openapi: 3.2.0 info: title: Drata Events API version: V2 contact: {} description: 'Operations tagged Events across 2 of this provider''s published API definitions: drata-api-v2-openapi.json, drata-api-v2-openapi.yml. Each path carries the servers of the definition it was published in.' servers: - url: https://public-api.drata.com/public/v2 - url: https://public-api.eu.drata.com/public/v2 - url: https://public-api.apac.drata.com/public/v2 tags: - name: Events description: Events record the activity of User and automated processes in the Drata platform. paths: /events: get: description: 'Find Events matching the provided filters. 🔒 Requires **Event Tracking: List Events** permission.' operationId: EventsPublicV2Controller_listEvents parameters: - name: cursor required: false in: query description: This parameter is used to paginate through results. No value is needed for the first request. If there are additional results, the response will contain a `pagination.cursor` value that can be used in the subsequent request to retrieve the next page of results schema: type: string - name: size required: false in: query description: Number of results to return schema: minimum: 1 maximum: 500 default: 50 type: number - name: sort required: false in: query description: Events can only be sorted by create date schema: $ref: '#/components/schemas/EventSortTypeLimitedEnum' - name: sortDir required: false in: query description: The direction to sort the data schema: $ref: '#/components/schemas/SortDirectionEnum' - name: includeTotalCount required: false in: query description: Include total count of all matching records in response. Only honored on first page (when cursor is null). schema: default: false example: false type: boolean - name: expand[] required: false in: query description: List of subcollections and sub-objects to expand schema: type: array items: $ref: '#/components/schemas/EventExpandEnum' - name: type required: false in: query description: Filter data to events of this type schema: $ref: '#/components/schemas/EventTypeEnum' - name: source required: false in: query description: Filter data to events of this source schema: $ref: '#/components/schemas/EventSourceEnum' - name: category required: false in: query description: Filter data to events of this category schema: $ref: '#/components/schemas/EventCategoryEnum' - name: connectionId required: false in: query description: The connection to filter events by. A null/blank value will return events without a connection. schema: type: - number - 'null' - name: userId required: false in: query description: The user to filter events by. A null/blank value will return events without a user. schema: type: - number - 'null' - name: workspaceId required: false in: query description: The workspace to filter events to schema: type: number - name: createdAtStartDate required: false in: query description: Filters the events to those with a creation date greater than or equal to this date and time. schema: format: date-time type: string - name: createdAtEndDate required: false in: query description: Filters the events to those with a creation date less than or equal to this date and time schema: format: date-time type: string responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/EventsResponsePublicV2Dto' '400': description: Malformed data and/or validation errors content: application/json: schema: $ref: '#/components/schemas/ExceptionResponsePublicV2Dto' '401': description: Invalid Authorization content: application/json: schema: $ref: '#/components/schemas/ExceptionResponseDto' '403': description: You are not allowed to perform this action content: application/json: schema: $ref: '#/components/schemas/ExceptionResponseDto' '412': description: You must accept the Drata terms and conditions to use the API content: application/json: schema: $ref: '#/components/schemas/ExceptionResponseDto' '500': description: Internal server error content: application/json: schema: $ref: '#/components/schemas/ExceptionResponseDto' security: - bearer: [] summary: List Events tags: - Events x-drata-permissions: - event-tracking-get x-product-area: - EVENT_TRACKING servers: - url: https://public-api.drata.com/public/v2 - url: https://public-api.eu.drata.com/public/v2 - url: https://public-api.apac.drata.com/public/v2 /events/{eventId}: get: description: 'Get details for an Event. 🔒 Requires **Event Tracking: Get Event** permission.' operationId: EventsPublicV2Controller_getEvent parameters: - name: eventId required: true in: path schema: type: string - name: cursor required: false in: query description: This parameter is used to paginate through results. No value is needed for the first request. If there are additional results, the response will contain a `pagination.cursor` value that can be used in the subsequent request to retrieve the next page of results schema: type: string - name: size required: false in: query description: Number of results to return schema: minimum: 1 maximum: 500 default: 50 type: number - name: sort required: false in: query description: Which field to sort by schema: $ref: '#/components/schemas/SortTypeLimitedEnum' - name: sortDir required: false in: query description: The direction to sort the data schema: $ref: '#/components/schemas/SortDirectionEnum' - name: expand[] required: false in: query description: List of subcollections and sub-objects to expand schema: type: array items: $ref: '#/components/schemas/EventExpandEnum' responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/EventResponsePublicV2Dto' '400': description: Malformed data and/or validation errors content: application/json: schema: $ref: '#/components/schemas/ExceptionResponsePublicV2Dto' '401': description: Invalid Authorization