openapi: 3.2.0
info:
  title: CoreStack External Service Account Governance API
  version: 1.0.0
  termsOfService: http://corestack.io/
  license:
    name: CoreStack Inc License
    url: http://corestack.io/licenses/LICENSE-2.0.html
  description: Manage Service Accounts
servers:
- url: /
tags:
- name: Service Account Governance
  description: Manage Service Accounts
paths:
  /v2/service_account/batch:
    post:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Fetched
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceAccountBatchResponse'
      summary: Batch Service Account Details
      description: Retrieve the Service Account details for the specified ids
      operationId: BatchServiceAccount
      security:
      - auth_token: []
      tags:
      - Service Account Governance
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ServiceAccountBatchRequest'
        required: true
  /v2/service_account/create:
    post:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '201':
          description: Created
          content:
            application/json:
              schema:
                type: string
                x-cs-type: ObjectId
      summary: Create a new Service Account
      description: Creates a new Service Account
      operationId: CreateServiceAccount
      security:
      - auth_token: []
      tags:
      - Service Account Governance
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ServiceAccountDetails'
        required: true
  /v2/service_account/item/{service_account_id}:
    delete:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Deleted
          content:
            application/json:
              schema:
                type: boolean
      summary: Delete Service Account details
      description: Delete the service account
      operationId: DeleteServiceAccount
      parameters:
      - name: service_account_id
        in: path
        required: true
        description: Specify the service account ID to delete, ID which can be obtained from the list service account API.
        schema:
          type: string
      security:
      - auth_token: []
      tags:
      - Service Account Governance
    get:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Fetched
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceAccountDetails'
      summary: Get Service Account details
      description: Retrieve the current details of the service account
      operationId: GetServiceAccount
      parameters:
      - name: service_account_id
        in: path
        required: true
        description: Specify the service account ID to read, ID which can be obtained from the list service account API.
        schema:
          type: string
      security:
      - auth_token: []
      tags:
      - Service Account Governance
    post:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '412':
          description: Validation Failed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationResults'
        '200':
          description: Fetched
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceAccountDetails'
      summary: Update Service Account details
      description: Update the details of the service account
      operationId: UpdateServiceAccount
      parameters:
      - name: service_account_id
        in: path
        required: true
        description: Specify the service account ID to update, ID which can be obtained from the list service account API.
        schema:
          type: string
      security:
      - auth_token: []
      tags:
      - Service Account Governance
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ServiceAccountDetails'
        required: true
  /v2/service_account/item/{service_account_id}/cloud_tags:
    get:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                description: List of tag key/value pairs
                items:
                  $ref: '#/components/schemas/KeyValuePair'
      summary: Fetch Service Account Cloud Tags
      description: Fetch the cloud tags for the service account
      operationId: FetchServiceAccountCloudTags
      parameters:
      - name: service_account_id
        in: path
        required: true
        description: Specify the account id
        schema:
          type: string
      security:
      - auth_token: []
      tags:
      - Service Account Governance
  /v2/service_account/item/{service_account_id}/compartments:
    get:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/CompartmentDetailsBase'
      summary: List of Available OCI Compartments
      description: List the available compartments for the cloud account
      operationId: ListAvailableCompartments
      parameters:
      - name: service_account_id
        in: path
        required: true
        description: Specify the account id
        schema:
          type: string
      security:
      - auth_token: []
      tags:
      - Service Account Governance
  /v2/service_account/item/{service_account_id}/credentials_validation:
    get:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Validated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceAccountDetails'
      summary: Validate Service Account Credentials
      description: Performs validation of credentials associated with the service account
      operationId: PerformServiceAccountCredentialsValidation
      parameters:
      - name: service_account_id
        in: path
        required: true
        description: Specify the service account id to read, cloud account id is unique can be obtained from the list cloud account api.This should be same as the ID of the reference API
        schema:
          type: string
      security:
      - auth_token: []
      tags:
      - Service Account Governance
  /v2/service_account/item/{service_account_id}/dry_run:
    post:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '412':
          description: Validation Failed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationResults'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Fetched
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceAccountDetails'
      summary: Validate update of Service Account details
      description: Validate if the details can be applied to the service account
      operationId: UpdateServiceAccountDryRun
      parameters:
      - name: service_account_id
        in: path
        required: true
        description: Specify the service account ID to validate, ID which can be obtained from the list service account API.
        schema:
          type: string
      security:
      - auth_token: []
      tags:
      - Service Account Governance
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ServiceAccountDetails'
        required: true
  /v2/service_account/item/{service_account_id}/extended_dry_run:
    post:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '412':
          description: Validation Failed
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ValidationResults'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Fetched
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceAccountDetails'
      summary: Validate update of Service Account details and check if the Governance Configuration can be accepted by the Cloud/Tool provider
      description: Validate if the details can be applied to the service account and the Governance Configuration is acceptable by the Cloud/Tool provider
      operationId: UpdateServiceAccountExtendedDryRun
      parameters:
      - name: service_account_id
        in: path
        required: true
        description: Specify the service account ID to validate, ID which can be obtained from the list service account API.
        schema:
          type: string
      security:
      - auth_token: []
      tags:
      - Service Account Governance
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ServiceAccountDetails'
        required: true
  /v2/service_account/item/{service_account_id}/locations:
    get:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/LocationDetailsBase'
      summary: List Available Locations
      description: List the available location for the cloud account
      operationId: ListAvailableLocations
      parameters:
      - name: service_account_id
        in: path
        required: true
        description: Specify the account id
        schema:
          type: string
      security:
      - auth_token: []
      tags:
      - Service Account Governance
  /v2/service_account/item/{service_account_id}/resource_groups:
    get:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '404':
          description: Not Found
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/ResourceGroupDetailsBase'
      summary: List Available Azure Resource Groups
      description: List the available resource groups for the cloud account
      operationId: ListAvailableResourceGroups
      parameters:
      - name: service_account_id
        in: path
        required: true
        description: Specify the account id
        schema:
          type: string
      security:
      - auth_token: []
      tags:
      - Service Account Governance
  /v2/service_account/item/{service_account_id}/sync_status:
    get:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Fetched
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceAccountSync'
      summary: Get Current Sync Status
      description: Retrieve the current sync status of the service account
      operationId: GetServiceAccountSyncStatus
      parameters:
      - name: service_account_id
        in: path
        required: true
        description: Specify the service account id to read, cloud account id is unique can be obtained from the list cloud account api.This should be same as the ID of the reference API
        schema:
          type: string
      security:
      - auth_token: []
      tags:
      - Service Account Governance
    post:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Fetched
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceAccountSync'
      summary: Trigger refresh of Sync Status
      description: Trigger the refresh of the sync status of the service account
      operationId: TriggerServiceAccountSync
      parameters:
      - name: service_account_id
        in: path
        required: true
        description: Specify the service account id to read, cloud account id is unique can be obtained from the list cloud account api.This should be same as the ID of the reference API
        schema:
          type: string
      security:
      - auth_token: []
      tags:
      - Service Account Governance
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ServiceAccountSync'
        required: true
  /v2/service_account/item/{service_account_id}/sync_status_history:
    get:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Fetched
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceAccountSyncHistory'
      summary: Get Sync Status History
      description: Retrieve the historical sync status of the service account
      operationId: GetServiceAccountSyncStatusHistory
      parameters:
      - name: service_account_id
        in: path
        required: true
        description: Specify the service account id to read, cloud account id is unique can be obtained from the list cloud account api.This should be same as the ID of the reference API
        schema:
          type: string
      security:
      - auth_token: []
      tags:
      - Service Account Governance
  /v2/service_account/list:
    post:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Fetched
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceAccountListResponse'
      summary: List Service Accounts
      description: Retrieve the ids of service accounts matching the filtering criteria
      operationId: ListServiceAccounts
      security:
      - auth_token: []
      tags:
      - Service Account Governance
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ServiceAccountListRequest'
        required: true
  /v2/service_account/summary:
    post:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Fetched
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/ServiceAccountSummary'
      summary: Summarize Service Accounts
      description: Summarize the service accounts matching the filtering criteria returning counts for each group
      operationId: ServiceAccountsSummary
      security:
      - auth_token: []
      tags:
      - Service Account Governance
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ServiceAccountSummaryRequest'
        required: true
components:
  schemas:
    ProgressDetailsForServiceNowCmdbSync:
      allOf:
      - $ref: '#/components/schemas/ProgressDetails'
      - properties:
          progress:
            description: Progress of the ServiceNow Cmdb sync
            $ref: '#/components/schemas/ServiceNowCmdbSyncProgress'
        type: object
    AccessValidationByContext:
      properties:
        location:
          description: Optional location context for the permission checks
          $ref: '#/components/schemas/LocationDetailsBase'
        resource_group:
          description: Optional resource group context for the permission checks
          $ref: '#/components/schemas/ResourceGroupDetailsBase'
        access_granted:
          type: array
          description: Permissions Allowed
          items:
            type: string
        access_denied:
          type: array
          description: Permissions Denied
          items:
            type: string
      type: object
    GovernanceConfiguration:
      properties:
        settings:
          type: array
          description: Governance Configuration settings
          items:
            $ref: '#/components/schemas/GovernanceConfigurationBase'
      type: object
    ServiceAccountSyncHistory:
      properties:
        access_governance:
          type: array
          description: Access Governance status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        access_validation:
          type: array
          description: Access Validation status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForAccessValidation'
        advisor_data:
          type: array
          description: Advisor Data status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        application_performance_data:
          type: array
          description: Application Performance data status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        aws_compute_optimizer_data:
          type: array
          description: AWS Compute Optimizer Data status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        aws_security_hub:
          type: array
          description: AWS Security Hub Sync Details status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForSecurityHub'
        azure_ea_unit_price:
          type: array
          description: Azure EA Unit Price Data status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForEaUnitRate'
        azure_hub_discount:
          type: array
          description: Azure Hub Discount Details status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        billing_info:
          type: array
          description: Billing Info status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForCostProcessing'
        cloud_account_tag:
          type: array
          description: Cloud Account Tag Sync status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        cloudops__activity_assessment:
          type: array
          description: Activity Assessment Data status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        cloudops__backup:
          type: array
          description: Backup Data status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForBackupData'
        cloudops__bigquery_metric:
          type: array
          description: BigQuery Metric Data status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        cloudops__custom_metric:
          type: array
          description: Custom Metric Data status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        cloudops__log_analytics_query:
          type: array
          description: Log Analytics Query Data status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        cloudops__metric:
          type: array
          description: Metric Data status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForMetricData'
        cloudops__monitoring_alert_assessment:
          type: array
          description: Monitoring Alert Assessment Data status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        cloudops__patch_management:
          type: array
          description: Patch Management Data status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        cloudops__ssm:
          type: array
          description: SSM Data status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForSsmData'
        credential_validation:
          type: array
          description: Credential Check Info status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForCredentialsValidation'
        dimension_precompute:
          type: array
          description: Dimension Precompute status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForDimensionPrecompute'
        daily_cost_report:
          type: array
          description: Daily Cost Report status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        finops__assessment_report:
          type: array
          description: Finops Assessment Report status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        finops__budget_data:
          type: array
          description: Budget Data status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        finops__cost_anomaly:
          type: array
          description: Cost Anomaly status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        finops__cost_savings:
          type: array
          description: Schedule Recommendation Cost Savings status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        finops__crp_recommendation:
          type: array
          description: CRP Recommendation status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        finops__enterprise_discount_program:
          type: array
          description: Enterprise Discount Program status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        finops__recommendation_v2:
