailQuerySection subtype_name: AssessmentRunReportDetailQuerySection - subtype_model: AssessmentRunReportSummaryQuerySection subtype_name: AssessmentRunReportSummaryQuerySection - subtype_model: AssessmentQueryAssessmentName subtype_name: AssessmentQueryAssessmentName - subtype_model: AssessmentQueryAssessmentOwner subtype_name: AssessmentQueryAssessmentOwner - subtype_model: AssessmentQueryAssessmentApprover subtype_name: AssessmentQueryAssessmentApprover - subtype_model: AssessmentQueryWorkload subtype_name: AssessmentQueryWorkload - subtype_model: AssessmentQueryFramework subtype_name: AssessmentQueryFramework - subtype_model: AssessmentQueryPillar subtype_name: AssessmentQueryPillar - subtype_model: AssessmentViewQueryNature subtype_name: AssessmentViewQueryNature - subtype_model: AssessmentViewQueryQuestionRisk subtype_name: AssessmentViewQueryQuestionRisk - subtype_model: AssessmentViewQueryBestPracticeRisk subtype_name: AssessmentViewQueryBestPracticeRisk - subtype_model: AssessmentViewQueryQuestionStatus subtype_name: AssessmentViewQueryQuestionStatus - subtype_model: AssessmentViewQueryBestPracticeStatus subtype_name: AssessmentViewQueryBestPracticeStatus - subtype_model: AssessmentViewQueryOwner subtype_name: AssessmentViewQueryOwner - subtype_model: AssessmentViewQueryAssignedTo subtype_name: AssessmentViewQueryAssignedTo - subtype_model: AssessmentViewQueryComment subtype_name: AssessmentViewQueryComment - subtype_model: AssessmentReportQueryAssessmentName subtype_name: AssessmentReportQueryAssessmentName - subtype_model: AssessmentReportQueryFramework subtype_name: AssessmentReportQueryFramework - subtype_model: AssessmentReportQueryReportType subtype_name: AssessmentReportQueryReportType - subtype_model: AssessmentReportQueryWorkloadId subtype_name: AssessmentReportQueryWorkloadId - subtype_model: ScheduleQueryName subtype_name: ScheduleQueryName - subtype_model: ScheduleQueryCreatedBy subtype_name: ScheduleQueryCreatedBy - subtype_model: ScheduleQueryEmailRecipients subtype_name: ScheduleQueryEmailRecipients - subtype_model: ScheduleQueryRecurrence subtype_name: ScheduleQueryRecurrence - subtype_model: ScheduleQueryReportType subtype_name: ScheduleQueryReportType - subtype_model: ScheduleQueryNextGenReportType subtype_name: ScheduleQueryNextGenReportType - subtype_model: ScheduleQueryAssessmentAgentReportType subtype_name: ScheduleQueryAssessmentAgentReportType - subtype_model: AutomationTemplateQueryEngineType subtype_name: AutomationTemplateQueryEngineType - subtype_model: AutomationTemplateQueryRepoType subtype_name: AutomationTemplateQueryRepoType - subtype_model: AutomationTemplateQueryService subtype_name: AutomationTemplateQueryService - subtype_model: AutomationTemplateQueryTenant subtype_name: AutomationTemplateQueryTenant - subtype_model: AwsSecurityHubFindingQueryLocation subtype_name: AwsSecurityHubFindingQueryLocation - subtype_model: AwsSecurityHubFindingQuerySeverity subtype_name: AwsSecurityHubFindingQuerySeverity - subtype_model: AwsSecurityHubFindingQueryProductName subtype_name: AwsSecurityHubFindingQueryProductName - subtype_model: AwsSecurityHubFindingQueryResource subtype_name: AwsSecurityHubFindingQueryResource - subtype_model: AwsSecurityHubFindingQueryCloudAccount subtype_name: AwsSecurityHubFindingQueryCloudAccount - subtype_model: AwsSecurityHubFindingQueryRecordState subtype_name: AwsSecurityHubFindingQueryRecordState - subtype_model: AwsSsmDocumentQueryCloudAccount subtype_name: AwsSsmDocumentQueryCloudAccount - subtype_model: AwsSsmDocumentQueryRegion subtype_name: AwsSsmDocumentQueryRegion - subtype_model: AwsSsmDocumentQueryOwner subtype_name: AwsSsmDocumentQueryOwner - subtype_model: AwsSsmDocumentQueryCategory subtype_name: AwsSsmDocumentQueryCategory - subtype_model: AwsSsmDocumentQueryStatus subtype_name: AwsSsmDocumentQueryStatus - subtype_model: AwsSsmDocumentQueryName subtype_name: AwsSsmDocumentQueryName - subtype_model: AwsSsmDocumentQueryExecutedBy subtype_name: AwsSsmDocumentQueryExecutedBy - subtype_model: ComplianceURIQueryOperator subtype_name: ComplianceURIQueryOperator - subtype_model: DurationInMonthsQueryOperator subtype_name: DurationInMonthsQueryOperator - subtype_model: UniqueIdQueryOperator subtype_name: UniqueIdQueryOperator - subtype_model: ThreatVulnerabilityStatusQueryOperator