          type: array
          description: Finops Recommendations V2 status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        finops__ri_ontology_sync:
          type: array
          description: Billing & Cost Analytics — RI ontology projection into GraphDB status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        finops__savings_plans:
          type: array
          description: Savings Plans status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForSavingsPlans'
        finops__schedule_recommendation:
          type: array
          description: Schedule Recommendation status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        finops__sp_ontology_sync:
          type: array
          description: Billing & Cost Analytics — SP ontology projection into GraphDB status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        gcp_security_command_center:
          type: array
          description: GCP Security Command Center Data status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        governance_configuration:
          type: array
          description: Application of Governance Configurations status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForGovernanceConfiguration'
        governance_configuration_validation:
          type: array
          description: Validation of Governance Configurations status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForGovernanceConfiguration'
        governance_report:
          type: array
          description: Governance Report status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        hierarchy_data:
          type: array
          description: Service Account Hierarchy status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        inventory_data:
          type: array
          description: Inventory Data status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        inventory_data__dashboard_sync:
          type: array
          description: Inventory Dashboard Data Sync status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        inventory_data__dependency_sync:
          type: array
          description: Inventory Dependency Data Sync status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        inventory_data__lock_sync:
          type: array
          description: Inventory Lock Data Sync status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        inventory_data__relationship_sync:
          type: array
          description: Inventory Relationship Data Sync status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        inventory_report:
          type: array
          description: Inventory Report status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        kubernetes_cluster_agent_sync_job:
          type: array
          description: Kubernetes Agent Sync Job Data status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForKubernetesAgentSyncStatus'
        kubernetes_cluster_agent_health:
          type: array
          description: Kubernetes Agent Health status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        metric_utilization_data:
          type: array
          description: Utilization Dashboard Metric Sync status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        monthly_cost_report:
          type: array
          description: Monthly Cost Report status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        network_data:
          type: array
          description: Network Data status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        proactive_scanner:
          type: array
          description: ProActive Scanner status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        recovery_data:
          type: array
          description: Recovery Data status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        reserved_instances_recommendation:
          type: array
          description: Reserved Instance Recommendations status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForReservedInstances'
        reserved_instances_utilization:
          type: array
          description: Reserved Instance utilization status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForReservedInstances'
        secure_score_data:
          type: array
          description: Secure Score Data status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForSecureScore'
        security__azure_sentinel:
          type: array
          description: Azure Sentinel Data Collection status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        security__tenable_nessus:
          type: array
          description: Tenable Nessus Vulnerability Data status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        servicenow_cmdb_sync_job:
          type: array
          description: ServiceNow CMDB Sync Job Data status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForServiceNowCmdbSync'
        system_policy_execution:
          type: array
          description: System Policy Execution Data status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        threat_data:
          type: array
          description: Threat Data status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForThreat'
        utilization_metrics_data:
          type: array
          description: Utilization Metrics Dashboard for Metric Sync status history
          items:
            $ref: '#/components/schemas/ProgressDetails'
        vulnerability_data:
          type: array
          description: Vulnerability Data status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForVulnerability'
        wellarchitected__auto_assessment:
          type: array
          description: WellArchitected Auto Assessment Details status history
          items:
            $ref: '#/components/schemas/ProgressDetailsForWellArchitectedAutoAssessment'
      type: object
    BaseCostProcessingMemory:
      required:
      - __type
      properties:
        schema:
          type: integer
          description: Schema version
        skipped_tags:
          type: array
          description: List of skipped tag keys
          items:
            type: string
      discriminator:
        propertyName: __type
      type: object
      x-cs-subtypes:
      - subtype_model: CostProcessingMemoryForAws
        subtype_name: CostProcessingMemoryForAws
      - subtype_model: CostProcessingMemoryForAzure
        subtype_name: CostProcessingMemoryForAzure
      - subtype_model: CostProcessingMemoryForAzureCsp
        subtype_name: CostProcessingMemoryForAzureCsp
      - subtype_model: CostProcessingMemoryForAzureEa
        subtype_name: CostProcessingMemoryForAzureEa
      - subtype_model: CostProcessingMemoryForAzureMca
        subtype_name: CostProcessingMemoryForAzureMca
      - subtype_model: CostProcessingMemoryForGcp
        subtype_name: CostProcessingMemoryForGcp
      - subtype_model: CostProcessingMemoryForOci
        subtype_name: CostProcessingMemoryForOci
      - subtype_model: CostProcessingMemoryForKubernetesAgent
        subtype_name: CostProcessingMemoryForKubernetesAgent
      - subtype_model: CostProcessingMemoryForSaas
        subtype_name: CostProcessingMemoryForSaas
    ServiceAccountChild:
      properties:
        native_details:
          description: Native details of the account. This is a required field.
          $ref: '#/components/schemas/ServiceAccountNativeDetailsBase'
        count:
          type: integer
          description: Number of child accounts.
      type: object
    KeyValuePairKind:
      allOf:
      - $ref: '#/components/schemas/KeyValuePair'
      - properties:
          kind:
            type: string
            description: Type of the key
        type: object
    ProgressDetailsForKubernetesAgentSyncStatus:
      allOf:
      - $ref: '#/components/schemas/ProgressDetails'
      - properties:
          run_id:
            type: string
            description: run id from the agent about the sync
          log_trace:
            type: array
            description: log trace from the agent about the sync
            items:
              type: string
          data_collection_start:
            type: string
            format: date-time
            description: Data Collection Start Datetime
          data_collection_end:
            type: string
            format: date-time
            description: Data Collection end Datetime
        type: object
    ProgressDetailsMessagePerLocation:
      properties:
        location:
          description: Optional region details
          $ref: '#/components/schemas/LocationDetailsBase'
        message:
          type: string
          description: status message on the sync
      type: object
    ProgressDetails:
      properties:
        status:
          type: string
          description: Sync status. This is a required field.
          example: completed
          enum:
          - completed
          - failed
          - in_progress
          x-cs-enum-type: AccountSyncProgressStatus
        initiated_at:
          type: string
          format: date-time
          description: Sync initiated time.
        completed_at:
          type: string
          format: date-time
          description: Sync completion time.
        message:
          type: string
          description: Sync information.
        background_job_id:
          description: Background Job Id of the run
          $ref: '#/components/schemas/RecordIdentity'
      type: object
    ServiceAccountBatchResponse:
      properties:
        results:
          type: object
          description: Map from identifier to response model
          additionalProperties:
            $ref: '#/components/schemas/ServiceAccountDetailsWithAdditionalInfo'
      type: object
    ProgressDetailsForAccessValidation:
      allOf:
      - $ref: '#/components/schemas/ProgressDetails'
      - properties:
          by_context:
            type: array
            description: Validation results by context
            items:
              $ref: '#/components/schemas/AccessValidationByContext'
        type: object
    ServiceAccountSummary:
      properties:
        native_details:
          description: Native details of the account
          $ref: '#/components/schemas/ServiceAccountNativeDetailsBase'
        status:
          type: string
          description: Status of the account
          example: not_validated
          enum:
          - not_validated
          - validated
          - not_onboarded
          - not_onboarded_validated
          - active
          - inactive
          - retired
          - deleting
          x-cs-enum-type: ServiceAccountStatus
        count:
          type: integer
          description: Number of accounts in the bucket
      type: object
    ProgressDetailsForMetricData:
      allOf:
      - $ref: '#/components/schemas/ProgressDetails'
      - properties:
          run_id:
            type: string
            description: Run Id
        type: object
    ValidationResults:
      properties:
        entries:
          type: array
          items:
            $ref: '#/components/schemas/ValidationResult'
      type: object
    GovernanceConfigurationApplicationStep:
      properties:
        label:
          type: string
          description: Description of the step
        status:
          type: string
          description: Status of the step
          example: validating
          enum:
          - validating
          - validated
          - applying
          - completed
          - failed
          x-cs-enum-type: GovernanceConfigurationApplicationStepStatus
        failure:
          type: string
          description: Reason for failure
      type: object
    ServiceNowCmdbSyncProgress:
      properties:
        total:
          type: integer
          description: Total number of resources identified for ServiceNow Cmdb sync
        success:
          type: integer
          description: Number of resources that have been synced
        failed:
          type: integer
          description: Number of resources that have been failed to sync
      type: object
    ProgressDetailsForWellArchitectedAutoAssessment:
      allOf:
      - $ref: '#/components/schemas/ProgressDetails'
      - properties:
          default_workload_created:
            type: boolean
            description: If set, default workload is created
          default_assessment_created:
            type: boolean
            description: If set, default assessment is created
          report_generated:
            type: boolean
            description: If set, assessment run report is generated
          notification_triggered:
            type: boolean
            description: If set, auto assessment notification is triggered
        type: object
    ProgressDetailsForSecurityHub:
      allOf:
      - $ref: '#/components/schemas/ProgressDetails'
      - properties:
          by_location:
            type: array
            items:
              $ref: '#/components/schemas/ProgressDetailsMessagePerLocation'
        type: object
    ServiceAccountBatchRequest:
      allOf:
      - $ref: '#/components/schemas/RecordIdentityBatchRequest'
      - properties:
          include_billing_as_parent:
            type: boolean
            description: Also include billing accounts as parents.
            default: false
          include_fields:
            type: array
            description: List of fields to include in the response. Must be a subset of ServiceAccountDetails keys.
            items:
              type: string
              example: created_by
              enum:
              - created_by
              - created_at
              - updated_by
              - updated_at
              - parent_id
              - source_account_id
              - billing_account_id
              - resource_service_account_id
              - tenant_id
              - name
              - description
              - currency
              - use_in_self_service
              - status
              - keystone_tenant_id
              - scope
              - onboarding_type
              - onboarded_features
              - native_details
              - credentials
              - credentials_temp
              - custom_tags
              - assessment_details
              - governance_configuration
              - is_active_in_cloud
              - skip_access_validation
              x-cs-enum-type: ServiceAccountDetailsField
          include_sync_status:
            type: array
            description: List of fields to include in the response. Must be a subset of ServiceAccountSync keys.
            items:
              type: string
              example: access_governance
              enum:
              - access_governance
              - access_validation
              - advisor_data
              - application_performance_data
              - aws_compute_optimizer_data
              - aws_security_hub
              - azure_ea_unit_price
              - azure_hub_discount
              - billing_info
              - cloud_account_tag
              - cloudops__activity_assessment
              - cloudops__backup
              - cloudops__bigquery_metric
              - cloudops__custom_metric
              - cloudops__log_analytics_query
              - cloudops__metric
              - cloudops__monitoring_alert_assessment
              - cloudops__patch_management
              - cloudops__ssm
              - credential_validation
              - dimension_precompute
              - daily_cost_report
              - finops__assessment_report
              - finops__budget_data
              - finops__cost_anomaly
              - finops__cost_savings
              - finops__crp_recommendation
              - finops__enterprise_discount_program
              - finops__recommendation_v2
              - finops__ri_ontology_sync
              - finops__savings_plans
              - finops__schedule_recommendation
              - finops__sp_ontology_sync
              - gcp_security_command_center
              - governance_configuration
              - governance_configuration_validation
              - governance_report
              - hierarchy_data
              - inventory_data
              - inventory_data__dashboard_sync
              - inventory_data__dependency_sync
              - inventory_data__lock_sync
              - inventory_data__relationship_sync
              - inventory_report
              - kubernetes_cluster_agent_sync_job
              - kubernetes_cluster_agent_health
              - metric_utilization_data
              - monthly_cost_report
              - network_data
              - proactive_scanner
              - recovery_data
              - reserved_instances_recommendation
              - reserved_instances_utilization
              - secure_score_data
              - security__azure_sentinel
              - security__tenable_nessus
              - servicenow_cmdb_sync_job
              - system_policy_execution
              - threat_data
              - utilization_metrics_data
              - vulnerability_data
              - wellarchitected__auto_assessment
              x-cs-enum-type: ServiceAccountSyncField
          additional_fields:
            type: array
            items:
              type: string
              description: Additional fields to include in the response
              example: child_account_count
              enum:
              - child_account_count
              - parent_accounts_info
              x-cs-enum-type: ServiceAccountDetailsAdditionalField
        type: object
    ProgressDetailsForSavingsPlans:
      allOf:
      - $ref: '#/components/schemas/ProgressDetails'
      - properties:
          total_purchased_plans_retrieved:
            type: integer
            description: Total number of plans retrieved in the run.
          total_recommendations_retrieved:
            type: integer
            description: Total number of recommendations retrieved in the run.
        type: object
    ModelError:
      required:
      - message
      properties:
        message:
          type: string
          description: Error response message.
      type: object
    ServiceAccountSync:
      properties:
        access_governance:
          description: Access Governance current status
          $ref: '#/components/schemas/ProgressDetails'
        access_validation:
          description: Access Validation current status
          $ref: '#/components/schemas/ProgressDetailsForAccessValidation'
        advisor_data:
          description: Advisor Data current status
          $ref: '#/components/schemas/ProgressDetails'
        application_performance_data:
          description: Application Performance data current status
          $ref: '#/components/schemas/ProgressDetails'
        aws_compute_optimizer_data:
          description: AWS Compute Optimizer Data current status
          $ref: '#/components/schemas/ProgressDetails'
        aws_security_hub:
          description: AWS Security Hub Sync Details current status
          $ref: '#/components/schemas/ProgressDetailsForSecurityHub'
        azure_ea_unit_price:
          description: Azure EA Unit Price Data current status
          $ref: '#/components/schemas/ProgressDetailsForEaUnitRate'
        azure_hub_discount:
          description: Azure Hub Discount Details current status
          $ref: '#/components/schemas/ProgressDetails'
        billing_info:
          description: Billing Info current status
          $ref: '#/components/schemas/ProgressDetailsForCostProcessing'
        cloud_account_tag:
          description: Cloud Account Tag Sync current status
          $ref: '#/components/schemas/ProgressDetails'
        cloudops__activity_assessment:
          description: Activity Assessment Data current status
          $ref: '#/components/schemas/ProgressDetails'
        cloudops__backup:
          description: Backup Data current status
          $ref: '#/components/schemas/ProgressDetailsForBackupData'
        cloudops__bigquery_metric:
          description: BigQuery Metric Data current status
          $ref: '#/components/schemas/ProgressDetails'
        cloudops__custom_metric:
          description: Custom Metric Data current status
          $ref: '#/components/schemas/ProgressDetails'
        cloudops__log_analytics_query:
          description: Log Analytics Query Data current status
          $ref: '#/components/schemas/ProgressDetails'
        cloudops__metric:
          description: Metric Data current status
          $ref: '#/components/schemas/ProgressDetailsForMetricData'
        cloudops__monitoring_alert_assessment:
          description: Monitoring Alert Assessment Data current status
          $ref: '#/components/schemas/ProgressDetails'
        cloudops__patch_management:
          description: Patch Management Data current status
          $ref: '#/components/schemas/ProgressDetails'
        cloudops__ssm:
          description: SSM Data current status
          $ref: '#/components/schemas/ProgressDetailsForSsmData'
        credential_validation:
          description: Credential Check Info current status
          $ref: '#/components/schemas/ProgressDetailsForCredentialsValidation'
        dimension_precompute:
          description: Dimension Precompute current status
          $ref: '#/components/schemas/ProgressDetailsForDimensionPrecompute'
        daily_cost_report:
          description: Daily Cost Report current status
          $ref: '#/components/schemas/ProgressDetails'
        finops__assessment_report:
          description: Finops Assessment Report current status
          $ref: '#/components/schemas/ProgressDetails'
        finops__budget_data:
          description: Budget Data current status
          $ref: '#/components/schemas/ProgressDetails'
        finops__cost_anomaly:
          description: Cost Anomaly current status
          $ref: '#/components/schemas/ProgressDetails'
        finops__cost_savings:
          description: Schedule Recommendation Cost Savings current status
          $ref: '#/components/schemas/ProgressDetails'
        finops__crp_recommendation:
          description: CRP Recommendation current status
          $ref: '#/components/schemas/ProgressDetails'
        finops__enterprise_discount_program:
          description: Enterprise Discount Program current status
          $ref: '#/components/schemas/ProgressDetails'
        finops__recommendation_v2:
          description: Finops Recommendations V2 current status
          $ref: '#/components/schemas/ProgressDetails'
        finops__ri_ontology_sync:
          description: Billing & Cost Analytics — RI ontology projection into GraphDB current status
          $ref: '#/components/schemas/ProgressDetails'
        finops__savings_plans:
          description: Savings Plans current status
          $ref: '#/components/schemas/ProgressDetailsForSavingsPlans'
        finops__schedule_recommendation:
          description: Schedule Recommendation current status
          $ref: '#/components/schemas/ProgressDetails'
        finops__sp_ontology_sync:
          description: Billing & Cost Analytics — SP ontology projection into GraphDB current status
          $ref: '#/components/schemas/ProgressDetails'
        gcp_security_command_center:
          description: GCP Security Command Center Data current status
          $ref: '#/components/schemas/ProgressDetails'
        governance_configuration:
          description: Application of Governance Configurations current status
          $ref: '#/components/schemas/ProgressDetailsForGovernanceConfiguration'
        governance_configuration_validation:
          description: Validation of Governance Configurations current status
          $ref: '#/components/schemas/ProgressDetailsForGovernanceConfiguration'
        governance_report:
          description: Governance Report current status
          $ref: '#/components/schemas/ProgressDetails'
        hierarchy_data:
          description: Service Account Hierarchy current status
          $ref: '#/components/schemas/ProgressDetails'
        inventory_data:
          description: Inventory Data current status
          $ref: '#/components/schemas/ProgressDetails'
        inventory_data__dashboard_sync:
          description: Inventory Dashboard Data Sync current status
          $ref: '#/components/schemas/ProgressDetails'
        inventory_data__dependency_sync:
          description: Inventory Dependency Data Sync current status
          $ref: '#/components/schemas/ProgressDetails'
        inventory_data__lock_sync:
          description: Inventory Lock Data Sync current status
          $ref: '#/components/schemas/ProgressDetails'
        inventory_data__relationship_sync:
          description: Inventory Relationship Data Sync current status
          $ref: '#/components/schemas/ProgressDetails'
        inventory_report:
          description: Inventory Report current status
          $ref: '#/components/schemas/ProgressDetails'
        kubernetes_cluster_agent_sync_job:
          description: Kubernetes Agent Sync Job Data current status
          $ref: '#/components/schemas/ProgressDetailsForKubernetesAgentSyncStatus'
        kubernetes_cluster_agent_health:
          description: Kubernetes Agent Health current status
          $ref: '#/components/schemas/ProgressDetails'
        metric_utilization_data:
          description: Utilization Dashboard Metric Sync current status
          $ref: '#/components/schemas/ProgressDetails'
        monthly_cost_report:
          description: Monthly Cost Report current status
          $ref: '#/components/schemas/ProgressDetails'
        network_data:
          description: Network Data current status
          $ref: '#/components/schemas/ProgressDetails'
        proactive_scanner:
          description: ProActive Scanner current status
          $ref: '#/components/schemas/ProgressDetails'
        recovery_data:
          description: Recovery Data current status
          $ref: '#/components/schemas/ProgressDetails'
        reserved_instances_recommendation:
          description: Reserved Instance Recommendations current status
          $ref: '#/components/schemas/ProgressDetailsForReservedInstances'
        reserved_instances_utilization:
          description: Reserved Instance utilization current status
          $ref: '#/components/schemas/ProgressDetailsForReservedInstances'
        secure_score_data:
          description: Secure Score Data current status
          $ref: '#/components/schemas/ProgressDetailsForSecureScore'
        security__azure_sentinel:
          description: Azure Sentinel Data Collection current status
          $ref: '#/components/schemas/ProgressDetails'
        security__tenable_nessus:
          description: Tenable Nessus Vulnerability Data current status
          $ref: '#/components/schemas/ProgressDetails'
        servicenow_cmdb_sync_job:
          description: ServiceNow CMDB Sync Job Data current status
          $ref: '#/components/schemas/ProgressDetailsForServiceNowCmdbSync'
        system_policy_execution:
          description: System Policy Execution Data current status
          $ref: '#/components/schemas/ProgressDetails'
        threat_data:
          description: Threat Data current status
          $ref: '#/components/schemas/ProgressDetailsForThreat'
        utilization_metrics_data:
          description: Utilization Metrics Dashboard for Metric Sync current status
          $ref: '#/components/schemas/ProgressDetails'
        vulnerability_data:
          description: Vulnerability Data current status
          $ref: '#/components/schemas/ProgressDetailsForVulnerability'
        wellarchitected__auto_assessment:
          description: WellArchitected Auto Assessment Details current status
          $ref: '#/components/schemas/ProgressDetailsForWellArchitectedAutoAssessment'
      type: object
    ServiceAccountSummaryRequest:
      required:
      - filters
      properties:
        filters:
          description: Filter for the service accounts
          $ref: '#/components/schemas/ServiceAccountFilter'
      type: object
    ProgressDetailsForBackupData:
      allOf:
      - $ref: '#/components/schemas/ProgressDetails'
      - properties:
          pre_fill:
            type: boolean
            description: Prefill Flag
        type: object
    ProgressDetailsForVulnerability:
      allOf:
      - $ref: '#/components/schemas/ProgressDetails'
      - properties:
          by_location:
            type: array
            items:
              $ref: '#/components/schemas/ProgressDetailsMessagePerLocation'
        type: object
    RecordIdentityBatchRequest:
      properties:
        ids:
          type: array
          items:
            $ref: '#/components/schemas/RecordIdentity'
      type: object
    KeyValuePair:
      properties:
        key:
          type: string
          description: Key of the pair
        value:
          type: string
          description: Value of the pair
      type: object
    RecordIdentity:
      properties:
        sysId:
          type: string
          description: Unique Identifier of the tracked item
        lastUpdate:
          type: string
          format: date-time
          description: Last update of the tracked item
        table:
          type: string
          description: Context of the tracked item
      type: object
    ResourceGroupDetailsBase:
      required:
      - type
      properties:
        resource_group_id:
          type: string
          description: Unique Id
        name:
          type: string
          description: Display Name
        description:
          type: string
          description: Description
      discriminator:
        propertyName: type
      type: object
      x-cs-subtypes:
      - subtype_model: ResourceGroupDetailsForAws
        subtype_name: ResourceGroupDetailsForAws
      - subtype_model: ResourceGroupDetailsForAzure
        subtype_name: ResourceGroupDetailsForAzure
    ListContext:
      properties:
        batch_size:
          type: integer
          description: Max number of ids in the response
        batch_offset:
          type: integer
          description: Offset of batches into the results. First batch is 0
        total:
          type: integer
          description: Total number of results
      type: object
    ServiceAccountDetails:
      properties:
        created_by:
          type: string
          description: Name of the user who created the account.
        created_at:
          type: string
          format: date-time
          description: Account creation timestamp
        updated_by:
          type: string
          description: Name of the user who recently updated the account.
        updated_at:
          type: string
          format: date-time
          description: Account last updated timestamp.
        parent_id:
          type: string
          description: Parent account of the account.
          x-cs-type: ObjectId
        source_account_id:
          type: string
          description: Source account id in case of created from associated accounts.
        billing_account_id:
          type: string
          description: Link to Service Account that is used to retrieve billing information.
          x-cs-type: ObjectId
        resource_service_account_id:
          type: string
          description: Reference to the Service Account under which the resource is provisioned.
          x-cs-type: ObjectId
        tenant_id:
          type: string
          description: Tenant Id. This is a required field.
          x-cs-type: ObjectId
        name:
          type: string
          description: Name of the account. This is a required field.
        description:
          type: string
          description: A brief description of the account.
        currency:
          type: string
          description: Billing currency of the account.
          example: AED
          enum:
          - AED
          - ALL
          - ARS
          - AUD
          - BAM
          - BDT
          - BGN
          - BHD
          - BRL
          - CAD
          - CHF
          - CLP
          - CNY
          - COP
          - CRC
          - CZK
          - DKK
          - EGP
          - EUR
          - GBP
          - HKD
          - HRK
          - HUF
          - IDR
          - ILS
          - INR
          - ISK
          - JPY
          - KES
          - KRW
          - KWD
          - KZT
          - MOP
          - MVR
          - MXN
          - MYR
          - NOK
          - NZD
          - OMR
          - PEN
          - PHP
          - PKR
          - PLN
          - QAR
          - RON
          - RSD
          - RUB
          - SAR
          - SEK
          - SGD
          - THB
          - TRY
          - TWD
          - USD
          - VND
          - ZAR
          x-cs-enum-type: Currency
        use_in_self_service:
          type: boolean
          description: If set, the account will be used in self service for its tenant.
        status:
          type: string
          description: Indicates the status of the account. This is a required field.
          example: not_validated
          enum:
          - not_validated
          - validated
          - not_onboarded
          - not_onboarded_validated
          - active
          - inactive
          - retired
          - deleting
          x-cs-enum-type: ServiceAccountStatus
        keystone_tenant_id:
          type: string
          description: Id of the keystone tenant for mistral template executions.
        scope:
          type: string
          description: Scope of the account. This is a required field.
          example: global
          enum:
          - global
          - account
          - tenant
          x-cs-enum-type: ServiceAccountScope
        onboarding_type:
          type: string
          description: Type of the onboarding. This is a required field.
          example: manual
          enum:
          - manual
          - on_demand
          - automatic
          x-cs-enum-type: ServiceAccountOnboardingType
        onboarded_features:
          type: array
          items:
            $ref: '#/components/schemas/ServiceAccountFeatureDetails'
        native_details:
          description: Native details of the account. This is a required field.