subtype_name: ThreatVulnerabilityStatusQueryOperator - subtype_model: ThreatVulnerabilitySeverityQueryOperator subtype_name: ThreatVulnerabilitySeverityQueryOperator - subtype_model: ThreatVulnerabilityIssueTypeQueryOperator subtype_name: ThreatVulnerabilityIssueTypeQueryOperator - subtype_model: ThreatIntentQueryOperator subtype_name: ThreatIntentQueryOperator - subtype_model: VulnerabilityReferenceIdQueryOperator subtype_name: VulnerabilityReferenceIdQueryOperator - subtype_model: CostAnomalyStatusQueryOperator subtype_name: CostAnomalyStatusQueryOperator - subtype_model: CurrencyExchangeConfigurationQuerySourceCurrency subtype_name: CurrencyExchangeConfigurationQuerySourceCurrency - subtype_model: CurrencyExchangeConfigurationQueryTargetCurrency subtype_name: CurrencyExchangeConfigurationQueryTargetCurrency - subtype_model: CurrencyExchangeConfigurationQueryScope subtype_name: CurrencyExchangeConfigurationQueryScope - subtype_model: MetricValuesOperator subtype_name: MetricValuesOperator - subtype_model: PatchReadinessStatusQueryOperator subtype_name: PatchReadinessStatusQueryOperator - subtype_model: MasterAccountBillingQueryMasterAccounts subtype_name: MasterAccountBillingQueryMasterAccounts - subtype_model: MasterAccountBillingQueryTenants subtype_name: MasterAccountBillingQueryTenants - subtype_model: MasterAccountBillingQueryUsers subtype_name: MasterAccountBillingQueryUsers - subtype_model: MasterAccountBillingQueryConversations subtype_name: MasterAccountBillingQueryConversations - subtype_model: MasterAccountBillingQueryTransactionType subtype_name: MasterAccountBillingQueryTransactionType - subtype_model: PolicyResourceRecommendationStatusQueryOperator subtype_name: PolicyResourceRecommendationStatusQueryOperator - subtype_model: PolicyResourceRecommendationPolicyIdsQueryOperator subtype_name: PolicyResourceRecommendationPolicyIdsQueryOperator - subtype_model: PolicyResourceRecommendationSeverityQueryOperator subtype_name: PolicyResourceRecommendationSeverityQueryOperator - subtype_model: PolicyRecommendationClassificationQueryOperator subtype_name: PolicyRecommendationClassificationQueryOperator - subtype_model: InfraResourceTrendResourceChangeStatusQueryOperator subtype_name: InfraResourceTrendResourceChangeStatusQueryOperator - subtype_model: VmAgentsQueryOsTypes subtype_name: VmAgentsQueryOsTypes - subtype_model: VmAgentsQueryInstantState subtype_name: VmAgentsQueryInstantState - subtype_model: VmAgentsQueryQualysStatus subtype_name: VmAgentsQueryQualysStatus - subtype_model: VmAgentsQueryCrowdStrikeStatus subtype_name: VmAgentsQueryCrowdStrikeStatus - subtype_model: VmAgentsQuerySplunkStatus subtype_name: VmAgentsQuerySplunkStatus - subtype_model: StacksMarketplaceStackQueryArchived subtype_name: StacksMarketplaceStackQueryArchived - subtype_model: StacksMarketplaceStackQueryAutoApproved subtype_name: StacksMarketplaceStackQueryAutoApproved - subtype_model: StacksMarketplaceStackQueryOwner subtype_name: StacksMarketplaceStackQueryOwner - subtype_model: StacksMarketplaceStackQueryName subtype_name: StacksMarketplaceStackQueryName - subtype_model: StacksMarketplaceStackQueryProduct subtype_name: StacksMarketplaceStackQueryProduct - subtype_model: StacksMarketplaceDeploymentQueryName subtype_name: StacksMarketplaceDeploymentQueryName - subtype_model: StacksMarketplaceDeploymentQueryStack subtype_name: StacksMarketplaceDeploymentQueryStack - subtype_model: StacksMarketplaceDeploymentQueryAccount subtype_name: StacksMarketplaceDeploymentQueryAccount - subtype_model: StacksMarketplaceDeploymentQueryRegion subtype_name: StacksMarketplaceDeploymentQueryRegion - subtype_model: StacksMarketplaceStackDeploymentQueryExecutionStatus subtype_name: StacksMarketplaceStackDeploymentQueryExecutionStatus - subtype_model: MetricNameQueryOperator subtype_name: MetricNameQueryOperator - subtype_model: ResourceQueryCategory subtype_name: ResourceQueryCategory - subtype_model: ResourceQueryLocation subtype_name: ResourceQueryLocation - subtype_model: ResourceQueryResource subtype_name: ResourceQueryResource - subtype_model: ResourceQueryResourceGroup subtype_name: ResourceQueryResourceGroup - subtype_model: ResourceQueryResourceName subtype_name: ResourceQueryResourceName - subtype_model: ResourceQueryResourceType subtype_name: ResourceQueryResourceType - subtype_model: ResourceQueryTagPresence subtype_name: ResourceQueryTagPresence - subtype_model: ResourceQueryTagKey subtype_name: ResourceQueryTagKey - subtype_model: ResourceQueryTagKeyValue subtype_name: ResourceQueryTagKeyValue - subtype_model: WorkloadQueryWorkloadName subtype_name: WorkloadQueryWorkloadName - subtype_model: WorkloadQueryWorkloadOwner subtype_name: WorkloadQueryWorkloadOwner - subtype_model: WorkloadQueryCloud subtype_name: WorkloadQueryCloud - subtype_model: WorkloadQueryCloudAccount subtype_name: WorkloadQueryCloudAccount - subtype_model: WorkloadQueryWorkloadType subtype_name: WorkloadQueryWorkloadType - subtype_model: WorkloadQueryWorkloadId subtype_name: WorkloadQueryWorkloadId SecurityDashboardVulnerabilityRegionCount: properties: cloud_provider: type: string description: Visibility for the Cloud Provider example: AWS enum: - AWS - Azure - AzureStack - Azure_CSP - Azure_CSP-Direct - Azure_EA - Azure_MCA - Cloudstack - GCP - MS_VMM - OCI - Openstack - PrivateCloud - Rackspace - VMware - VMware_VCD - vCenter x-cs-enum-type: CloudServiceName count_by_regions: type: array description: Vulnerability Count by region items: $ref: '#/components/schemas/SecurityDashboardVulnerabilityRegionValue' type: object ComplianceControls: properties: month: type: string total_controls: type: integer description: Total number of controls automated_controls: type: integer description: Total number of automated controls assessed_controls: type: integer description: Total number of assessed controls success: type: integer description: Total number of compliance controls violations: type: integer description: Total number of non-compliance controls errors: type: integer description: Total number of controls with error type: object InfraMisConfigurationsTrendSummaryRequest: allOf: - $ref: '#/components/schemas/InfraIssuesTimeRangeFilter' - properties: group_by: type: array description: Fields to group the infrastructure misconfigurations results items: type: string description: Field to group the infrastructure misconfigurations results example: severity enum: - severity x-cs-enum-type: InfraMisConfigurationsTrendGroupBy filters: description: Filters applied to the issues trend data. $ref: '#/components/schemas/SecurityInfraIssuesDashboardFilters' type: object SecurityDashboardViolationByResourceCategoryCount: properties: cloud_account_id: type: string description: Cloud Account ID resource_category: type: string description: Name of Resource Category guardrail_violation_count: type: integer description: Violation Total Count by Resource Category resource_count: type: integer description: Total Resource Count type: object ListResponse: properties: results: type: array description: List of result identifiers items: type: string next_list_context: description: List context $ref: '#/components/schemas/ListContext' type: object InfraThreatsTrendListRequest: properties: list_context: description: Optional list context $ref: '#/components/schemas/ListContext' sort: type: array description: Sort criteria items: $ref: '#/components/schemas/InfraThreatsTrendListFiltersSortCriteria' filters: description: Filters for the request $ref: '#/components/schemas/InfraThreatsTrendListRequestFilters' type: object SecurityDashboardVulnerabilitySummaryRegionResponse: properties: summary_by_cloudprovider: type: array description: Visibility of the vulnerabilities by Account items: $ref: '#/components/schemas/SecurityDashboardVulnerabilityRegionCount' type: object ThreatVulnerabilitiesFiltersRequestSortCriteria: required: - column properties: column: type: string example: resource enum: - resource - severity - service_name - status - findings_id - resource_id - resource_name x-cs-enum-type: ThreatVulnerabilitiesFiltersRequestSortColumn ascending: type: boolean type: object SecurityDashboardThreatsByResourceCategoryResponse: properties: summary_by_provider_category: type: array description: Visibility of the threats by CloudProvider items: $ref: '#/components/schemas/SecurityDashboardThreatsByResourceCategoryCount' type: object SecurityDashboardAccessViolationByTrend: properties: month: type: string format: date description: Access Violation Month count_by_severity: description: Access Violations Severity Values $ref: '#/components/schemas/SecurityDashboardSeverity' type: object SecurityDashboardAccountFilters: properties: tenants: type: array description: Specify the tenant ID. This is a unique ID and can be retrieved using the List Tenants API. items: type: string clouds: type: array description: Define the Cloud Providers to include. items: type: string description: Cloud Provider to select example: AWS enum: - AWS - Azure - AzureStack - Azure_CSP - Azure_CSP-Direct - Azure_EA - Azure_MCA - Cloudstack - GCP - MS_VMM - OCI - Openstack - PrivateCloud - Rackspace - VMware - VMware_VCD - vCenter x-cs-enum-type: CloudServiceName cloud_accounts: type: array description: Specify the Cloud Account IDs. items: type: string type: object SecurityDashboardConfigViolationMonth: properties: month: type: string format: date description: Config Violation Month count_by_severity: description: Config Violations Severity Values $ref: '#/components/schemas/SecurityDashboardSeverity' type: object InfraVulnerabilitiesTrendListRequest: properties: list_context: description: Optional list context $ref: '#/components/schemas/ListContext' sort: type: array description: Sort criteria items: $ref: '#/components/schemas/InfraVulnerabilitiesTrendListFiltersSortCriteria' filters: description: Filters for the request $ref: '#/components/schemas/InfraVulnerabilitiesTrendListRequestFilters' type: object InfraThreatsTrendSummaryRequest: allOf: - $ref: '#/components/schemas/InfraIssuesTimeRangeFilter' - properties: group_by: type: array description: Fields to group the infrastructure threat result items: type: string description: Field to group the infrastructure threat results example: severity enum: - severity x-cs-enum-type: InfraThreatsTrendGroupBy filters: description: Filters applied to the issues trend data. $ref: '#/components/schemas/SecurityInfraIssuesDashboardFilters' type: object SecurityDashboardViolationsByMonthResponse: properties: summary_by_month: type: array description: Visibility of the Threats by Month items: $ref: '#/components/schemas/SecurityDashboardConfigViolationMonth' type: object SecurityInfraDashboardBaseFilters: required: - tenant_ids properties: tenant_ids: type: array description: List of Tenant IDs to filter the threats/vulnerabilities. This can be fetched from the List Tenants API call. items: type: string x-cs-type: ObjectId filters: description: Query based on Cloud Providers, Cloud Account Ids, Statuses, Severities, ResourceCategories, ResourceTypes, Resources, Resource ID(s) $ref: '#/components/schemas/QueryOperator' type: object SecurityPostureTenantResponse: required: - page_count - tenants - total_count properties: page_count: type: integer description: Total number of page count tenants: type: object description: Tenant wise count details total_count: type: integer description: Number of Tenants type: object InfraThreatsTrendSummary: properties: date: type: string format: date description: Date of the time period severity: type: string description: Severity of the threat example: Critical enum: - Critical - High - Info - Low - Medium - None - Unknown x-cs-enum-type: Severity count: type: integer description: Count of threats for the given date and severity type: object VulnerabilityResponse: allOf: - $ref: '#/components/schemas/ThreatVulnerabilityBaseResponse' - properties: vulnerability_id: type: string description: Unique identifier of the vulnerability. x-cs-type: ObjectId vulnerability_reference_id: type: string description: Reference identifier to master vulnerability source. x-cs-type: ObjectId type: object InfraMisConfigurationsTrendListRequest: properties: list_context: description: Optional list context $ref: '#/components/schemas/ListContext' sort: type: array description: Sort criteria items: $ref: '#/components/schemas/InfraMisConfigurationsTrendListFiltersSortCriteria' filters: description: Filters for the request $ref: '#/components/schemas/InfraMisConfigurationsTrendListRequestFilters' type: object SecurityDashboardVulnerabilityMonth: properties: month: type: string description: Vulnerability Month count_by_severity: description: Vulnerability Severity Values $ref: '#/components/schemas/SecurityDashboardSeverity' type: object SecurityDashboardThreatsMonth: properties: month: type: string format: date description: Threats Month count_by_severity: description: Threats Severity Values $ref: '#/components/schemas/SecurityDashboardSeverity' type: object SecurityDashboardThreatsByResourceCategoryCount: properties: cloud_account_id: type: string description: Cloud Account Id resource_category: type: string description: Name of the Resource Category threat_count: type: integer description: Threats Total Count by resource category resource_count: type: integer description: Total Count by Resource type: object InfraMisConfiguration: properties: snapshot_date: type: string format: date-time description: Snapshot date of the recommendation (YYYY-MM-DD format) status: type: string description: Status of the policy resource recommendation example: error enum: - error - in_progress - open - resolved - skipped - system_skipped x-cs-enum-type: PolicyResourceRecommendationStatus count: type: integer description: Count value (0 for deleted, 1 for active) policy_id: type: string description: Policy ID associated with the recommendation x-cs-type: ObjectId recommendation_definition_id: type: string description: Recommendation definition ID x-cs-type: ObjectId created_at: type: string format: date-time description: Timestamp when the recommendation was created service_account_id: type: string description: Cloud provider name x-cs-type: ObjectId resource_id: type: string description: Unique ID of the resource resource: type: string description: Resource identifier resource_name: type: string description: Name of the resource region: type: string description: Region of the resource resource_type: type: string description: Type of the resource resource_category: type: string description: Category of the resource resource_group: type: string description: Resource group of the resource current_sku: type: string description: Current SKU (cost recommendations only) recommended_sku: type: string description: Recommended SKU (cost recommendations only) currency: type: string description: Currency code (cost recommendations only) example: AED enum: - AED - ALL - ARS - AUD - BAM - BDT - BGN - BHD - BRL - CAD - CHF - CLP - CNY - COP - CRC - CZK - DKK - EGP - EUR - GBP - HKD - HRK - HUF - IDR - ILS - INR - ISK - JPY - KES - KRW - KWD - KZT - MOP - MVR - MXN - MYR - NOK - NZD - OMR - PEN - PHP - PKR - PLN - QAR - RON - RSD - RUB - SAR - SEK - SGD - THB - TRY - TWD - USD - VND - ZAR x-cs-enum-type: Currency saving_per_day: type: number description: Estimated daily cost savings(cost recommendations only) saving_per_month: type: number description: Estimated monthly cost saving(cost recommendations only) saving_per_year: type: number description: Estimated yearly cost saving(cost recommendations only) type: object ThreatVulnerabilityFilters: allOf: - $ref: '#/components/schemas/SecurityInfraDashboardBaseFilters' - properties: search: type: string description: Search text to filter the threats/vulnerabilities based on Resource Name, Resource ID, Findings ID type: object InfraVulnerabilitiesTrendSummary: properties: date: type: string format: date description: Date of the time period severity: type: string description: Severity of the Vulnerability example: Critical enum: - Critical - High - Info - Low - Medium - None - Unknown x-cs-enum-type: Severity count: type: integer description: Count of vulnerabilities for the given date and severity type: object SecurityDashboardViolationsByRegionResponse: properties: summary_by_cloudprovider: type: array description: Visibility of the Config Violation by CloudProvider items: $ref: '#/components/schemas/SecurityDashboardViolationByRegionCount' type: object ComplianceTenantSummaryRequest: properties: filters: description: Query based on Tenant IDs, Cloud Providers, Cloud Account Ids, Compliance URIs and Duration $ref: '#/components/schemas/QueryOperator' type: object SecurityVulnerabilityResponse: required: - cloud_accounts - count_summary - findings_type - resource_types properties: findings_type: type: object description: Visibility of the vulnerabilities by findings_type resource_types: type: object description: Visibility of the vulnerabilities by resource_types cloud_accounts: type: object description: Visibility of the vulnerabilities by cloud_accounts count_summary: type: object description: Visibility of the vulnerabilities by count_summary type: object securitySchemes: auth_token: type: apiKey in: header name: X-Auth-Token