          $ref: '#/components/schemas/ServiceAccountNativeDetailsBase'
        credentials:
          description: Authentication credentials of account.
          $ref: '#/components/schemas/ServiceAccountCredentialsBase'
        credentials_temp:
          description: Temporary storage for Authentication credentials of account before validation.
          $ref: '#/components/schemas/ServiceAccountCredentialsBase'
        custom_tags:
          type: array
          description: List of tag key/value and kind
          items:
            $ref: '#/components/schemas/KeyValuePairKind'
        assessment_details:
          description: Assessment result of the account.
          $ref: '#/components/schemas/ServiceAccountAssessmentDetails'
        governance_configuration:
          description: Governance configuration.
          $ref: '#/components/schemas/GovernanceConfiguration'
        is_active_in_cloud:
          type: boolean
          description: Indicates whether the account is active in the native cloud.
          default: true
        skip_access_validation:
          type: boolean
          description: If set, access validation checks will be skipped for this account.
          default: false
      type: object
    DimensionPrecomputeStatusEntry:
      properties:
        dimension_id:
          type: string
          description: Dimension definition ID
        status:
          type: string
          description: 'Per-dimension status: completed, failed, pending, disabled, no_data'
          example: completed
          enum:
          - completed
          - disabled
          - failed
          - in_progress
          - no_data
          - pending
          x-cs-enum-type: DimensionPrecomputeStatus
        last_precomputed_version_id:
          type: string
          description: head_version sys_id at time of last successful precompute
        records_reprocessed:
          type: integer
          description: Records reprocessed for this dimension in last run
        message:
          type: string
          description: Status message or error detail
        version_state:
          description: Current version state of the dimension
          $ref: '#/components/schemas/DimensionPrecomputeVersionState'
      type: object
    ServiceAccountListRequest:
      properties:
        list_context:
          description: Optional list context
          $ref: '#/components/schemas/ListContext'
        sort:
          type: array
          description: Sort criteria
          items:
            $ref: '#/components/schemas/ServiceAccountSortCriteria'
        filters:
          description: Filters for the request
          $ref: '#/components/schemas/ServiceAccountFilter'
      type: object
    ValidationResult:
      properties:
        field:
          type: string
        reason:
          type: string
      type: object
    ProgressDetailsForCredentialsValidation:
      allOf:
      - $ref: '#/components/schemas/ProgressDetails'
      - properties:
          key_id:
            type: string
            description: Key Id
          displayName:
            type: string
            description: Display Name
          start_time:
            type: string
            format: date-time
            description: Start Time
          expire_time:
            type: string
            format: date-time
            description: Expire Time
        type: object
    ServiceAccountDetailsWithAdditionalInfo:
      allOf:
      - $ref: '#/components/schemas/ServiceAccountDetails'
      - properties:
          child_account_count:
            type: array
            description: List of child account counts for each account.
            items:
              $ref: '#/components/schemas/ServiceAccountChild'
          parent_accounts_info:
            type: array
            description: List of parent account hierarchy information for each account.
            items:
              $ref: '#/components/schemas/ServiceAccountParentInfo'
          sync_status:
            description: Sync status for each account.
            $ref: '#/components/schemas/ServiceAccountSync'
        type: object
    ProgressDetailsForThreat:
      allOf:
      - $ref: '#/components/schemas/ProgressDetails'
      - properties:
          by_location:
            type: array
            items:
              $ref: '#/components/schemas/ProgressDetailsMessagePerLocation'
        type: object
    ServiceAccountNativeDetailsBase:
      required:
      - type
      properties: {}
      discriminator:
        propertyName: type
      type: object
      x-cs-subtypes:
      - subtype_model: ServiceAccountNativeDetailsBaseForCostCenter
        subtype_name: ServiceAccountNativeDetailsBaseForCostCenter
      - subtype_model: ServiceAccountNativeDetailsBaseForStructure
        subtype_name: ServiceAccountNativeDetailsBaseForStructure
      - subtype_model: ServiceAccountNativeDetailsBaseForCostCenterCloud
        subtype_name: ServiceAccountNativeDetailsBaseForCostCenterCloud
      - subtype_model: ServiceAccountNativeDetailsBaseForCostCenterDimension
        subtype_name: ServiceAccountNativeDetailsBaseForCostCenterDimension
      - subtype_model: ServiceAccountNativeDetailsForCostCenterDimension
        subtype_name: ServiceAccountNativeDetailsForCostCenterDimension
      - subtype_model: ServiceAccountNativeDetailsForCostCenterDimensionGroupingRule
        subtype_name: ServiceAccountNativeDetailsForCostCenterDimensionGroupingRule
      - subtype_model: ServiceAccountNativeDetailsBaseForCloud
        subtype_name: ServiceAccountNativeDetailsBaseForCloud
      - subtype_model: ServiceAccountNativeDetailsBaseForAws
        subtype_name: ServiceAccountNativeDetailsBaseForAws
      - subtype_model: ServiceAccountNativeDetailsForAwsOrganizationUnit
        subtype_name: ServiceAccountNativeDetailsForAwsOrganizationUnit
      - subtype_model: ServiceAccountNativeDetailsForAwsManagementAccount
        subtype_name: ServiceAccountNativeDetailsForAwsManagementAccount
      - subtype_model: ServiceAccountNativeDetailsForAwsMemberAccount
        subtype_name: ServiceAccountNativeDetailsForAwsMemberAccount
      - subtype_model: ServiceAccountNativeDetailsForCostCenterAws
        subtype_name: ServiceAccountNativeDetailsForCostCenterAws
      - subtype_model: ServiceAccountNativeDetailsBaseForAzure
        subtype_name: ServiceAccountNativeDetailsBaseForAzure
      - subtype_model: ServiceAccountNativeDetailsForAzureCspMaster
        subtype_name: ServiceAccountNativeDetailsForAzureCspMaster
      - subtype_model: ServiceAccountNativeDetailsForAzureCspPartner
        subtype_name: ServiceAccountNativeDetailsForAzureCspPartner
      - subtype_model: ServiceAccountNativeDetailsForAzureCspCustomer
        subtype_name: ServiceAccountNativeDetailsForAzureCspCustomer
      - subtype_model: ServiceAccountNativeDetailsBaseForAzureSubscription
        subtype_name: ServiceAccountNativeDetailsBaseForAzureSubscription
      - subtype_model: ServiceAccountNativeDetailsForAzureSubscription
        subtype_name: ServiceAccountNativeDetailsForAzureSubscription
      - subtype_model: ServiceAccountNativeDetailsForAzureCspSubscription
        subtype_name: ServiceAccountNativeDetailsForAzureCspSubscription
      - subtype_model: ServiceAccountNativeDetailsBaseForAzureEaMaster
        subtype_name: ServiceAccountNativeDetailsBaseForAzureEaMaster
      - subtype_model: ServiceAccountNativeDetailsForAzureEaApiKeyMaster
        subtype_name: ServiceAccountNativeDetailsForAzureEaApiKeyMaster
      - subtype_model: ServiceAccountNativeDetailsForAzureEaApplicationMaster
        subtype_name: ServiceAccountNativeDetailsForAzureEaApplicationMaster
      - subtype_model: ServiceAccountNativeDetailsForAzureEaDepartment
        subtype_name: ServiceAccountNativeDetailsForAzureEaDepartment
      - subtype_model: ServiceAccountNativeDetailsForAzureEaAccount
        subtype_name: ServiceAccountNativeDetailsForAzureEaAccount
      - subtype_model: ServiceAccountNativeDetailsForAzureEaSubscription
        subtype_name: ServiceAccountNativeDetailsForAzureEaSubscription
      - subtype_model: ServiceAccountNativeDetailsForAzureMcaBillingAccount
        subtype_name: ServiceAccountNativeDetailsForAzureMcaBillingAccount
      - subtype_model: ServiceAccountNativeDetailsForAzureMcaBillingProfile
        subtype_name: ServiceAccountNativeDetailsForAzureMcaBillingProfile
      - subtype_model: ServiceAccountNativeDetailsForAzureMcaInvoiceSection
        subtype_name: ServiceAccountNativeDetailsForAzureMcaInvoiceSection
      - subtype_model: ServiceAccountNativeDetailsForAzureMcaSubscription
        subtype_name: ServiceAccountNativeDetailsForAzureMcaSubscription
      - subtype_model: ServiceAccountNativeDetailsForCostCenterAzure
        subtype_name: ServiceAccountNativeDetailsForCostCenterAzure
      - subtype_model: ServiceAccountNativeDetailsBaseForGcp
        subtype_name: ServiceAccountNativeDetailsBaseForGcp
      - subtype_model: ServiceAccountNativeDetailsForGcpBillingAccount
        subtype_name: ServiceAccountNativeDetailsForGcpBillingAccount
      - subtype_model: ServiceAccountNativeDetailsForGcpParentBillingAccount
        subtype_name: ServiceAccountNativeDetailsForGcpParentBillingAccount
      - subtype_model: ServiceAccountNativeDetailsForGcpBillingSubAccount
        subtype_name: ServiceAccountNativeDetailsForGcpBillingSubAccount
      - subtype_model: ServiceAccountNativeDetailsForGcpOrganization
        subtype_name: ServiceAccountNativeDetailsForGcpOrganization
      - subtype_model: ServiceAccountNativeDetailsForGcpFolder
        subtype_name: ServiceAccountNativeDetailsForGcpFolder
      - subtype_model: ServiceAccountNativeDetailsForGcpProject
        subtype_name: ServiceAccountNativeDetailsForGcpProject
      - subtype_model: ServiceAccountNativeDetailsForCostCenterGcp
        subtype_name: ServiceAccountNativeDetailsForCostCenterGcp
      - subtype_model: ServiceAccountNativeDetailsForOciTenancy
        subtype_name: ServiceAccountNativeDetailsForOciTenancy
      - subtype_model: ServiceAccountNativeDetailsForCostCenterOci
        subtype_name: ServiceAccountNativeDetailsForCostCenterOci
      - subtype_model: ServiceAccountNativeDetailsForAzureStack
        subtype_name: ServiceAccountNativeDetailsForAzureStack
      - subtype_model: ServiceAccountNativeDetailsForCloudstack
        subtype_name: ServiceAccountNativeDetailsForCloudstack
      - subtype_model: ServiceAccountNativeDetailsForOpenstack
        subtype_name: ServiceAccountNativeDetailsForOpenstack
      - subtype_model: ServiceAccountNativeDetailsForRackspace
        subtype_name: ServiceAccountNativeDetailsForRackspace
      - subtype_model: ServiceAccountNativeDetailsForVmware
        subtype_name: ServiceAccountNativeDetailsForVmware
      - subtype_model: ServiceAccountNativeDetailsForVcenter
        subtype_name: ServiceAccountNativeDetailsForVcenter
      - subtype_model: ServiceAccountNativeDetailsForMsVmm
        subtype_name: ServiceAccountNativeDetailsForMsVmm
      - subtype_model: ServiceAccountNativeDetailsForVmwareVcdMaster
        subtype_name: ServiceAccountNativeDetailsForVmwareVcdMaster
      - subtype_model: ServiceAccountNativeDetailsForVmwareVcdOrganization
        subtype_name: ServiceAccountNativeDetailsForVmwareVcdOrganization
      - subtype_model: ServiceAccountNativeDetailsForVmwareVcdOrganizationVdc
        subtype_name: ServiceAccountNativeDetailsForVmwareVcdOrganizationVdc
      - subtype_model: ServiceAccountNativeDetailsForPrivateCloud
        subtype_name: ServiceAccountNativeDetailsForPrivateCloud
      - subtype_model: ServiceAccountNativeDetailsBaseForIntegratedTool
        subtype_name: ServiceAccountNativeDetailsBaseForIntegratedTool
      - subtype_model: ServiceAccountNativeDetailsForAppDynamics
        subtype_name: ServiceAccountNativeDetailsForAppDynamics
      - subtype_model: ServiceAccountNativeDetailsForAppInsights
        subtype_name: ServiceAccountNativeDetailsForAppInsights
      - subtype_model: ServiceAccountNativeDetailsForAzureDevops
        subtype_name: ServiceAccountNativeDetailsForAzureDevops
      - subtype_model: ServiceAccountNativeDetailsForAzureSecurityGraph
        subtype_name: ServiceAccountNativeDetailsForAzureSecurityGraph
      - subtype_model: ServiceAccountNativeDetailsForAzureSentinel
        subtype_name: ServiceAccountNativeDetailsForAzureSentinel
      - subtype_model: ServiceAccountNativeDetailsForCorestack
        subtype_name: ServiceAccountNativeDetailsForCorestack
      - subtype_model: ServiceAccountNativeDetailsForDockerHub
        subtype_name: ServiceAccountNativeDetailsForDockerHub
      - subtype_model: ServiceAccountNativeDetailsForElasticSearch
        subtype_name: ServiceAccountNativeDetailsForElasticSearch
      - subtype_model: ServiceAccountNativeDetailsForFreshservice
        subtype_name: ServiceAccountNativeDetailsForFreshservice
      - subtype_model: ServiceAccountNativeDetailsBaseForJiraServiceManagement
        subtype_name: ServiceAccountNativeDetailsBaseForJiraServiceManagement
      - subtype_model: ServiceAccountNativeDetailsForJiraServiceManagementParent
        subtype_name: ServiceAccountNativeDetailsForJiraServiceManagementParent
      - subtype_model: ServiceAccountNativeDetailsForJiraServiceManagementProject
        subtype_name: ServiceAccountNativeDetailsForJiraServiceManagementProject
      - subtype_model: ServiceAccountNativeDetailsForGithub
        subtype_name: ServiceAccountNativeDetailsForGithub
      - subtype_model: ServiceAccountNativeDetailsForJiraDataCenter
        subtype_name: ServiceAccountNativeDetailsForJiraDataCenter
      - subtype_model: ServiceAccountNativeDetailsForJiraServiceDesk
        subtype_name: ServiceAccountNativeDetailsForJiraServiceDesk
      - subtype_model: ServiceAccountNativeDetailsForJenkins
        subtype_name: ServiceAccountNativeDetailsForJenkins
      - subtype_model: ServiceAccountNativeDetailsForLogstash
        subtype_name: ServiceAccountNativeDetailsForLogstash
      - subtype_model: ServiceAccountNativeDetailsForMicrosoftTeams
        subtype_name: ServiceAccountNativeDetailsForMicrosoftTeams
      - subtype_model: ServiceAccountNativeDetailsForNagios
        subtype_name: ServiceAccountNativeDetailsForNagios
      - subtype_model: ServiceAccountNativeDetailsForNewrelic
        subtype_name: ServiceAccountNativeDetailsForNewrelic
      - subtype_model: ServiceAccountNativeDetailsForPrometheus
        subtype_name: ServiceAccountNativeDetailsForPrometheus
      - subtype_model: ServiceAccountNativeDetailsForQualys
        subtype_name: ServiceAccountNativeDetailsForQualys
      - subtype_model: ServiceAccountNativeDetailsForRedhatSatellite
        subtype_name: ServiceAccountNativeDetailsForRedhatSatellite
      - subtype_model: ServiceAccountNativeDetailsForServiceNow
        subtype_name: ServiceAccountNativeDetailsForServiceNow
      - subtype_model: ServiceAccountNativeDetailsForArrowSphere
        subtype_name: ServiceAccountNativeDetailsForArrowSphere
      - subtype_model: ServiceAccountNativeDetailsForTclItsm
        subtype_name: ServiceAccountNativeDetailsForTclItsm
      - subtype_model: ServiceAccountNativeDetailsForTenableNessus
        subtype_name: ServiceAccountNativeDetailsForTenableNessus
      - subtype_model: ServiceAccountNativeDetailsForZohoServiceDesk
        subtype_name: ServiceAccountNativeDetailsForZohoServiceDesk
      - subtype_model: ServiceAccountNativeDetailsBaseForResource
        subtype_name: ServiceAccountNativeDetailsBaseForResource
      - subtype_model: ServiceAccountNativeDetailsBaseForKubernetesCluster
        subtype_name: ServiceAccountNativeDetailsBaseForKubernetesCluster
      - subtype_model: ServiceAccountNativeDetailsBaseForKubernetesClusterCloud
        subtype_name: ServiceAccountNativeDetailsBaseForKubernetesClusterCloud
      - subtype_model: ServiceAccountNativeDetailsBaseForKubernetesClusterOthers
        subtype_name: ServiceAccountNativeDetailsBaseForKubernetesClusterOthers
      - subtype_model: ServiceAccountNativeDetailsForAwsEksCluster
        subtype_name: ServiceAccountNativeDetailsForAwsEksCluster
      - subtype_model: ServiceAccountNativeDetailsForAzureAksCluster
        subtype_name: ServiceAccountNativeDetailsForAzureAksCluster
      - subtype_model: ServiceAccountNativeDetailsForGcpGkeCluster
        subtype_name: ServiceAccountNativeDetailsForGcpGkeCluster
      - subtype_model: ServiceAccountNativeDetailsForOciOkeCluster
        subtype_name: ServiceAccountNativeDetailsForOciOkeCluster
      - subtype_model: ServiceAccountNativeDetailsForSelfManagedCluster
        subtype_name: ServiceAccountNativeDetailsForSelfManagedCluster
      - subtype_model: ServiceAccountNativeDetailsBaseForSaas
        subtype_name: ServiceAccountNativeDetailsBaseForSaas
      - subtype_model: ServiceAccountNativeDetailsBaseForSaasAiServices
        subtype_name: ServiceAccountNativeDetailsBaseForSaasAiServices
      - subtype_model: ServiceAccountNativeDetailsForOpenAI
        subtype_name: ServiceAccountNativeDetailsForOpenAI
      - subtype_model: ServiceAccountNativeDetailsForAnthropic
        subtype_name: ServiceAccountNativeDetailsForAnthropic
      - subtype_model: ServiceAccountNativeDetailsBaseForSaasDataServices
        subtype_name: ServiceAccountNativeDetailsBaseForSaasDataServices
      - subtype_model: ServiceAccountNativeDetailsForSnowflake
        subtype_name: ServiceAccountNativeDetailsForSnowflake
      - subtype_model: ServiceAccountNativeDetailsForDataBricks
        subtype_name: ServiceAccountNativeDetailsForDataBricks
      - subtype_model: ServiceAccountNativeDetailsBaseForSaasOtherServices
        subtype_name: ServiceAccountNativeDetailsBaseForSaasOtherServices
      - subtype_model: ServiceAccountNativeDetailsForDataDog
        subtype_name: ServiceAccountNativeDetailsForDataDog
      - subtype_model: ServiceAccountNativeDetailsForSplunk
        subtype_name: ServiceAccountNativeDetailsForSplunk
      - subtype_model: ServiceAccountNativeDetailsForCircleCI
        subtype_name: ServiceAccountNativeDetailsForCircleCI
      - subtype_model: ServiceAccountNativeDetailsForElastic
        subtype_name: ServiceAccountNativeDetailsForElastic
      - subtype_model: ServiceAccountNativeDetailsForSaasMicrosoftTeams
        subtype_name: ServiceAccountNativeDetailsForSaasMicrosoftTeams
      - subtype_model: ServiceAccountNativeDetailsForSalesForceSalesCloud
        subtype_name: ServiceAccountNativeDetailsForSalesForceSalesCloud
      - subtype_model: ServiceAccountNativeDetailsForDropbox
        subtype_name: ServiceAccountNativeDetailsForDropbox
      - subtype_model: ServiceAccountNativeDetailsForOkta
        subtype_name: ServiceAccountNativeDetailsForOkta
      - subtype_model: ServiceAccountNativeDetailsForSaasNewRelic
        subtype_name: ServiceAccountNativeDetailsForSaasNewRelic
      - subtype_model: ServiceAccountNativeDetailsForDynatrace
        subtype_name: ServiceAccountNativeDetailsForDynatrace
      - subtype_model: ServiceAccountNativeDetailsForGrafana
        subtype_name: ServiceAccountNativeDetailsForGrafana
      - subtype_model: ServiceAccountNativeDetailsForIbmTencent
        subtype_name: ServiceAccountNativeDetailsForIbmTencent
      - subtype_model: ServiceAccountNativeDetailsForCustomSaasTool
        subtype_name: ServiceAccountNativeDetailsForCustomSaasTool
      - subtype_model: ServiceAccountNativeDetailsForZabbix
        subtype_name: ServiceAccountNativeDetailsForZabbix
    ServiceAccountFeatureDetails:
      properties:
        feature:
          type: string
          description: Feature for the account
          example: appsecops__onboarding
          enum:
          - appsecops__onboarding
          - assessments__wellarchitected
          - assessments__wellarchitected__auto_assessment
          - assessments__wellarchitected__auto_assessment__aws_sync
          - assessments__wellarchitected__custom_framework__aws_sync
          - cloudops__activity
          - cloudops__activity__periodic
          - cloudops__activity__real_time_sync_read
          - cloudops__activity__real_time_sync_write
          - cloudops__backup_management
          - cloudops__cloudwatch_agent
          - cloudops__monitoring_alerts
          - cloudops__monitoring_alerts__periodic
          - cloudops__monitoring_alerts__real_time_sync_read
          - cloudops__monitoring_alerts__real_time_sync_write
          - cloudops__patch_management
          - cloudops__runbooks
          - cloudops__utilization
          - core__inventory
          - core__inventory__management
          - core__policy_engine
          - core__policy_engine__aws_config
          - core__policy_engine__azure_policy
          - core__resource_discovery
          - core__resource_discovery_extra
          - core__tagging_governance
          - core__tagging_governance_extra
          - finops__assessments
          - finops__azurehybridbenefit_recommendations
          - finops__budget
          - finops__cloud_native_recommendations
          - finops__cost_anomaly
          - finops__cost_processing
          - finops__cost_savings
          - finops__enterprise_discount_program
          - finops__reservation
          - finops__right_size_recommendations
          - finops__savings_plans
          - finops__schedule_recommendations
          - governance__request
          - integration__application_performance_monitoring
          - integration__azure_security_graph
          - integration__azure_sentinel
          - integration__tenable_nessus
          - secops__access
          - secops__aws_security_hub
          - secops__cloud_native_security_information_event_management
          - secops__compliance
          - secops__threats
          - secops__threats__posture_read
          - secops__threats__posture_write
          - secops__threats__realtime_alerts_read
          - secops__threats__realtime_alerts_write
          - secops__vulnerabilities
          - secops__vulnerabilities__read
          - secops__vulnerabilities__write
          - selfservice__governance
          - stackops
          - stackops__deployment
          - system__roles
          x-cs-enum-type: ServiceAccountFeature
        status:
          type: string
          description: Status of an account feature
          example: onboarding
          enum:
          - onboarding
          - onboarding_failed
          - onboarded
          - offboarding
          - offboarding_failed
          x-cs-enum-type: ServiceAccountFeatureStatus
        inactive:
          type: boolean
          description: If set, feature is temporarily inactive
        silence:
          type: boolean
          description: If set, feature failures will not raise a warning in the UI
        desired_status:
          type: string
          description: The desired status of the service account
          example: onboarding
          enum:
          - onboarding
          - onboarding_failed
          - onboarded
          - offboarding
          - offboarding_failed
          x-cs-enum-type: ServiceAccountFeatureStatus
        failure_reason:
          type: string
          description: Failure reason
        tool_account_id:
          type: string
          description: Optional tool account linked to this feature.
          x-cs-type: ObjectId
        onboarded_at:
          type: string
          format: date-time
          description: Onboarding timestamp
        onboarded_by:
          type: string
          description: Name of the user who onboarded the feature.
        updated_at:
          type: string
          format: date-time
          description: Last update timestamp
        background_job_id:
          description: Background Job Id for onboarding/offboarding
          $ref: '#/components/schemas/RecordIdentity'
      type: object
    ServiceAccountListResponse:
      properties:
        results:
          type: array
          description: List of result identifiers
          items:
            type: string
            x-cs-type: ObjectId
        next_list_context:
          description: List context
          $ref: '#/components/schemas/ListContext'
      type: object
    ProgressDetailsForSecureScore:
      allOf:
      - $ref: '#/components/schemas/ProgressDetails'
      - properties:
          secure_score:
            type: string
            description: Secure Score
        type: object
    ProgressDetailsForSsmData:
      allOf:
      - $ref: '#/components/schemas/ProgressDetails'
      - properties:
          sync_type:
            type: string
            description: Manual or Automation sync
        type: object
    ServiceAccountFilter:
      properties:
        name:
          type: string
          description: Regular expression to match against the name
        name_matches_any_descendants:
          type: boolean
          description: If set, includes accounts that have any descendant whose name matches the given name expression.
          default: false
        search_text:
          type: array
          description: 'Free-text search terms (e.g. comma-separated values from a single search box). An account matches when any term is a case-insensitive substring of any of its identity fields: name, source account id, and the provider native details for Azure (CSP/EA/MCA partner, customer, subscription, department, billing profile, invoice section, enrollment), AWS (account, organization unit), GCP (project, folder, organization, billing account) and OCI (tenancy). Terms do not target a specific field.'
          items:
            type: string
        scope:
          type: string
          description: Scope of the account.
          example: global
          enum:
          - global
          - account
          - tenant
          x-cs-enum-type: ServiceAccountScope
        master_account_ids:
          type: array
          description: Only include accounts from these master accounts.
          items:
            type: string
            x-cs-type: ObjectId
        only_active_tenants:
          type: boolean
          description: Only include accounts from active Tenants
        tenant_ids:
          type: array
          description: Only include accounts from these Tenants.
          items:
            type: string
            x-cs-type: ObjectId
        parent_ids:
          type: array
          description: Include accounts directly under these parents.
          items:
            type: string
            x-cs-type: ObjectId
        include_parents_in_results:
          type: boolean
          description: Also include accounts whose ID matches any of the given parent_ids directly, in addition to their descendants.
          default: false
        include_children_recursively:
          type: boolean
          description: Also include accounts that are in the descendant hierarchy in any of given parent_ids.
          default: false
        include_billing_as_parent:
          type: boolean
          description: Also include accounts whose billing_account_id matches any of the given parent_ids, or their descendants when include_children_recursively is set.
          default: false
        include_resource_as_parent:
          type: boolean
          description: Also include accounts whose resource_service_account_id matches any of the given parent_ids, or their descendants when include_children_recursively is set.
          default: false
        include_commercial_as_parent:
          type: boolean
          description: Also include AWS GovCloud accounts whose commercial_account_id matches any of the given parent_ids, or their descendants when include_children_recursively is set.
          default: false
        exclude_service_account_ids:
          type: array
          description: Add to exclude the specified accounts from results; when include_children_recursively is set along with parent_ids, their descendants are also excluded
          items:
            type: string
            x-cs-type: ObjectId
        with_parent:
          type: boolean
          description: Only include accounts with a parent.
        without_parent:
          type: boolean
          description: Only include accounts without a parent.
        currencies:
          type: array
          description: Only include accounts using these currencies.
          items:
            type: string
            description: currency of the cost. Example 'currency':'USD'
            example: AED
            enum:
            - AED
            - ALL
            - ARS
            - AUD
            - BAM
            - BDT
            - BGN
            - BHD
            - BRL
            - CAD
            - CHF
            - CLP
            - CNY
            - COP
            - CRC
            - CZK
            - DKK
            - EGP
            - EUR
            - GBP
            - HKD
            - HRK
            - HUF
            - IDR
            - ILS
            - INR
            - ISK
            - JPY
            - KES
            - KRW
            - KWD
            - KZT
            - MOP
            - MVR
            - MXN
            - MYR
            - NOK
            - NZD
            - OMR
            - PEN
            - PHP
            - PKR
            - PLN
            - QAR
            - RON
            - RSD
            - RUB
            - SAR
            - SEK
            - SGD
            - THB
            - TRY
            - TWD
            - USD
            - VND
            - ZAR
            x-cs-enum-type: Currency
        statuses:
          type: array
          description: Only include accounts with these statuses.
          items:
            type: string
            description: Indicates the status of the cloud account in corestack
            example: not_validated
            enum:
            - not_validated
            - validated
            - not_onboarded
            - not_onboarded_validated
            - active
            - inactive
            - retired
            - deleting
            x-cs-enum-type: ServiceAccountStatus
        include_draft_accounts:
          type: boolean
          description: Include accounts created by caller that are in draft mode
        onboarded_any:
          type: array
          description: Include accounts with any of these features onboarded
          items:
            type: string
            description: Feature for the account
            example: appsecops__onboarding
            enum:
            - appsecops__onboarding
            - assessments__wellarchitected
            - assessments__wellarchitected__auto_assessment
            - assessments__wellarchitected__auto_assessment__aws_sync
            - assessments__wellarchitected__custom_framework__aws_sync
            - cloudops__activity
            - cloudops__activity__periodic
            - cloudops__activity__real_time_sync_read
            - cloudops__activity__real_time_sync_write
            - cloudops__backup_management
            - cloudops__cloudwatch_agent
            - cloudops__monitoring_alerts
            - cloudops__monitoring_alerts__periodic
            - cloudops__monitoring_alerts__real_time_sync_read
            - cloudops__monitoring_alerts__real_time_sync_write
            - cloudops__patch_management
            - cloudops__runbooks
            - cloudops__utilization
            - core__inventory
            - core__inventory__management
            - core__policy_engine
            - core__policy_engine__aws_config
            - core__policy_engine__azure_policy
            - core__resource_discovery
            - core__resource_discovery_extra
            - core__tagging_governance
            - core__tagging_governance_extra
            - finops__assessments
            - finops__azurehybridbenefit_recommendations
            - finops__budget
            - finops__cloud_native_recommendations
            - finops__cost_anomaly
            - finops__cost_processing
            - finops__cost_savings
            - finops__enterprise_discount_program
            - finops__reservation
            - finops__right_size_recommendations
            - finops__savings_plans
            - finops__schedule_recommendations
            - governance__request
            - integration__application_performance_monitoring
            - integration__azure_security_graph
            - integration__azure_sentinel
            - integration__tenable_nessus
            - secops__access
            - secops__aws_security_hub
            - secops__cloud_native_security_information_event_management
            - secops__compliance
            - secops__threats
            - secops__threats__posture_read
            - secops__threats__posture_write
            - secops__threats__realtime_alerts_read
            - secops__threats__realtime_alerts_write
            - secops__vulnerabilities
            - secops__vulnerabilities__read
            - secops__vulnerabilities__write
            - selfservice__governance
            - stackops
            - stackops__deployment
            - system__roles
            x-cs-enum-type: ServiceAccountFeature
        onboarded_all:
          type: array
          description: Include accounts with all of these features onboarded
          items:
            type: string
            description: Feature for the account
            example: appsecops__onboarding
            enum:
            - appsecops__onboarding
            - assessments__wellarchitected
            - assessments__wellarchitected__auto_assessment
            - assessments__wellarchitected__auto_assessment__aws_sync
            - assessments__wellarchitected__custom_framework__aws_sync
            - cloudops__activity
            - cloudops__activity__periodic
            - cloudops__activity__real_time_sync_read
            - cloudops__activity__real_time_sync_write
            - cloudops__backup_management
            - cloudops__cloudwatch_agent
            - cloudops__monitoring_alerts
            - cloudops__monitoring_alerts__periodic
            - cloudops__monitoring_alerts__real_time_sync_read
            - cloudops__monitoring_alerts__real_time_sync_write
            - cloudops__patch_management
            - cloudops__runbooks
            - cloudops__utilization
            - core__inventory
            - core__inventory__management
            - core__policy_engine
            - core__policy_engine__aws_config
            - core__policy_engine__azure_policy
            - core__resource_discovery
            - core__resource_discovery_extra
            - core__tagging_governance
            - core__tagging_governance_extra
            - finops__assessments
            - finops__azurehybridbenefit_recommendations
            - finops__budget
            - finops__cloud_native_recommendations
            - finops__cost_anomaly
            - finops__cost_processing
            - finops__cost_savings
            - finops__enterprise_discount_program
            - finops__reservation
            - finops__right_size_recommendations
            - finops__savings_plans
            - finops__schedule_recommendations
            - governance__request
            - integration__application_performance_monitoring
            - integration__azure_security_graph
            - integration__azure_sentinel
            - integration__tenable_nessus
            - secops__access
            - secops__aws_security_hub
            - secops__cloud_native_security_information_event_management
            - secops__compliance
            - secops__threats
            - secops__threats__posture_read
            - secops__threats__posture_write
            - secops__threats__realtime_alerts_read
            - secops__threats__realtime_alerts_write
            - secops__vulnerabilities
            - secops__vulnerabilities__read
            - secops__vulnerabilities__write
            - selfservice__governance
            - stackops
            - stackops__deployment
            - system__roles
            x-cs-enum-type: ServiceAccountFeature
        skip_inactive_features:
          type: boolean
          description: If set, onboarded_any and onboarded_all will also check if the features are actives
        check_onboarding:
          type: boolean
          description: If set, onboarded_any and onboarded_all will use desired_status instead of status
        strict_onboarded:
          type: boolean
          description: If set, onboarded_any and onboarded_all will ignore features in onboarding state
        only_restricted_cloud:
          type: boolean
          description: Only include accounts in restricted datacenters
        exclude_restricted_cloud:
          type: boolean
          description: Exclude all accounts in restricted datacenters
        native_details:
          type: array
          description: Only include accounts with these native types.
          items:
            $ref: '#/components/schemas/ServiceAccountNativeDetailsBase'
        credentials:
          type: array
          description: Only include accounts with these credentials types.
          items:
            $ref: '#/components/schemas/ServiceAccountCredentialsBase'
        custom_tags:
          type: array
          description: Only include accounts with all these key/value pairs
          items:
            $ref: '#/components/schemas/KeyValuePair'
        sync_status:
          description: Only include accounts with these sync statuses
          $ref: '#/components/schemas/ServiceAccountSync'
        resource_service_account_ids:
          type: array
          description: Resource service account ID
          items:
            type: string
            x-cs-type: ObjectId
        cluster_agent_statuses:
          type: array
          description: Only include cluster accounts with these agent statuses.
          items:
            type: string
            description: Indicates the status of the Cluster Agent
            example: active
            enum:
            - active
            - inactive
            - in_progress
            x-cs-enum-type: ClusterAgentStatus
      type: object
    ServiceAccountCredentialsBase:
      required:
      - type
      properties: {}
      discriminator:
        propertyName: type
      type: object
      x-cs-subtypes:
      - subtype_model: ServiceAccountCredentialsBaseForAws
        subtype_name: ServiceAccountCredentialsBaseForAws
      - subtype_model: ServiceAccountCredentialsForAwsAccessKeyProtocol
        subtype_name: ServiceAccountCredentialsForAwsAccessKeyProtocol
      - subtype_model: ServiceAccountCredentialsForAwsAssumeRoleProtocol
        subtype_name: ServiceAccountCredentialsForAwsAssumeRoleProtocol
      - subtype_model: ServiceAccountCredentialsBaseForAzure
        subtype_name: ServiceAccountCredentialsBaseForAzure
      - subtype_model: ServiceAccountCredentialsBaseForAzureApplication
        subtype_name: ServiceAccountCredentialsBaseForAzureApplication
      - subtype_model: ServiceAccountCredentialsBaseForAzureApiKey
        subtype_name: ServiceAccountCredentialsBaseForAzureApiKey
      - subtype_model: ServiceAccountCredentialsForAzureSubscription
        subtype_name: ServiceAccountCredentialsForAzureSubscription
      - subtype_model: ServiceAccountCredentialsBaseForAzureCsp
        subtype_name: ServiceAccountCredentialsBaseForAzureCsp
      - subtype_model: ServiceAccountCredentialsForAzureCspApplication
        subtype_name: ServiceAccountCredentialsForAzureCspApplication
      - subtype_model: ServiceAccountCredentialsForAzureCspAuthorizationCode
        subtype_name: ServiceAccountCredentialsForAzureCspAuthorizationCode
      - subtype_model: ServiceAccountCredentialsForAzureEaApiKey
        subtype_name: ServiceAccountCredentialsForAzureEaApiKey
      - subtype_model: ServiceAccountCredentialsForAzureEaApplication
        subtype_name: ServiceAccountCredentialsForAzureEaApplication
      - subtype_model: ServiceAccountCredentialsForAzureMcaApplication
        subtype_name: ServiceAccountCredentialsForAzureMcaApplication
      - subtype_model: ServiceAccountCredentialsBaseForOci
        subtype_name: ServiceAccountCredentialsBaseForOci
      - subtype_model: ServiceAccountCredentialsForOci
        subtype_name: ServiceAccountCredentialsForOci
      - subtype_model: ServiceAccountCredentialsBaseForGcp
        subtype_name: ServiceAccountCredentialsBaseForGcp
      - subtype_model: ServiceAccountCredentialsBaseForGcpOauthProtocol
        subtype_name: ServiceAccountCredentialsBaseForGcpOauthProtocol
      - subtype_model: ServiceAccountCredentialsBaseForGcpServiceAccountProtocol
        subtype_name: ServiceAccountCredentialsBaseForGcpServiceAccountProtocol
      - subtype_model: ServiceAccountCredentialsForGcpBillingAccountOauthProtocol
        subtype_name: ServiceAccountCredentialsForGcpBillingAccountOauthProtocol
      - subtype_model: ServiceAccountCredentialsForGcpBillingAccountServiceAccountProtocol
        subtype_name: ServiceAccountCredentialsForGcpBillingAccountServiceAccountProtocol
      - subtype_model: ServiceAccountCredentialsForGcpParentBillingAccountOauthProtocol
        subtype_name: ServiceAccountCredentialsForGcpParentBillingAccountOauthProtocol
      - subtype_model: ServiceAccountCredentialsForGcpParentBillingAccountServiceAccountProtocol
        subtype_name: ServiceAccountCredentialsForGcpParentBillingAccountServiceAccountProtocol
      - subtype_model: ServiceAccountCredentialsForGcpLinkedProjectAccountOauthProtocol
        subtype_name: ServiceAccountCredentialsForGcpLinkedProjectAccountOauthProtocol
      - subtype_model: ServiceAccountCredentialsForGcpServiceAccountProtocol
        subtype_name: ServiceAccountCredentialsForGcpServiceAccountProtocol
      - subtype_model: ServiceAccountCredentialsForGcpInherited
        subtype_name: ServiceAccountCredentialsForGcpInherited
      - subtype_model: ServiceAccountCredentialsForAzureStack
        subtype_name: ServiceAccountCredentialsForAzureStack
      - subtype_model: ServiceAccountCredentialsForCloudStack
        subtype_name: ServiceAccountCredentialsForCloudStack
      - subtype_model: ServiceAccountCredentialsBaseForOpenStack
        subtype_name: ServiceAccountCredentialsBaseForOpenStack
      - subtype_model: ServiceAccountCredentialsForOpenStack
        subtype_name: ServiceAccountCredentialsForOpenStack
      - subtype_model: ServiceAccountCredentialsForBasicAuth
        subtype_name: ServiceAccountCredentialsForBasicAuth
      - subtype_model: ServiceAccountCredentialsForRackspace
        subtype_name: ServiceAccountCredentialsForRackspace
      - subtype_model: ServiceAccountCredentialsForMsVmm
        subtype_name: ServiceAccountCredentialsForMsVmm
      - subtype_model: ServiceAccountCredentialsForVmware
        subtype_name: ServiceAccountCredentialsForVmware
      - subtype_model: ServiceAccountCredentialsForVcenter
        subtype_name: ServiceAccountCredentialsForVcenter
      - subtype_model: ServiceAccountCredentialsBaseForVmwareVcd
        subtype_name: ServiceAccountCredentialsBaseForVmwareVcd
      - subtype_model: ServiceAccountCredentialsForVmwareVcdMaster
        subtype_name: ServiceAccountCredentialsForVmwareVcdMaster
      - subtype_model: ServiceAccountCredentialsForVmwareVcdOrganizationVdc
        subtype_name: ServiceAccountCredentialsForVmwareVcdOrganizationVdc
      - subtype_model: ServiceAccountCredentialsForPrivateCloud
        subtype_name: ServiceAccountCredentialsForPrivateCloud
      - subtype_model: ServiceAccountCredentialsForAppDynamics
        subtype_name: ServiceAccountCredentialsForAppDynamics
      - subtype_model: ServiceAccountCredentialsForAppInsights
        subtype_name: ServiceAccountCredentialsForAppInsights
      - subtype_model: ServiceAccountCredentialsForAzureDevops
        subtype_name: ServiceAccountCredentialsForAzureDevops
      - subtype_model: ServiceAccountCredentialsBaseForAzureSecurityGraph
        subtype_name: ServiceAccountCredentialsBaseForAzureSecurityGraph
      - subtype_model: ServiceAccountCredentialsForAzureSecurityGraphBasicAuthProtocol
        subtype_name: ServiceAccountCredentialsForAzureSecurityGraphBasicAuthProtocol
      - subtype_model: ServiceAccountCredentialsForAzureSecurityGraphOAuthProtocol
        subtype_name: ServiceAccountCredentialsForAzureSecurityGraphOAuthProtocol
      - subtype_model: ServiceAccountCredentialsForAzureSentinel
        subtype_name: ServiceAccountCredentialsForAzureSentinel
      - subtype_model: ServiceAccountCredentialsForCorestack
        subtype_name: ServiceAccountCredentialsForCorestack
      - subtype_model: ServiceAccountCredentialsForDockerHub
        subtype_name: ServiceAccountCredentialsForDockerHub
      - subtype_model: ServiceAccountCredentialsForElasticSearch
        subtype_name: ServiceAccountCredentialsForElasticSearch
      - subtype_model: ServiceAccountCredentialsForFreshservice
        subtype_name: ServiceAccountCredentialsForFreshservice
      - subtype_model: ServiceAccountCredentialsBaseForGitHub
        subtype_name: ServiceAccountCredentialsForGitHub
      - subtype_model: ServiceAccountCredentialsForGitHubAppProtocol
        subtype_name: ServiceAccountCredentialsForGitHubAppProtocol
      - subtype_model: ServiceAccountCredentialsForGitHubPersonalAccessTokenProtocol
        subtype_name: ServiceAccountCredentialsForGitHubPersonalAccessTokenProtocol
      - subtype_model: ServiceAccountCredentialsForJiraDatacenter
        subtype_name: ServiceAccountCredentialsForJiraDatacenter
      - subtype_model: ServiceAccountCredentialsForJiraServicedesk
        subtype_name: ServiceAccountCredentialsForJiraServicedesk
      - subtype_model: ServiceAccountCredentialsForJiraServiceManagementBasicAuthProtocol
        subtype_name: ServiceAccountCredentialsForJiraServiceManagementBasicAuthProtocol
      - subtype_model: ServiceAccountCredentialsForJiraServiceManagementInherited
        subtype_name: ServiceAccountCredentialsForJiraServiceManagementInherited
      - subtype_model: ServiceAccountCredentialsForJenkins
        subtype_name: ServiceAccountCredentialsForJenkins
      - subtype_model: ServiceAccountCredentialsForLogstash
        subtype_name: ServiceAccountCredentialsForLogstash
      - subtype_model: ServiceAccountCredentialsForMicrosoftTeams
        subtype_name: ServiceAccountCredentialsForMicrosoftTeams
      - subtype_model: ServiceAccountCredentialsForNagios
        subtype_name: ServiceAccountCredentialsForNagios
      - subtype_model: ServiceAccountCredentialsForNewrelic
        subtype_name: ServiceAccountCredentialsForNewrelic
      - subtype_model: ServiceAccountCredentialsForPrometheus
        subtype_name: ServiceAccountCredentialsForPrometheus
      - subtype_model: ServiceAccountCredentialsForQualys
        subtype_name: ServiceAccountCredentialsForQualys
      - subtype_model: ServiceAccountCredentialsForRedhatSatellite
        subtype_name: ServiceAccountCredentialsForRedhatSatellite
      - subtype_model: ServiceAccountCredentialsBaseForServiceNow
        subtype_name: ServiceAccountCredentialsBaseForServiceNow
      - subtype_model: ServiceAccountCredentialsForServiceNowOauthProtocol
        subtype_name: ServiceAccountCredentialsForServiceNowOauthProtocol
      - subtype_model: ServiceAccountCredentialsForServiceNowBasicAuthProtocol
        subtype_name: ServiceAccountCredentialsForServiceNowBasicAuthProtocol
      - subtype_model: ServiceAccountCredentialsForArrowSphere
        subtype_name: ServiceAccountCredentialsForArrowSphere
      - subtype_model: ServiceAccountCredentialsForTclItsm
        subtype_name: ServiceAccountCredentialsForTclItsm
      - subtype_model: ServiceAccountCredentialsForTenableNessus
        subtype_name: ServiceAccountCredentialsForTenableNessus
      - subtype_model: ServiceAccountCredentialsForZohoServiceDeskCloud
        subtype_name: ServiceAccountCredentialsForZohoServiceDeskCloud
      - subtype_model: ServiceAccountCredentialsForZohoServiceDeskOnPremise
        subtype_name: ServiceAccountCredentialsForZohoServiceDeskOnPremise
      - subtype_model: ServiceAccountCredentialsForZabbix
        subtype_name: ServiceAccountCredentialsForZabbix
      - subtype_model: ServiceAccountCredentialsBaseForKubernetesCluster
        subtype_name: ServiceAccountCredentialsBaseForKubernetesCluster
      - subtype_model: ServiceAccountCredentialsForKubernetesClusterPlatformManaged
        subtype_name: ServiceAccountCredentialsForKubernetesClusterPlatformManaged
      - subtype_model: ServiceAccountCredentialsForKubernetesClusterOnboarded
        subtype_name: ServiceAccountCredentialsForKubernetesClusterOnboarded
      - subtype_model: ServiceAccountCredentialsForKubernetesClusterAzureApplication
        subtype_name: ServiceAccountCredentialsForKubernetesClusterAzureApplication
      - subtype_model: ServiceAccountCredentialsBaseForKubernetesClusterAws
        subtype_name: ServiceAccountCredentialsBaseForKubernetesClusterAws
      - subtype_model: ServiceAccountCredentialsForKubernetesClusterAwsAccessKeyProtocol
        subtype_name: ServiceAccountCredentialsForKubernetesClusterAwsAccessKeyProtocol
      - subtype_model: ServiceAccountCredentialsForKubernetesClusterAwsAssumeRoleProtocol
        subtype_name: ServiceAccountCredentialsForKubernetesClusterAwsAssumeRoleProtocol
      - subtype_model: ServiceAccountCredentialsForKubernetesClusterOci
        subtype_name: ServiceAccountCredentialsForKubernetesClusterOci
      - subtype_model: ServiceAccountCredentialsBaseForKubernetesClusterGcp
        subtype_name: ServiceAccountCredentialsBaseForKubernetesClusterGcp
      - subtype_model: ServiceAccountCredentialsForKubernetesClusterGcpServiceAccountProtocol
        subtype_name: ServiceAccountCredentialsForKubernetesClusterGcpServiceAccountProtocol
      - subtype_model: ServiceAccountCredentialsForKubernetesClusterGcpOauthProtocol
        subtype_name: ServiceAccountCredentialsForKubernetesClusterGcpOauthProtocol
      - subtype_model: ServiceAccountCredentialsBaseForSaas
        subtype_name: ServiceAccountCredentialsForSaas
      - subtype_model: ServiceAccountCredentialsForSaasOnboarded
        subtype_name: ServiceAccountCredentialsForSaasOnboarded
      - subtype_model: ServiceAccountCredentialsBaseForSaasAws
        subtype_name: ServiceAccountCredentialsBaseForSaasAws
      - subtype_model: ServiceAccountCredentialsForSaasAwsAccessKeyProtocol
        subtype_name: ServiceAccountCredentialsForSaasAwsAccessKeyProtocol
      - subtype_model: ServiceAccountCredentialsForSaasAwsAssumeRoleProtocol
        subtype_name: ServiceAccountCredentialsForSaasAssumeRoleProtocol
      - subtype_model: ServiceAccountCredentialsForSaasOci
        subtype_name: ServiceAccountCredentialsForSaasOci
      - subtype_model: ServiceAccountCredentialsBaseForSaasGcp
        subtype_name: ServiceAccountCredentialsBaseForSaasGcp
      - subtype_model: ServiceAccountCredentialsForSaasGcpServiceAccountProtocol
        subtype_name: ServiceAccountCredentialsForSaasGcpServiceAccountProtocol
      - subtype_model: ServiceAccountCredentialsForSaasGcpOauthProtocol
        subtype_name: ServiceAccountCredentialsForSaasGcpOauthProtocol
      - subtype_model: ServiceAccountCredentialsForSaasAzureApplication
        subtype_name: ServiceAccountCredentialsForSaasAzureApplication
    ProgressDetailsForReservedInstances:
      allOf:
      - $ref: '#/components/schemas/ProgressDetails'
      - properties:
          back_filled:
            type: boolean
            description: If set, back fill was completed
        type: object
    GovernanceConfigurationBase:
      required:
      - type
      properties:
        version_number:
          type: integer
          description: Version number of this setting
      discriminator:
        propertyName: type
      type: object
      x-cs-subtypes:
      - subtype_model: GovernanceConfigurationForCostAnomaly
        subtype_name: GovernanceConfigurationForCostAnomaly
      - subtype_model: GovernanceConfigurationForCompliance
        subtype_name: GovernanceConfigurationForCompliance
      - subtype_model: GovernanceConfigurationForCostRecommendationAzure
        subtype_name: GovernanceConfigurationForCostRecommendationAzure
      - subtype_model: GovernanceConfigurationForEDPAws
        subtype_name: GovernanceConfigurationForEDPAws
      - subtype_model: GovernanceConfigurationForActivityLogAws
        subtype_name: GovernanceConfigurationForActivityLogAws
      - subtype_model: GovernanceConfigurationForActivityLogAzure
        subtype_name: GovernanceConfigurationForActivityLogAzure
      - subtype_model: GovernanceConfigurationForActivityLogGcp
        subtype_name: GovernanceConfigurationForActivityLogGcp
      - subtype_model: GovernanceConfigurationForActivityLogOci
        subtype_name: GovernanceConfigurationForActivityLogOci
      - subtype_model: GovernanceConfigurationForAlertsAws
        subtype_name: GovernanceConfigurationForAlertsAws
      - subtype_model: GovernanceConfigurationForAlertsAzure
        subtype_name: GovernanceConfigurationForAlertsAzure
      - subtype_model: GovernanceConfigurationForAlertsGcp
        subtype_name: GovernanceConfigurationForAlertsGcp
      - subtype_model: GovernanceConfigurationForAlertsOci
        subtype_name: GovernanceConfigurationForAlertsOci
      - subtype_model: GovernanceConfigurationForLogAnalyticsWorkspacesAzure
        subtype_name: GovernanceConfigurationForLogAnalyticsWorkspacesAzure
      - subtype_model: GovernanceConfigurationForPatchManagementAzure
        subtype_name: GovernanceConfigurationForPatchManagementAzure
      - subtype_model: GovernanceConfigurationForMetricData
        subtype_name: GovernanceConfigurationForMetricData
      - subtype_model: GovernanceConfigurationForThreatsAws
        subtype_name: GovernanceConfigurationForThreatsAws
      - subtype_model: GovernanceConfigurationForThreatsAzure
        subtype_name: GovernanceConfigurationForThreatsAzure
      - subtype_model: GovernanceConfigurationForThreatsGcp
        subtype_name: GovernanceConfigurationForThreatsGcp
      - subtype_model: GovernanceConfigurationForThreatsOci
        subtype_name: GovernanceConfigurationForThreatsOci
      - subtype_model: GovernanceConfigurationForVulnerabilitiesAws
        subtype_name: GovernanceConfigurationForVulnerabilitiesAws
      - subtype_model: GovernanceConfigurationForVulnerabilitiesAzure
        subtype_name: GovernanceConfigurationForVulnerabilitiesAzure
      - subtype_model: GovernanceConfigurationForVulnerabilitiesGcp
        subtype_name: GovernanceConfigurationForVulnerabilitiesGcp
      - subtype_model: GovernanceConfigurationForVulnerabilitiesOci
        subtype_name: GovernanceConfigurationForVulnerabilitiesOci
      - subtype_model: GovernanceConfigurationForSecurityRecommendationAws
        subtype_name: GovernanceConfigurationForSecurityRecommendationAws
      - subtype_model: GovernanceConfigurationForServiceNowChangeManagement
        subtype_name: GovernanceConfigurationForServiceNowChangeManagement
      - subtype_model: GovernanceConfigurationForServiceNowIncidentManagement
        subtype_name: GovernanceConfigurationForServiceNowIncidentManagement
      - subtype_model: GovernanceConfigurationForServiceNowRequestManagement
        subtype_name: GovernanceConfigurationForServiceNowRequestManagement
      - subtype_model: GovernanceConfigurationForJiraDataCenterIncidentManagement
        subtype_name: GovernanceConfigurationForJiraDataCenterIncidentManagement
      - subtype_model: GovernanceConfigurationForJiraServiceDeskIncidentManagement
        subtype_name: GovernanceConfigurationForJiraServiceDeskIncidentManagement
      - subtype_model: GovernanceConfigurationForZohoServiceDeskIncidentManagement
        subtype_name: GovernanceConfigurationForZohoServiceDeskIncidentManagement
      - subtype_model: GovernanceConfigurationForTclItsmUserConfiguration
        subtype_name: GovernanceConfigurationForTclItsmUserConfiguration
      - subtype_model: GovernanceConfigurationForTclItsmCmdbConfiguration
        subtype_name: GovernanceConfigurationForTclItsmCmdbConfiguration
      - subtype_model: GovernanceConfigurationForPolicyAws
        subtype_name: GovernanceConfigurationForPolicyAws
      - subtype_model: GovernanceConfigurationForPolicyAzure
        subtype_name: GovernanceConfigurationForPolicyAzure
      - subtype_model: GovernanceConfigurationForFreshserviceIncidentManagement
        subtype_name: GovernanceConfigurationForFreshserviceIncidentManagement
      - subtype_model: GovernanceConfigurationForJiraServiceManagementIncidentManagement
        subtype_name: GovernanceConfigurationForJiraServiceManagementIncidentManagement
      - subtype_model: GovernanceConfigurationForJiraServiceManagementChangeManagement
        subtype_name: GovernanceConfigurationForJiraServiceManagementChangeManagement
      - subtype_model: GovernanceConfigurationForGithubProActiveScanner
        subtype_name: GovernanceConfigurationForGithubProActiveScanner
      - subtype_model: GovernanceConfigurationForGithubCopilot
        subtype_name: GovernanceConfigurationForGithubCopilot
      - subtype_model: GovernanceConfigurationForCostSavings
        subtype_name: GovernanceConfigurationForCostSavings
      - subtype_model: GovernanceConfigurationForKubernetesCluster
        subtype_name: GovernanceConfigurationForKubernetesCluster
    ProgressDetailsForEaUnitRate:
      allOf:
      - $ref: '#/components/schemas/ProgressDetails'
      - properties:
          records_processed:
            type: integer
            description: Number of records processed in the run
          has_price_sheet_access:
            type: boolean
            description: is the having price sheet access
          is_unit_rate_required:
            type: boolean
            description: is unit rate required to be pulled
        type: object
    ServiceAccountParentInfo:
      properties:
        parent_id:
          type: string
          description: ID of the parent account.
        parent_name:
          type: string
          description: Name of the parent account.
        native_details:
          description: Native details of the account. This is a required field.
          $ref: '#/components/schemas/ServiceAccountNativeDetailsBase'
      type: object
    CompartmentDetailsBase:
      required:
      - type
      properties:
        compartment_id:
          type: string
          description: Unique Id
        name:
          type: string
          description: Display Name
        description:
          type: string
          description: Description
        parent_id:
          type: string
          description: Parent Compartment Id
      discriminator:
        propertyName: type
      type: object
      x-cs-subtypes:
      - subtype_model: CompartmentDetailsForOCI
        subtype_name: CompartmentDetailsForOCI
    ProgressDetailsForGovernanceConfiguration:
      allOf:
      - $ref: '#/components/schemas/ProgressDetails'
      - properties:
          settings:
            type: array
            description: Governance Configuration settings
            items:
              $ref: '#/components/schemas/GovernanceConfigurationApplicationByContext'
        type: object
    ServiceAccountSortCriteria:
      required:
      - column
      properties:
        column:
          type: string
          example: Name
          enum:
          - Name
          - CreatedAt
          x-cs-enum-type: ServiceAccountSortColumn
        ascending:
          type: boolean
      type: object
    ServiceAccountAssessmentDetails:
      properties:
        score:
          type: integer
          description: Assessment Score
        grade:
          type: string
          description: Assessment Grade
        last_assessed_time:
          type: string
          description: Last Assessment Time
      type: object
    ProgressDetailsForDimensionPrecompute:
      allOf:
      - $ref: '#/components/schemas/ProgressDetails'
      - properties:
          by_dimension:
            type: array
            description: Per-dimension precompute status
            items:
              $ref: '#/components/schemas/DimensionPrecomputeStatusEntry'
        type: object
    GovernanceConfigurationApplicationByContext:
      properties:
        context:
          description: Governance Configuration settings to apply
          $ref: '#/components/schemas/GovernanceConfigurationBase'
        steps:
          type: array
          description: Steps to apply configuration
          items:
            $ref: '#/components/schemas/GovernanceConfigurationApplicationStep'
      type: object
    ProgressDetailsForCostProcessing:
      allOf:
      - $ref: '#/components/schemas/ProgressDetails'
      - properties:
          processing_memory:
            description: Processing history
            $ref: '#/components/schemas/BaseCostProcessingMemory'
        type: object
    LocationDetailsBase:
      required:
      - type
      properties:
        location_id:
          type: string
          description: Unique Id
        name:
          type: string
          description: Display Name
        description:
          type: string
          description: Description
      discriminator:
        propertyName: type
      type: object
      x-cs-subtypes:
      - subtype_model: LocationDetailsForAws
        subtype_name: LocationDetailsForAws
      - subtype_model: LocationDetailsForAzure
        subtype_name: LocationDetailsForAzure
      - subtype_model: LocationDetailsForGcp
        subtype_name: LocationDetailsForGcp
      - subtype_model: LocationDetailsForOci
        subtype_name: LocationDetailsForOci
      - subtype_model: LocationDetailsForOpenstack
        subtype_name: LocationDetailsForOpenstack
    DimensionPrecomputeVersionState:
      properties:
        version_id:
          type: string
          description: sys_id of the dimension head version
        precompute:
          type: boolean
          description: Whether precompute is enabled in the head version
      type: object
  securitySchemes:
    auth_token:
      type: apiKey
      in: header
      name: X-Auth-Token