content: application/json: schema: $ref: '#/components/schemas/ExceptionResponseDto' '403': description: You are not allowed to perform this action content: application/json: schema: $ref: '#/components/schemas/ExceptionResponseDto' '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ExceptionResponsePublicV2Dto' '412': description: You must accept the Drata terms and conditions to use the API content: application/json: schema: $ref: '#/components/schemas/ExceptionResponseDto' '500': description: Internal server error content: application/json: schema: $ref: '#/components/schemas/ExceptionResponseDto' security: - bearer: [] summary: Get Event tags: - Events x-drata-permissions: - event-tracking-get-event x-product-area: - EVENT_TRACKING servers: - url: https://public-api.drata.com/public/v2 - url: https://public-api.eu.drata.com/public/v2 - url: https://public-api.apac.drata.com/public/v2 /events/{eventId}/download-jobs: post: description: 'Creates an asynchronous job to generate a PDF for an Event. 🔒 Requires **Event Tracking: Get Event** permission.' operationId: EventsPublicV2Controller_createEventDownloadJob parameters: - name: eventId required: true in: path schema: type: string responses: '201': description: Created content: application/json: schema: $ref: '#/components/schemas/EventDownloadJobResponsePublicV2Dto' '400': description: Malformed data and/or validation errors content: application/json: schema: $ref: '#/components/schemas/ExceptionResponsePublicV2Dto' '401': description: Invalid Authorization content: application/json: schema: $ref: '#/components/schemas/ExceptionResponseDto' '403': description: You are not allowed to perform this action content: application/json: schema: $ref: '#/components/schemas/ExceptionResponseDto' '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ExceptionResponsePublicV2Dto' '412': description: You must accept the Drata terms and conditions to use the API content: application/json: schema: $ref: '#/components/schemas/ExceptionResponseDto' '500': description: Internal server error content: application/json: schema: $ref: '#/components/schemas/ExceptionResponseDto' security: - bearer: [] summary: Create Event PDF Download Job tags: - Events x-drata-permissions: - event-tracking-get-event x-product-area: - EVENT_TRACKING servers: - url: https://public-api.drata.com/public/v2 - url: https://public-api.eu.drata.com/public/v2 - url: https://public-api.apac.drata.com/public/v2 /events/{eventId}/download-jobs/{jobId}: get: description: 'Retrieves the Event PDF download job. 🔒 Requires **Event Tracking: Get Event** permission.' operationId: EventsPublicV2Controller_getEventDownloadJobStatus parameters: - name: eventId required: true in: path schema: type: string - name: jobId required: true in: path schema: type: string responses: '200': description: Successful content: application/json: schema: $ref: '#/components/schemas/EventDownloadJobResponsePublicV2Dto' '400': description: Malformed data and/or validation errors content: application/json: schema: $ref: '#/components/schemas/ExceptionResponsePublicV2Dto' '401': description: Invalid Authorization content: application/json: schema: $ref: '#/components/schemas/ExceptionResponseDto' '403': description: You are not allowed to perform this action content: application/json: schema: $ref: '#/components/schemas/ExceptionResponseDto' '404': description: Not Found content: application/json: schema: $ref: '#/components/schemas/ExceptionResponsePublicV2Dto' '412': description: You must accept the Drata terms and conditions to use the API content: application/json: schema: $ref: '#/components/schemas/ExceptionResponseDto' '500': description: Internal server error content: application/json: schema: $ref: '#/components/schemas/ExceptionResponseDto' security: - bearer: [] summary: Get Event PDF Export tags: - Events x-drata-permissions: - event-tracking-get-event x-product-area: - EVENT_TRACKING servers: - url: https://public-api.drata.com/public/v2 - url: https://public-api.eu.drata.com/public/v2 - url: https://public-api.apac.drata.com/public/v2 components: schemas: ExceptionResponsePublicV2Dto: type: object properties: name: type: string statusCode: type: number message: type: string code: type: number debugInfo: type: object properties: name: type: string message: type: string stack: type: string required: - name - message required: - name - statusCode - message - code UserCompactResponsePublicV2Dto: type: object properties: id: type: number example: 1 description: User ID email: type: string example: email@example.com description: User email firstName: type: - string - 'null' example: Sally description: User first name lastName: type: - string - 'null' example: Smith description: User last name createdAt: type: string format: date-time example: '2025-07-01T16:45:55.246Z' description: User created at updatedAt: type: string format: date-time example: '2025-07-01T16:45:55.246Z' description: User last updated at required: - id - email - firstName - lastName - createdAt - updatedAt PaginationTotalCountResponsePublicV2Dto: type: object properties: cursor: type: - string - 'null' description: When this is not null, it indicates there is additional data. Pass this value in to the `cursor` parameter to fetch the next page of data. totalCount: type: - number - 'null' description: Total count of all matching items (not limited by page size). Only included when `includeTotalCount=true` is passed on the first page (no cursor). required: - cursor EventResponsePublicV2Dto: type: object properties: id: type: string example: aaaaaaaa-bbbb-0000-cccc-dddddddddddd description: Event UUID type: description: The type of event allOf: - $ref: '#/components/schemas/EventTypeEnum' category: description: The category of event allOf: - $ref: '#/components/schemas/EventCategoryEnum' source: description: The source of the event (APP or AUTOPILOT) allOf: - $ref: '#/components/schemas/EventSourceEnum' description: type: string example: Wile E. Coyote updated the company info. description: The description of the event metadata: type: object properties: dto: type: - object - 'null' additionalProperties: true targetEntity: type: - object - 'null' additionalProperties: true targetEntities: type: array items: type: - object - 'null' additionalProperties: true fileKey: type: - string - 'null' sourceData: type: - object - 'null' additionalProperties: true taskType: type: - number - 'null' request: type: - object - 'null' additionalProperties: true response: type: - object - 'null' additionalProperties: true description: The event metadata in JSON, only returned when `expand[]=metadata` is passed. status: description: The result of the test if the event type is an Autopilot test, otherwise null allOf: - $ref: '#/components/schemas/CheckResultStatusEnum' createdAt: type: string format: date-time description: Report created date timestamp userId: type: - number - 'null' description: The id of the user related to the event user: description: The user related to the event, only returned when `expand[]=user` is passed. allOf: - $ref: '#/components/schemas/UserCompactResponsePublicV2Dto' connectionId: type: - number - 'null' description: The id of the connection associated to the event connection: description: The associated connection if this event has one, only returned when `expand[]=connection` is passed. allOf: - $ref: '#/components/schemas/ConnectionCompactResponsePublicV2Dto' requestDescription: type: - string - 'null' example: Data was fetched from https://xyz.com/api/v1/data description: The human readable explanation of the workings of the associated AP test testName: type: - string - 'null' description: The name of the monitoring test associated with this event, only returned when `expand[]=testName` is passed. testId: type: - string - 'null' description: The identifier of the monitoring test associated with this event. This value may be duplicated across workspaces. Only returned when `expand[]=testId` is passed. issues: type: array items: type: object additionalProperties: true description: The issues associated to this event, if any, only returned when `expand[]=issues` or `expand[]=metadata` is passed. required: - id - type - category - source - description - status - createdAt - userId - connectionId - requestDescription EventSourceEnum: type: string enum: - APP - AUTOPILOT - PUBLIC_API - VENDOR_QUESTIONNAIRE - SCHEDULED - WORKFLOW - DRATA_POLICY CheckResultStatusEnum: type: string enum: - READY - PASSED - FAILED - ERROR - PREAUDIT SortDirectionEnum: type: string enum: - ASC - DESC EventCategoryEnum: type: string enum: - AUTOPILOT - AGENT - POLICY - PERSONNEL - REPORT - VENDOR - ASSET - COMPANY - ASSESSMENT - AUDIT - MONITOR - USER - CONNECTION - GRC - MDM - QUESTIONNAIRE - DEVICE - TRUST_PAGES - TRUST_CENTER_PRIVATE_ACCESS - RISK - COMPANY_NOTIFICATION - CUSTOM_FRAMEWORKS - MULTIPLE_PRODUCT_SUPPORT - PUBLIC_API_KEY - SERVICE_PROVIDER - TASK - AUTOPILOT_RECIPE_SCHEDULE - RESYNC - EVIDENCE - AUTOPILOT_RECIPE - ACCESS_REVIEW - DOCUMENT_SCANNED - CLOUD_STORAGE - VENDOR_PROFILE - CODEBASE - EXCEPTION_MANAGEMENT - WORKFLOWS - CUSTOM_CONNECTION - TRUST_CENTER_REPORTS - OUTBOUND_WEBHOOKS - SAFEBASE_MIGRATION - TRUST_ACCESS_REQUEST - SAFEBASE_ONBOARDING EventDownloadJobResponsePublicV2Dto: type: object properties: jobId: type: string example: aaaaaaaa-bbbb-0000-cccc-dddddddddddd description: The unique job ID for tracking the Event PDF download generation status: description: The current status of the event PDF download job example: Pending allOf: - $ref: '#/components/schemas/EvidenceJobStatusEnum' result: type: - string - 'null' description: The signed URL to download the event PDF (only available when status is `COMPLETED`). URL expires after 10 minutes from generation. example: https://s3.amazonaws.com/event-pdf.pdf?Signature=ABC123 createdAt: type: string format: date-time description: Timestamp when the job was created example: '2025-07-01T16:45:55.246Z' completedAt: type: - string - 'null' format: date-time description: Timestamp when the job was completed (only available when status is `COMPLETED` or `FAILED`) example: '2025-07-01T16:45:55.246Z' errorMessage: type: string description: Error message (only available when status is `FAILED`) example: 'Failed to generate event PDF: insufficient permissions' required: - jobId - status - result - createdAt - completedAt SortTypeLimitedEnum: type: string enum: - createdAt - updatedAt EventTypeEnum: type: string enum: - COMPANY_DATA_UPDATED - COMPANY_LOGO_UPDATED - COMPANY_KEY_PERSONNEL_UPDATED - COMPANY_ROLES_UPDATED - COMPANY_SECURITY_DATA_UPDATED - COMPANY_DOCUMENT_UPLOADED - COMPANY_DOCUMENT_DOWNLOADED - COMPANY_DOCUMENT_DELETED - COMPANY_HUMAN_RESOURCES_DATA_UPDATED - EMPLOYMENT_STATUS_UPDATED - REMINDER_EMAIL_SENT - POLICIES_DOWNLOAD_ALL - POLICY_DOWNLOADED - POLICY_VERSION_UPLOADED - POLICY_VERSION_ADDED - POLICY_VERSION_UPDATED - POLICY_OWNER_APPROVED - USER_POLICY_ACCEPTED - REPORTS_DOWNLOAD_ALL - REPORT_DOWNLOADED - REPORT_CREATED - REPORT_UPDATED - REPORT_DELETED - VENDORS_DOWNLOAD_ALL - VENDOR_CREATED - VENDOR_UPDATED - VENDOR_DELETED - VENDOR_DOCUMENT_UPLOADED - VENDOR_DOCUMENT_DELETED - VENDOR_DOCUMENT_DOWNLOADED - AUTOPILOT_FREQUENCY_UPDATED - TERMS_AGREED - AUTOPILOT_USER_CREATED - AUTOPILOT_USER_UPDATED - AUTOPILOT_PERSONNEL_SEPARATED - AUTOPILOT_COMPLIANCE_CHECK_UPDATED - AGENT_USER_DATA_UPDATED - USER_DOCUMENT_UPLOADED - USER_DOCUMENT_DELETED - USER_DOCUMENT_DOWNLOADED - BACKGROUND_CHECK_STARTED - PROVIDER_CONNECTION_CREATED - PROVIDER_CONNECTION_REMOVED - USER_IDENTITY_VERSION_CONTROL_LINK_UPDATED - USER_IDENTITY_VERSION_CONTROL_TOGGLE_UPDATED - USER_IDENTITY_VERSION_CONTROL_SERVICE_ACCOUNT_UPDATED - USER_IDENTITY_PERSONNEL_SYNCED - USER_IDENTITY_VERSION_CONTROL_SYNCED - USER_IDENTITY_VERSION_CONTROL_USER_UPDATED - USER_IDENTITY_VERSION_CONTROL_USER_CREATED - USER_IDENTITY_VERSION_CONTROL_USER_DISCONNECTED - AP_IDENTITY_PROVIDER_MFA_ENABLED - AP_IDENTITY_PROVIDER_UNKNOWN_EMAIL - AP_INTERNAL_POLICY_INCIDENT_RESPONSE - AP_INTERNAL_POLICY_INCIDENT_RESPONSE_FOLLOW_UPS - AP_INTERNAL_POLICY_INCIDENT_RESPONSE_LESSONS_LEARNED - AP_INTERNAL_POLICY_INCIDENT_RESPONSE_TEAM - AP_INTERNAL_POLICY_DATA_CLASSIFICATION - AP_INTERNAL_POLICY_SDLC - AP_INTERNAL_POLICY_ACCEPTABLE_USE - AP_INTERNAL_POLICY_ACCESS_CONTROL - AP_INTERNAL_POLICY_INFORMATION_SECURITY - AP_INTERNAL_POLICY_CODE_OF_CONDUCT - AP_INTERNAL_POLICY_DATA_PROTECTION - AP_INTERNAL_POLICY_PASSWORD - AP_INTERNAL_POLICY_BACKUPS - AP_INTERNAL_POLICY_PHYSICAL_SECURITY - AP_INTERNAL_POLICY_RISK_ASSESSMENT - AP_INTERNAL_POLICY_DISASTER_RECOVERY - AP_INTERNAL_POLICY_ENCRYPTION - AP_INTERNAL_POLICY_SYSTEM_ACCESS_CONTROL - AP_INTERNAL_POLICY_RESPONSIBLE_DISCLOSURE - AP_INTERNAL_POLICY_EMPLOYEE_CONFIDENTIALITY - AP_INTERNAL_POLICY_EMPLOYEE_ACCESS_TO_CUSTOMER_DATA - AP_INTERNAL_POLICY_RISK_REMEDIATION - AP_INTERNAL_POLICY_VULNERABILITY_MANAGEMENT - AP_INTERNAL_DOCUMENT_ORGANIZATIONAL_CHART - AP_COMPANY_POLICIES_APPROVED - AP_COMPANY_POLICIES_CREATED - AP_COMPANY_BOD_UNIQUE - AP_INTERNAL_REPORT_RISK_ASSESSMENT - AP_INTERNAL_REPORT_RISK_REMEDIATION - AP_INTERNAL_REPORT_VULNERABILITY - AP_INTERNAL_REPORT_PENETRATION - AP_INTERNAL_REPORT_DISASTER_RECOVERY - AP_INTERNAL_REPORT_BACKUP_AND_COMPLETENESS - AP_INTERNAL_REPORT_ARCHITECTURAL_DIAGRAM - AP_INTERNAL_REPORT_NETWORK_DIAGRAM - AP_INTERNAL_URL_SUPPORT - AP_INTERNAL_URL_PRIVACY_POLICY - AP_INTERNAL_URL_TERMS_OF_SERVICE - AP_EMPLOYEES_POLICIES_APPROVED - AP_EMPLOYEES_ACCEPTABLE_USE_POLICY - AP_EMPLOYEES_CODE_OF_CONDUCT_POLICY - AP_EMPLOYEES_DATA_PROTECTION_POLICY - AP_AGENT_PASSWORD_MANAGER - AP_AGENT_ANTI_VIRUS_APPLICATION - AP_AGENT_AUTO_UPDATES_ENABLED - AP_CONTRACTORS_CODE_OF_CONDUCT_POLICY - AP_CONTRACTORS_ACCEPTABLE_USE_POLICY - AP_COMPANY_INFRASTRUCTURE_MFA_ENABLED - AP_COMPANY_INFRASTRUCTURE_SSL_ENABLED - AP_COMPANY_WEBSITE_SSL_ENFORCED - AP_COMPANY_WEBSITE_SSL_CERT_NOT_EXPIRED - AP_COMPANY_WEBSITE_SSL_CERT_STRONG_CIPHERS - AP_COMPANY_WEBSITE_SSL_HAS_KNOWN_ISSUES - AP_COMPANY_PRIORITIZE_SECURITY_ISSUES - AP_VERSION_CONTROL_ENABLED - AP_VERSION_CONTROL_MFA_ENABLED - AP_VERSION_CONTROL_CODE_REVIEW_PROCESS - AP_INFRASTRUCTURE_AUTHORIZATION_DETAILS - AP_INFRASTRUCTURE_PUBLIC_SSH_DENIED - AP_INFRASTRUCTURE_DATA_ENCRYPTED - AP_INFRASTRUCTURE_DATA_MULTI_AZ - AP_INFRASTRUCTURE_STORAGE_ENCRYPTED - AP_INFRASTRUCTURE_DATA_MONITOR_CPU - AP_INFRASTRUCTURE_DATA_MONITOR_READ_IO - AP_INFRASTRUCTURE_DATA_MONITOR_WRITE_IO - AP_INFRASTRUCTURE_DATA_MONITOR_FREE_STORAGE - AP_INFRASTRUCTURE_INSTANCE_MONITOR_CPU - AP_INFRASTRUCTURE_DISALLOWS_TRAFFIC - AP_INFRASTRUCTURE_HAS_WAF - AP_INFRASTRUCTURE_HAS_BALANCERS - AP_INFRASTRUCTURE_QUEUE_MONITOR_MESSAGE_AGE - AP_INFRASTRUCTURE_CLOUD_DATA_FREE_STORAGE - AP_INFRASTRUCTURE_CREDENTIAL_REPORT - USER_IDENTITY_INFRASTRUCTURE_LINK_UPDATED - USER_IDENTITY_INFRASTRUCTURE_TOGGLE_UPDATED - USER_IDENTITY_INFRASTRUCTURE_SERVICE_ACCOUNT_UPDATED - USER_IDENTITY_INFRASTRUCTURE_SYNCED - USER_IDENTITY_INFRASTRUCTURE_USER_UPDATED - USER_IDENTITY_INFRASTRUCTURE_USER_CREATED - USER_IDENTITY_INFRASTRUCTURE_USER_DISCONNECTED - AGENT_UNREGISTERED - ASSETS_DOWNLOAD_ALL - BACKGROUND_CHECK_MANUAL - BACKGROUND_CHECK_DELETED - AP_INFRASTRUCTURE_STORAGE_RESTRICTED - AP_INFRASTRUCTURE_STORAGE_VERSIONING - AP_INFRASTRUCTURE_DATA_BACKUPS - AP_INTERNAL_INFRASTRUCTURE_IDENTITIES_REMOVED - AP_INTERNAL_INFRASTRUCTURE_IDENTITIES_UNIQUE - AP_INFRASTRUCTURE_STORAGE_WAF - AP_INTERNAL_VERSION_CONTROL_IDENTITIES_UNIQUE - AP_INTERNAL_VERSION_CONTROL_IDENTITIES_REMOVED - AP_INTERNAL_INFRASTRUCTURE_LINKED - AP_INTERNAL_VERSION_CONTROL_IDENTITIES_ONLY_AUTHORIZED_ACCESS - AP_INTERNAL_POLICY_PASSWORD_MANAGER_REQUIRED - AP_INTERNAL_POLICY_SECURITY_AWARENESS - AP_INTERNAL_POLICY_SECURITY_ENCRYPTION - AP_INTERNAL_URL_EXTERNAL_JOBS - AP_EMPLOYEES_SECURITY_COMPLIANCE - AP_EMPLOYEES_BACKGROUND_CHECK_COMPLIANCE - AP_EMPLOYEES_LOCK_SCREEN_COMPLIANCE - AP_EMPLOYEES_HARD_DRIVE_ENCRYPTED_COMPLIANCE - AP_VERSION_CONTROL_WRITE_ACCESS_TO_REPOSITORY - AP_VERSION_CONTROL_WRITE_ACCESS_TO_PRODUCTION_CODE - AP_CONTRACTORS_BACKGROUND_CHECK_COMPLIANCE - AP_COMPANY_SECURITY_COMMITTEE - AP_INTERNAL_DOCUMENT_PERFORMANCE_EVALUATION - AP_INTERNAL_DOCUMENT_EMPLOYEE_AGREEMENT - AP_INTERNAL_DOCUMENT_ENGINEERING_JOB_DESCRIPTION - AP_INTERNAL_DOCUMENT_MSA - AP_INTERNAL_POLICY_DATA_RETENTION - AP_INTERNAL_POLICY_CUSTOMER_DATA_RETENTION - AP_INTERNAL_POLICY_CLEAN_DESK - AP_INTERNAL_POLICY_SENSITIVE_DATA_DISPOSAL - COMPANY_SECURITY_REPORT_SETTING_UPDATED - COMPANY_SECURITY_REPORT_SHAREABLE_UPDATED - COMPANY_SECURITY_REPORT_SHARE_TOKEN_UPDATED - MONITOR_EXCLUSION_CREATED - MONITOR_EXCLUSION_UPDATED - MONITOR_EXCLUSION_DELETED - AP_INFRASTRUCTURE_ROOT_ACCOUNT_UNUSED - POLICY_ADDED - POLICY_VERSION_DELETED - COMPANY_ARCHIVED_DOWNLOADED - PROVIDER_CONNECTION_UPDATED - ARCHIVE_CONTROL - UNARCHIVE_CONTROL - EXTERNAL_EVIDENCE_DELETED - REPORT_ASSOCIATED_TO_CONTROL - REPORT_UNASSOCIATED_TO_CONTROL - UPLOAD_EXTERNAL_EVIDENCE - POLICY_ASSOCIATED_TO_CONTROL - POLICY_UNASSOCIATED_TO_CONTROL - REQUIREMENT_ASSOCIATED_TO_CONTROL - REQUIREMENT_UNASSOCIATED_TO_CONTROL - BACKGROUND_CHECK_COMPLETED - MDM_USER_DATA_UPDATED - CREATE_CONTROL - MANUAL_ASSET_CREATED - MANUAL_ASSET_UPDATED - MANUAL_ASSET_DELETED - ASSET_NOTES_UPDATED - COMPANY_WORKSTATION_CONFIGURATION_UPDATED - COMPANY_LINKS_DOWNLOADED - COMPANY_PACKAGE_DOWNLOADED - CONNECTIONS_AUDIT_PACKAGE_DOWNLOADED - HUMAN_RESOURCES_AUDIT_PACKAGE_DOWNLOADED - INFRASTRUCTURE_ACCESS_AUDIT_PACKAGE_DOWNLOADED - VERSION_CONTROL_AUDIT_PACKAGE_DOWNLOADED - EDIT_CONTROL_INFO - FORCE_SYNC_ON_A_PERSON - FORCE_SYNC_ON_ALL - CONTROL_OWNER_ADDED - CONTROL_OWNER_DELETED - POLICY_REVERT_TO_LATEST_TEMPLATE - POLICY_REVERT_TO_LATEST_VERSION - CONTROL_EVIDENCE_PACKAGE_GENERATED - AUDITOR_TOGGLE_READ_ONLY - FRAMEWORK_AUDIT_DETAILS_EDITED - VENDOR_MANUAL_UPLOAD - QUESTIONNAIRE_ARCHIVE_DOWNLOADED - VENDOR_QUESTIONNAIRE_RESPONSE_SAVED - VENDOR_QUESTIONNAIRE_EMAIL_SENT - GROUPS_IDENTITY_CREATED - GROUPS_IDENTITY_DELETED - GROUPS_PERSONNEL_IDENTITY_ADDED - GROUPS_PERSONNEL_IDENTITY_REMOVED - GROUPS_IDENTITY_UPDATED - BACKGROUND_LINKED_TO_PERSONNEL - BACKGROUND_UNLINKED_FROM_PERSONNEL - SECURITY_AWARENESS_TRAINING_RESET - POLICY_ASSIGNED_ALL - POLICY_ASSIGNED_NONE - POLICY_ASSIGNED_GROUPS - GROUPS_PERSONNEL_DELETED - GROUPS_PERSONNEL_ADDED - GROUPS_DELETED - POLICY_BECAME_ORPHAN - AP_CONTRACTORS_POLICIES_APPROVED - AP_CONTRACTORS_DATA_PROTECTION_POLICY - COMPANY_HIPAA_TRAINING_DATA_UPDATED - CONTROL_NOTE_ADDED - CONTROL_NOTE_DELETED - CONTROL_NOTE_EDITED - AUDITOR_ADDED - AUDITOR_REMOVED - AUDITOR_HAS_ENTERED_TO_TENANT_DETAILS - AUDITOR_DOES_A_READ_ONLY - ACCOUNT_INFORMATION_PACKAGE_CREATION - HIPAA_TRAINING_RESET - SECURITY_AWARENESS_TRAINING_UPDATED - AP_SECURITY_AWARENESS_TRAINING - DEVICE_UNLINKED - DEVICE_LINKED - DEVICE_DOCUMENT_DELETED - DEVICE_SWITCHED - DEVICE_DOCUMENT_DOWNLOADED - TRUST_PAGES_SAVED - EXTERNAL_EVIDENCE_URL_EDITED - REQUIREMENT_OUT_OF_SCOPE - REQUIREMENT_IN_SCOPE - CONTROLS_ASSOCIATED - CONTROLS_UNASSOCIATED - EXTERNAL_EVIDENCE_EDITED - APPROVED_REQUEST - DENIED_REQUEST - NEW_REQUEST - AUTO_APPROVE_REQUEST - AP_INFRASTRUCTURE_ASSETS_SYNCED - POLICY_ARCHIVED - POLICY_REPLACED - POLICY_RESTORE_ARCHIVED - POLICY_RESTORE_REPLACED - POLICY_RESTART_FROM_LATEST_TEMPLATE - POLICY_RESTART_FROM_DRAFT - AP_LOGS_ARE_CENTRALLY_STORED - AP_LOGS_ARE_RETAINED_FOR_365_DAYS - USER_IDENTITY_OBSERVABILITY_USER_CREATED - USER_IDENTITY_OBSERVABILITY_USER_UPDATED - USER_IDENTITY_OBSERVABILITY_SYNCED - USER_IDENTITY_OBSERVABILITY_USER_DISCONNECTED - USER_IDENTITY_OBSERVABILITY_LINK_UPDATED - USER_IDENTITY_OBSERVABILITY_SERVICE_ACCOUNT_UPDATED - OBSERVABILITY_ACCESS_AUDIT_PACKAGE_DOWNLOADED - CONTROL_TEST_DELETED - CONTROL_TEST_ADDED - RISK_ADDED - RISK_EDITED - RISK_ASSESSMENT_REPORT_GENERATED - RISK_TREATMENT_REPORT_GENERATED - RISK_CATEGORY_CREATED - RISK_CATEGORY_REMOVED - RISK_OWNERS_ASSIGNED - RISK_SET_APPLICABLE - RISK_SET_NOT_APPLICABLE - RISK_TREATMENT_SET - RISK_SCORED - RISK_ALL_REGISTERED_SCORED - RISK_ALL_REGISTERED_TREATED - COMPANY_NOTIFICATION_CREATED - COMPANY_NOTIFICATION_DELETED - COMPANY_NOTIFICATION_EDITED - COMPANY_NOTIFICATION_DISABLED - COMPANY_NOTIFICATION_ENABLED - USER_IDENTITY_OBSERVABILITY_TOGGLE_UPDATED - AP_CAPACITY_AND_USAGE_MONITORING - AP_ONLY_AUTHORIZED_USERS_CAN_ACCESS_LOG_SINKS - AP_LOGS_MONITORED_FOR_SUSPICIOUS_ACTIVITY - CUSTOM_FRAMEWORK_CREATED - CUSTOM_FRAMEWORK_DELETED - CUSTOM_REQUIREMENTS_CREATED - CUSTOM_REQUIREMENTS_DELETED - BACKGROUND_CHECK_CANCELED - TICKET_CREATED_CONTROL - TICKET_CREATED_MONITOR_INSTANCE - PRE_APPROVED_DOMAIN_REMOVED - PRE_APPROVED_DOMAIN_ADDED - TICKET_CREATED_RISK - PERSONNEL_BG_CHECKS_REVOKED - WORKSPACE_CREATED - WORKSPACE_EDITED - DRATA_SUPPORT_ACCESS_GRANTED - DRATA_SUPPORT_ACCESS_REMOVED - PUBLIC_API_KEY_CREATED - PUBLIC_API_KEY_UPDATED - PUBLIC_API_KEY_REVOKED - VULNERABILITY_FINDINGS_SYNCED - VULNERABILITY_FINDING_CREATED - VULNERABILITY_FINDING_UPDATED - VULNERABILITY_AUDIT_PACKAGE_DOWNLOAD - POLICY_TEMPLATE_DOWNLOADED - EXTERNAL_DOCUMENT_LINKED_TO_POLICY - PUBLIC_API_KEY_ALLOW_LIST_IP_ADDRESSES_EDITED - TICKET_UNLINKED_CONTROL - TICKET_UNLINKED_MONITOR_INSTANCE - TICKET_UNLINKED_RISK - AP_FORMER_PERSONNEL_OFFBOARDED - PERSONNEL_OFFBOARDING_TICKET_LINKED - PERSONNEL_OFFBOARDING_TICKET_UNLINKED - AUTOMATED_OFFBOARDING_TOGGLE - AUTOMATED_OFFBOARDING_CONFIGURED - AUTOMATED_OFFBOARDING_FAILED - DEVICE_DOCUMENT_UPLOADED - DEVICE_DELETED - CUSTOM_REQUIREMENTS_UPDATED - DEVICE_FAILED - VENDOR_SECURITY_QUESTIONNAIRE_CREATED - VENDOR_SECURITY_QUESTIONNAIRE_UPDATED - VENDOR_SECURITY_QUESTIONNAIRE_DELETED - RISK_DASHBOARD_DOWNLOADED - NDA_UPLOADED - NDA_DELETED - RISK_NOTE_ADDED - RISK_NOTE_UPDATED - RISK_NOTE_DELETED - ASSET_OWNER_UPDATED - CONTROL_TEST_INSTANCE_NOTE_ADDED - CONTROL_TEST_INSTANCE_NOTE_DELETED - CONTROL_TEST_INSTANCE_NOTE_EDITED - SERVICE_PROVIDER_DELETED - SERVICE_PROVIDER_ADDED - REVOKE_REQUEST - WIZARD_STEP_SAVED - NON_DISCLOSURE - TASK_CREATED - TASK_DELETED - TASK_COMPLETED - TASK_UNCOMPLETED - TASK_UPDATED - RISK_ASSESSMENT_OWNER_ASSIGNED - RISK_ASSESSMENT_DUE_DATE_SET - PERSONNEL_EXCLUSION_CREATED - PERSONNEL_EXCLUSION_UPDATED - PERSONNEL_EXCLUSION_ARCHIVED - RISKS_DELETED - RESYNC_DATA - AUTOPILOT_SCHEDULE_CREATED - AUTOPILOT_SCHEDULE_UPDATED - AUTOPILOT_SCHEDULE_DELETED - VULNERABILITY_DOWNLOAD_ALL - AUTOPILOT_PERSONNEL_EXCLUSION_ARCHIVED - PRE_APPROVED_EMAIL_REMOVED - PRE_APPROVED_EMAIL_ADDED - EVIDENCE_DELETED - EVIDENCE_CREATED - EVIDENCE_DOWNLOADED - EVIDENCE_UPDATED - EVIDENCE_ASSOCIATED_TO_CONTROL - EVIDENCE_UNASSOCIATED_TO_CONTROL - AUDITOR_ADDED_TO_AUDIT - AUDITOR_REMOVED_FROM_AUDIT - TRUST_CONTENT_SAVED - EVIDENCE_DOWNLOAD_ALL - AUDITHUB_REQUEST_MESSAGE_DELETED - AUTOPILOT_SCHEDULE_REVERTED - AUTOPILOT_RECIPE_CUSTOMIZED - AUTOPILOT_RECIPE_REVERTED - USER_ROLE_CREATED - USER_ROLE_DELETED - RESENT_EVIDENCE_SAMPLE_DOWNLOAD_EMAIL - RESENT_EVIDENCE_SAMPLE_DOWNLOAD_EMAIL_MULTIPLE_WORKSPACE - TICKET_CREATED_APPLICATION_USERS - CUSTOMER_REQUEST_DETAILS_EDITED - FILE_UPLOAD_REJECTED - FILE_UPLOAD_UNSUPPORTED - ACCESS_REVIEW_PERIOD_CREATED - ACCESS_REVIEW_PERIOD_IN_PROGRESS - ACCESS_REVIEW_PERIOD_COMPLETED - ACCESS_REVIEW_APPLICATION_REVIEWER_UPDATED - ACCESS_REVIEW_APPLICATION_REVIEWER_NOTIFIED - PERSONNEL_REVIEW_STATUS_CHANGED - ACCESS_REVIEW_TICKET_LINKED_TO_PERSONNEL - ACCESS_REVIEW_MANUAL_EVIDENCE_UPLOADED - ACCESS_REVIEW_APPLICATION_COMPLETED - CONTROL_APPROVAL_ADDED - CONTROL_APPROVAL_EDITED - CONTROL_APPROVAL_REVIEW_ADDED - CONTROL_APPROVAL_REVIEW_REMOVED - CONTROL_APPROVAL_SENT_TO_APPROVERS - CONTROL_APPROVAL_APPROVE - CONTROL_APPROVAL_REQUEST_CHANGES - CONTROL_APPROVAL_REMOVED - CONTROL_APPROVAL_STATUS_CHANGED - VENDOR_RISK_REPORT_GENERATED - DEVICE_ASSIGNATION_AGENT - DEVICE_ASSIGNATION_AGENT_DELETED - GENERAL_TASK_CREATED - GENERAL_TASK_DELETED - GENERAL_TASK_COMPLETED - GENERAL_TASK_UNCOMPLETED - GENERAL_TASK_UPDATED - CONTROL_TASK_CREATED - CONTROL_TASK_DELETED - CONTROL_TASK_COMPLETED - CONTROL_TASK_UNCOMPLETED - CONTROL_TASK_UPDATED - RISK_TASK_CREATED - RISK_TASK_DELETED - RISK_TASK_COMPLETED - RISK_TASK_UNCOMPLETED - RISK_TASK_UPDATED - CLOUD_FILE_USER_DISCONNECTED - CLOUD_FILE_USER_CONNECTED - DRATA_TO_DRATA_ENABLED - DRATA_TO_DRATA_DISABLED - AUTOPILOT_BACKGROUND_CHECK_LINKED_TO_PERSONNEL - REQUIREMENT_INFO_EDITED - FRAMEWORK_BASELINE_UPDATED - COMPANY_NIST_AI_TRAINING_DATA_UPDATED - NIST_AI_TRAINING_RESET - CONTROL_APPROVAL_APPROVE_WITHOUT_DATELINE - AP_INFRASTRUCTURE_FAILED_BACKUPS_ADDRESSED_IN_TIMELY_MANNER - AP_AUTO_SCALE_SERVER_INSTANCES - AP_INFRASTRUCTURE_CLOUD_DATA_MONITOR_CPU_LOAD - AP_INFRASTRUCTURE_FAILED_BACKUP_ALERTS - AP_INFRASTRUCTURE_CLOUDTRAIL_LOG_FILE_INTEGRITY - POLICY_DETAILS_UPDATED - RISK_SETTINGS_UPDATED - AP_INFRASTRUCTURE_DAILY_BACKUP_JOB_STATUS_MONITORED - AP_INFRASTRUCTURE_SQL_FREEABLE_MEMORY_MONITORED - AP_CUSTOM_TEST - AP_DRAFT_TEST - USER_ROLE_RESTRICTED - USER_ROLE_UNRESTRICTED - CONTROL_APPROVAL_SCHEDULED - CONTROL_APPROVAL_SCHEDULED_FAILED - CONTROL_TEMPLATE_APPLIED - CONTROL_INFORMATION_LINKED_ACROSS_OTHER_WORKSPACES - CONTROL_INFORMATION_UNLINKED_FROM_OTHER_WORKSPACES - FORCE_SYNC_ON_SOME - USER_IDENTITY_ACCESS_REVIEW_LINK_UPDATED - FRAMEWORK_SAQ_UPDATED - SPECIAL_FORMER_PERSONNEL_ADDED - AP_ENCRYPTION_IN_TRANSIT - AP_EXCESSIVE_PRIVILEGES_ASSIGNED - AP_EXTERNAL_EXPOSURE_OF_CLOUD_RESOURCES - CONTROL_TEST_INSTANCE_DRAFT_TEST_CREATED - CONTROL_TEST_INSTANCE_CUSTOM_TEST_EDITED - CONTROL_TEST_INSTANCE_DRAFT_TEST_DELETED - CONTROL_TEST_INSTANCE_DRAFT_TEST_PUBLISHED - CONTROL_TEST_INSTANCE_DRAFT_TEST_LOGIC_EDITED - HIPAA_TRAINING_UPDATED - NIST_AI_TRAINING_UPDATED - CONTROL_TEST_INSTANCE_PUBLISH_TEST_DELETED - CODE_REPOSITORY_ADDED - CODE_REPOSITORY_REMOVED - CODE_REPOSITORY_SETTINGS_UPDATED - AUTO_RESET_SETTING_UPDATED - VENDOR_QUESTIONNAIRE_ANSWER_SAVED - CUSTOM_FIELD_CREATED - CUSTOM_FIELD_DELETED - CUSTOM_FIELD_UPDATED - CUSTOM_FIELD_PLACED - CUSTOM_FIELD_UNPLACED - CUSTOM_FIELD_SECTION_UPDATED - CUSTOM_FORMULA_CALCULATED - CUSTOM_FORMULA_CREATED - CUSTOM_FORMULA_DELETED - CUSTOM_FORMULA_UPDATED - AP_INFRASTRUCTURE_IAM_PASSWORD_MINIMUM_LENGTH - AP_INFRASTRUCTURE_BUCKET_ACCESS_LOGGING - AP_INFRASTRUCTURE_RDS_MINIMUM_VERSION_UPGRADE - AP_INFRASTRUCTURE_CMK_ROTATION - AP_INFRASTRUCTURE_IAM_PASSWORD_REUSE - VULNERABILITY_SLA_SETTING_CREATED - VULNERABILITY_SLA_SETTING_UPDATED - AP_VULNERABILITY_CRITICAL_ADDRESSED - AP_VULNERABILITY_HIGH_ADDRESSED - FINDING_EXCLUDED - FINDING_INCLUDED - PROVIDER_CONNECTION_ERROR - RISKS_DOWNLOADED - RISKS_FILTERED_VIEW_DOWNLOADED - AP_INFRASTRUCTURE_IAM_ACCESS_KEY_ROTATION - AP_INFRASTRUCTURE_MFA_FOR_ROOT_ACCOUNT - AP_INFRASTRUCTURE_EBS_VOLUME_ENCRYPTION - AP_INFRASTRUCTURE_HARDWARE_MFA_FOR_ROOT_ACCOUNT - AP_INFRASTRUCTURE_VPC_FLOW_LOGGING - AP_INFRASTRUCTURE_S3_HTTP_REQUEST_DENIED - AP_INFRASTRUCTURE_IAM_GROUP_BASED_ACCESS_CONTROL - AP_INFRASTRUCTURE_IAM_UNUSED_CREDENTIALS - AP_INFRASTRUCTURE_CLOUD_TRAIL_LOGS_ENCRYPTED - AP_INFRASTRUCTURE_IAM_PRINCIPLE_OF_LEAST_PRIVILEGE - AP_INFRASTRUCTURE_SECURITY_GROUPS_RESTRICT_PUBLIC_RDP_ACCESS - AP_INFRASTRUCTURE_S3_OBJECT_LEVEL_LOGGING_FOR_RW_EVENTS - AP_INFRASTRUCTURE_EFS_ENCRYPTED_AT_REST - AP_INFRASTRUCTURE_RDS_PUBLIC_ACCESS_RESTRICTED - AP_INFRASTRUCTURE_VPC_DEFAULT_SECURITY_GROUPS_RESTRICT_ALL_TRAFFIC - AP_INFRASTRUCTURE_ACLS_PUBLIC_REMOTE_ADMIN_ACCESS_RESTRICTED - CUSTOMER_REQUEST_DETAILS_EDITED_MULTIPLE_WORKSPACES - FRAMEWORK_AUDIT_DETAILS_EDITED_MULTIPLE_WORKSPACES - AP_VULNERABILITY_CRITICAL_ADDRESSED_SNYK - AP_VULNERABILITY_HIGH_ADDRESSED_SNYK - AP_VULNERABILITY_CRITICAL_ADDRESSED_TENABLE_VULNERABILITY_MANAGEMENT - AP_VULNERABILITY_HIGH_ADDRESSED_TENABLE_VULNERABILITY_MANAGEMENT - AP_VULNERABILITY_CRITICAL_ADDRESSED_QUALYS - AP_VULNERABILITY_HIGH_ADDRESSED_QUALYS - AP_VULNERABILITY_CRITICAL_ADDRESSED_SEMGREP - AP_VULNERABILITY_HIGH_ADDRESSED_SEMGREP - AP_VULNERABILITY_CRITICAL_ADDRESSED_SENTINEL_ONE_VMS - AP_VULNERABILITY_HIGH_ADDRESSED_SENTINEL_ONE_VMS - AP_VULNERABILITY_CRITICAL_ADDRESSED_CROWDSTRIKE_FALCON_EXPOSURE_MANAGEMENT - AP_VULNERABILITY_HIGH_ADDRESSED_CROWDSTRIKE_FALCON_EXPOSURE_MANAGEMENT - AP_VULNERABILITY_CRITICAL_ADDRESSED_MS_DEFENDER - AP_VULNERABILITY_HIGH_ADDRESSED_MS_DEFENDER - EVIDENCE_BULK_DELETED - CONTROL_EVIDENCE_DOWNLOADED - AP_VULNERABILITY_CRITICAL_ADDRESSED_RAPID7_VMS - AP_VULNERABILITY_HIGH_ADDRESSED_RAPID7_VMS - AP_VULNERABILITY_CRITICAL_ADDRESSED_SENTINELONE_SINGULARITY_VULNERABILITY_MANAGEMENT - AP_VULNERABILITY_HIGH_ADDRESSED_SENTINELONE_SINGULARITY_VULNERABILITY_MANAGEMENT - AP_VULNERABILITY_CRITICAL_ADDRESSED_MS_DEFENDER_VMS - AP_VULNERABILITY_HIGH_ADDRESSED_MS_DEFENDER_VMS - AP_INFRASTRUCTURE_CLASSIC_LOAD_BALANCER_LATENCY_MONITORED - AP_INFRASTRUCTURE_CLASSIC_LOAD_BALANCER_SERVER_ERRORS_MONITORED - AP_INFRASTRUCTURE_APPLICATION_LOAD_BALANCER_UNHEALTHY_HOSTS_MONITORED - AP_INFRASTRUCTURE_CLASSIC_LOAD_BALANCER_UNHEALTHY_HOSTS_MONITORED - AP_INFRASTRUCTURE_APPLICATION_LOAD_BALANCER_SERVER_ERRORS_MONITORED - AP_INFRASTRUCTURE_APPLICATION_LOAD_BALANCER_TARGET_RESPONSE_TIME_MONITORED - AP_INFRASTRUCTURE_APPLICATION_LOAD_BALANCER_REDIRECTS_HTTP_TO_HTTPS - AP_INFRASTRUCTURE_LAMBDA_ERROR_RATE_MONITORED - AP_INFRASTRUCTURE_EC2_INSTANCES_IMDSV1_DISABLED - AP_INFRASTRUCTURE_SECURITY_GROUPS_HTTP_ACCESS_RESTRICTED - AP_INFRASTRUCTURE_DATABASE_WRITES_IO_MONITORED - AP_INFRASTRUCTURE_DYNAMODB_POINT_IN_TIME_ENABLED - CAC_CODE_REVIEW_REQUESTED - EXCEPTION_WORKFLOW_CREATED - EXCEPTION_WORKFLOW_DELETED - EXCEPTION_WORKFLOW_UPDATED - EXCEPTION_REQUEST_CREATED - RISK_SET_ACTIVE - RISK_ARCHIVED - RISK_ADDED_FROM_LIBRARY - NOTIFICATION_WORKFLOW_CREATED - WORKFLOW_PUBLISHED - WORKFLOW_UNPUBLISHED - WORKFLOW_DELETED - WORKFLOW_ARCHIVED - WORKFLOW_RESTORED - WORKFLOW_DRAFT_SAVED - RISK_CLOSED - ENTITLEMENT_ENABLED - ENTITLEMENT_DISABLED - PROVIDER_WORKSPACE_CONNECTION_CREATED - PROVIDER_WORKSPACE_CONNECTION_REMOVED - AP_INFRASTRUCTURE_LOG_ALERT_FOR_CREATE_POLICY_ASSIGNMENT - AP_INFRASTRUCTURE_LOG_ALERT_FOR_DELETE_POLICY_ASSIGNMENT - AP_INFRASTRUCTURE_NSG_SSH_PUBLIC_ACCESS_RESTRICTED - AP_INFRASTRUCTURE_STORAGE_ACCOUNTS_ACCESSED_VIA_PRIVATE_ENDPOINTS - AP_INFRASTRUCTURE_WEB_APP_REDIRECTS_HTTP_TRAFFIC_TO_HTTPS - AP_INFRASTRUCTURE_LOG_ALERT_FOR_DELETE_PUBLIC_IP_ADDRESS - AP_INFRASTRUCTURE_SQL_SERVERS_AUDITING - AP_INFRASTRUCTURE_STORAGE_ACCOUNTS_SECURE_TLS_CONFIGURATION - AP_INFRASTRUCTURE_LOG_ALERT_FOR_MANAGE_PUBLIC_IP_ADDRESS_RULE - CUSTOM_DATA_RECORD_REMOVED - AP_INFRASTRUCTURE_AUDIT_LOGS_ENABLED_FOR_EKS_CLUSTER - AP_INFRASTRUCTURE_PUBLIC_ACCESS_TO_CLUSTERS_CONTROL_PLANE_IS_RESTRICTED - AP_INFRASTRUCTURE_PRIVATE_ACCESS_TO_CLUSTERS_CONTROL_PLANE_IS_RESTRICTED - AP_INFRASTRUCTURE_LOG_ALERT_FOR_MANAGE_NETWORK_SECURITY_GROUP - AP_INFRASTRUCTURE_LOG_ALERT_FOR_DELETE_NETWORK_SECURITY_GROUP - AP_INFRASTRUCTURE_LOG_ALERT_FOR_MANAGE_SECURITY_SOLUTION - WORKFLOW_NOTIFICATION_SENT - CUSTOM_RESOURCE_RECORD_CREATED - RISK_MAPPED_TO_CONTROL - RISK_UNMAPPED_FROM_CONTROL - AP_VULNERABILITY_CRITICAL_ADDRESSED_ARNICA - AP_VULNERABILITY_HIGH_ADDRESSED_ARNICA - CUSTOM_RESOURCE_RECORD_UPDATED - AP_INFRASTRUCTURE_LOG_ALERT_FOR_DELETE_SECURITY_SOLUTION - AP_INFRASTRUCTURE_POSTGRESQL_DATABASE_SERVER_LOG_CHECKPOINTS - NEW_REPORT - MAPPED_TESTS_RESET_ON_CONTROL - CUSTOM_RESOURCE_RECORD_REMOVED - ARTIFACT_BULK_DELETED - EVIDENCE_BULK_OWNER_UPDATE - MAPPED_POLICIES_RESET_ON_CONTROL - AP_VULNERABILITY_CRITICAL_ADDRESSED_AIKIDO - AP_VULNERABILITY_HIGH_ADDRESSED_AIKIDO - AP_VULNERABILITY_CRITICAL_ADDRESSED_WIZ_VMS - AP_VULNERABILITY_HIGH_ADDRESSED_WIZ_VMS - AP_VULNERABILITY_HIGH_ADDRESSED_WIZ_CODE - AP_VULNERABILITY_CRITICAL_ADDRESSED_WIZ_CODE - AP_INFRASTRUCTURE_LOG_ALERT_FOR_CREATE_OR_UPDATE_SQL_SERVER_FIREWALL_RULE - AP_INFRASTRUCTURE_KEY_VAULTS_KEY_EXPIRATION - AP_INFRASTRUCTURE_LOG_ALERT_FOR_DELETE_SQL_SERVER_FIREWALL_RULE - AP_INFRASTRUCTURE_SQL_DATA_ENCRYPTION - AP_VULNERABILITY_CRITICAL_ADDRESSED_MS_DEFENDER_VMS_GCC_HIGH - AP_VULNERABILITY_HIGH_ADDRESSED_MS_DEFENDER_VMS_GCC_HIGH - AP_VULNERABILITY_CRITICAL_ADDRESSED_ORCA_SECURITY - AP_VULNERABILITY_HIGH_ADDRESSED_ORCA_SECURITY - AP_VULNERABILITY_CRITICAL_ADDRESSED_UPWIND - AP_VULNERABILITY_HIGH_ADDRESSED_UPWIND - AP_VULNERABILITY_CRITICAL_ADDRESSED_GITLAB_VMS - AP_VULNERABILITY_HIGH_ADDRESSED_GITLAB_VMS - AP_MONGO_DB_ATLAS_SSL_CERTIFICATE_SSL_ENABLED - POLICY_VERSION_STATUS_DRAFT_CREATED - POLICY_VERSION_STATUS_DRAFT_FINALIZED - POLICY_VERSION_APPROVED - POLICY_VERSION_PUBLISHED - POLICY_VERSION_MODIFIED_RESTARTED_APPROVAL - POLICY_DELETED - POLICY_VERSION_ALERT_CONFIGURED - POLICY_VERSION_STATUS_DRAFT_DELETED - POLICY_VERSION_AUTO_ACKNOWLEDGMENT - POLICY_OWNER_UPDATED - FRAMEWORK_ENABLED - FRAMEWORK_DISABLED - CONTROLS_DISABLED - CONTROLS_ARCHIVED - POLICY_RENEW_WITHOUT_UPDATE - POLICY_VERSION_REQUEST_CHANGES - POLICY_VERSION_MODIFIED_NO_REQUIRED_APPROVAL - POLICY_VERSION_APPROVED_BY_APPROVER - POLICY_VERSION_DRAFT_FINALIZED - POLICY_VERSION_APPROVAL_SETTINGS_UPDATED - FRAMEWORK_LEVEL_IMPACT_UPDATED - POLICY_VERSION_APPROVED_BY_APPROVER_TIER - POLICY_VERSION_APPROVAL_OVERRIDE - REQUEST_MESSAGE_SENT - REQUEST_STATUS_CHANGED - POLICY_VERSION_STATUS_CANCEL_APPROVAL - WORKSPACE_DELETED - GENERAL_TASK_RECURRING_DELETED - CONTROL_TASK_RECURRING_DELETED - RISK_TASK_RECURRING_DELETED - TASK_RECURRING_DELETED - WORKFLOW_WEBHOOK_SENT - VENDOR_SECURITY_REVIEW_STARTED - VENDOR_SECURITY_REVIEW_COMPLETED - VENDOR_SECURITY_REVIEW_APPROVAL_STATUS_CHANGED - VENDOR_SOC_REPORT_REVIEW_STARTED - VENDOR_SOC_REPORT_REVIEW_COMPLETED - VENDOR_SOC_REPORT_REVIEW_APPROVAL_STATUS_CHANGED - CONTROLS_UNARCHIVED - SAFEBASE_SYNC_PENDING - SAFEBASE_SYNC_ERROR - SAFEBASE_SYNC_COMPLETE - SAFEBASE_MIGRATION_PENDING - SAFEBASE_MIGRATION_MIGRATED - SAFEBASE_MIGRATION_ERROR - SAFEBASE_MIGRATION_COMPLETE - TRUST_CENTER_INGRESS_DENIED - CONNECTION_IDP_RANKING_UPDATED - MONITOR_FINDINGS_ZIP_GENERATED - MONITOR_FINDINGS_CSV_GENERATED - FILE_UPLOAD_SIZE_EXCEEDED - PASSWORD_PROTECTED_FILE - COMPANY_OPT_IN_AI - RISK_REGISTER_CREATED - RISK_REGISTER_UPDATED - RISK_REGISTER_DELETED - SAFEBASE_ONBOARDING_ERROR - SAFEBASE_ONBOARDING_CONFLICT - SAFEBASE_ONBOARDING_COMPLETED - RISKS_MOVED_TO_REGISTER - CONNECTION_HRIS_RANKING_UPDATED - EVIDENCE_BULK_RENEWAL_DATE_UPDATE - AGENTIC_INITIAL_ASSESSMENT_REVIEW_COMPLETED - VENDOR_SECURITY_REVIEW_EXECUTIVE_SUMMARY_GENERATED - VENDOR_RECURRING_SECURITY_REVIEW_STARTED - AI_VERSION_COMPARISON_GENERATED - BULK_IMPORTED_RISKS - VENDOR_SECURITY_REVIEW_OBSERVATION_CREATED - VENDOR_SECURITY_REVIEW_OBSERVATION_UPDATED - VENDOR_SECURITY_REVIEW_OBSERVATION_DELETED - VENDOR_SECURITY_REVIEW_INTERNAL_NOTE_CREATED - VENDOR_SECURITY_REVIEW_INTERNAL_NOTE_UPDATED - VENDOR_SECURITY_REVIEW_INTERNAL_NOTE_DELETED - VENDOR_SECURITY_REVIEW_ASSESSMENT_AI_OVERRIDE - VENDOR_SECURITY_REVIEW_TITLE_UPDATED - BULK_IMPORTED_POLICY_ACKNOWLEDGMENTS - VENDOR_FOLLOW_UP_QUESTIONNAIRE_SENT - VENDOR_FOLLOW_UP_QUESTIONNAIRE_RESPONSE_RECEIVED - ASSESSMENT_CRITERIA_CREATED - ASSESSMENT_CRITERIA_UPDATED - ASSESSMENT_CRITERIA_DELETED - ASSESSMENT_CRITERIA_TRANSITIONED - VENDOR_SECURITY_REVIEW_CREATED - VENDOR_SECURITY_REVIEW_UPDATED - VENDOR_SECURITY_REVIEW_DELETED - VENDOR_SECURITY_REVIEW_TRANSITIONED - VENDOR_SECURITY_REVIEW_QUESTIONNAIRE_CREATED - VENDOR_SECURITY_REVIEW_QUESTIONNAIRE_UPDATED - VENDOR_SECURITY_REVIEW_QUESTIONNAIRE_DELETED - VENDOR_SECURITY_REVIEW_QUESTIONNAIRE_TRANSITIONED - VENDOR_SECURITY_REVIEW_AGENT_WORKFLOW_CREATED - VENDOR_SECURITY_REVIEW_AGENT_WORKFLOW_UPDATED - VENDOR_SECURITY_REVIEW_AGENT_WORKFLOW_TRANSITIONED - VENDOR_SECURITY_REVIEW_ASSESSMENT_CREATED - VENDOR_SECURITY_REVIEW_ASSESSMENT_TRANSITIONED - VENDOR_DOCUMENT_CREATED - VENDOR_DOCUMENT_UPDATED - EVIDENCE_EXCLUDED_FROM_REQUEST - EVIDENCE_RE_INCLUDED_IN_REQUEST - IDP_GROUP_ROLE_MAPPING_CREATED - IDP_GROUP_ROLE_MAPPING_UPDATED - AP_AWS_DB_CLUSTERS_INFRASTRUCTURE_DATA_ENCRYPTED - AP_AWS_DB_INSTANCES_INFRASTRUCTURE_DATA_ENCRYPTED - AP_AWS_ELASTICSEARCH_DOMAINS_INFRASTRUCTURE_DATA_ENCRYPTED - AP_AWS_ELASTICACHE_CLUSTERS_INFRASTRUCTURE_DATA_ENCRYPTED - AP_AWS_ELASTICACHE_REPLICATION_GROUPS_INFRASTRUCTURE_DATA_ENCRYPTED - AP_GCP_SSL_CERTIFICATE_COMPANY_INFRASTRUCTURE_SSL_ENABLED - AP_CLOUDFLARE_SSL_CERTIFICATE_COMPANY_INFRASTRUCTURE_SSL_ENABLED - AP_AWS_SSL_CERTIFICATE_COMPANY_INFRASTRUCTURE_SSL_ENABLED - AP_GCP_DB_INSTANCES_INFRASTRUCTURE_DATA_MULTI_AZ - AP_GCP_REDIS_CACHES_INFRASTRUCTURE_DATA_MULTI_AZ - AP_GCP_MEMCACHES_INFRASTRUCTURE_DATA_MULTI_AZ - AP_AZURE_SSL_CERTIFICATE_COMPANY_INFRASTRUCTURE_SSL_ENABLED - AP_AWS_DB_INSTANCES_INFRASTRUCTURE_DATA_MULTI_AZ - AP_AWS_DB_CLUSTERS_INFRASTRUCTURE_DATA_MULTI_AZ - AP_AWS_ELASTICACHE_CLUSTERS_INFRASTRUCTURE_DATA_MULTI_AZ - AP_AWS_ELASTICACHE_REPLICATION_GROUPS_INFRASTRUCTURE_DATA_MULTI_AZ - AP_AWS_ELASTICSEARCH_DOMAINS_INFRASTRUCTURE_DATA_MULTI_AZ - CONTROL_PROVISIONED - TEST_PROVISIONED - VENDOR_QUESTIONNAIRE_REMINDER_SENT - CONTROL_UNMAPPED_FROM_REQUEST - AUDIT_CREATED - AUDIT_STATUS_CHANGED - AUDIT_DELETED - AUDIT_PRE_AUDIT_PACKAGE_CONFIG_UPDATED - WORKOS_CONNECTION_DELETED - CONNECTION_SSO_DISABLED - IDP_ADMIN_MISMATCH_RESOLVED - IDP_ADMIN_MISMATCH_SELF_RESOLVED - IDP_ADMIN_MISMATCH_STEP_COMPLETED - IDP_DOMAINS_SYNC_STEP_COMPLETED - IDP_GROUPS_SYNC_STEP_COMPLETED - BACKGROUND_CHECK_OUT_OF_SCOPE - BACKGROUND_CHECK_IN_SCOPE - VENDOR_STATUS_UPDATED - VENDOR_BULK_ACTION_PERFORMED - VENDOR_CUSTOM_FIELDS_UPDATED - VENDOR_DISCOVERED_DISMISSED - VENDORS_DISCOVERED_BULK_DISMISSED - VENDOR_SETTINGS_SSO_UPDATED - VENDOR_REVIEW_PERIOD_UPDATED - VENDOR_EMAIL_TEMPLATE_UPDATED - VENDOR_CRITERIA_PREVIEW_UPDATED - VENDOR_AGENTIC_RECURRING_REVIEWS_TOGGLED - VENDOR_TYPES_UPDATED - VENDOR_CRITERIA_RESET - VENDOR_CRITERIA_BULK_DELETED - VENDOR_SECURITY_REVIEW_DOCUMENT_ADDED - VENDOR_SECURITY_REVIEW_DOCUMENT_DELETED - VENDOR_SECURITY_REVIEW_ASSESSMENT_STATUS_CHANGED - QUESTIONNAIRE_SENT_DELETED - QUESTIONNAIRE_SUMMARY_GENERATION_REQUESTED - QUESTIONNAIRE_SUMMARY_FEEDBACK_SUBMITTED - MONITOR_TEST_STOPPED - MONITOR_TEST_DETAILS_UPDATED - MONITOR_TICKET_LINKED - MONITOR_TEST_STATUS_UPDATED - CONTROL_TEST_INSTANCE_EXCLUSION_REASON_UPDATED - MONITOR_EXCLUSIONS_BULK_REINCLUDED - MONITOR_CODEBASE_EXCLUSIONS_REASONS_BULK_UPDATED - ACCESS_REVIEW_PERIOD_UPDATED - ACCESS_REVIEW_APPLICATION_CHANGES_REQUESTED - ACCESS_REVIEW_PERIOD_NOTE_CREATED - ACCESS_REVIEW_PERIOD_NOTE_UPDATED - ACCESS_REVIEW_PERIOD_NOTE_DELETED - ACCESS_REVIEW_USER_NOTE_CREATED - ACCESS_REVIEW_APPLICATION_CREATED_MANUAL - ACCESS_REVIEW_APPLICATION_UPDATED - ACCESS_REVIEW_APPLICATION_DELETED - ACCESS_REVIEW_EVIDENCE_UNLINKED - ACCESS_REVIEW_USERS_BULK_IMPORTED - ACCESS_REVIEW_USER_TICKET_UNLINKED - TICKET_AUTOMATION_RULE_CREATED - TICKET_AUTOMATION_RULE_UPDATED - TICKET_AUTOMATION_RULE_DELETED - OSINT_REPORT_REQUESTED - OSINT_REPORT_COMPLETED - OSINT_REPORT_FAILED - OSINT_REPORT_CANCELLED - USER_LANGUAGE_UPDATED - USER_FEATURE_GROUP_TOGGLED - USER_FEATURE_VALUE_UPDATED - COMPANY_LANGUAGE_UPDATED - AUDIT_REQUEST_DCF_AUTO_MAPPED - AUDIT_REQUEST_DCF_MAPPING_ACCEPTED - AUDIT_REQUEST_DCF_MAPPINGS_BULK_ACCEPTED - AUDIT_STARTED - WORKSPACE_SCOPE_UPDATED - WORKSPACE_SCOPE_ORPHANED_GROUPS_REMOVED - AUDIT_REQUESTS_BULK_CREATED - CONTROL_CUSTOM_FIELDS_SUBMITTED - CONTROL_SUGGESTION_ACTIONED - CONTROL_SUGGESTIONS_BULK_ACTIONED - CONTROL_TICKET_LINKED - REQUIREMENT_SUGGESTION_ACTIONED - REQUIREMENT_SUGGESTIONS_BULK_ACTIONED - MONITOR_ERRORED_ITEM_EXCLUSION_CREATED - MONITOR_ERRORED_ITEM_EXCLUSION_REVOKED - VENDOR_TYPE_CREATED - VENDOR_TYPE_DELETED - BULK_IMPORTED_EVIDENCE - AP_VULNERABILITY_CRITICAL_ADDRESSED_SOCKET - AP_VULNERABILITY_HIGH_ADDRESSED_SOCKET - AP_INFRASTRUCTURE_AUTO_SCALING - AP_INFRASTRUCTURE_BACKUP_RETENTION - AP_INFRASTRUCTURE_TDE_ENABLED - AP_INFRASTRUCTURE_VERSIONING_ENABLED - AP_INFRASTRUCTURE_ZONE_REDUNDANCY - AP_INFRASTRUCTURE_LOGGING_ENABLED - AP_INFRASTRUCTURE_TLS_VERSION - AP_INFRASTRUCTURE_VPC_CONFIGURATION - AP_INFRASTRUCTURE_ENCRYPTION_IN_TRANSIT - AP_INFRASTRUCTURE_SECURITY_GROUPS - AP_INFRASTRUCTURE_BROAD_NETWORK_ACCESS_PATTERNS - AP_INFRASTRUCTURE_PUBLIC_ACCESS_RESTRICTED - AP_INFRASTRUCTURE_DENY_BY_DEFAULT - AP_INFRASTRUCTURE_AUTOMATIC_SOFTWARE_UPDATES - AP_INFRASTRUCTURE_LOG_INTEGRITY - AP_INFRASTRUCTURE_TLS_CIPHERS - AP_INFRASTRUCTURE_WAF_ENABLED - AP_INFRASTRUCTURE_AUTOMATED_BACKUPS - AP_INFRASTRUCTURE_SECURE_API_VERSION - AP_INFRASTRUCTURE_LOG_RETENTION - AP_INFRASTRUCTURE_DISABLE_DEFAULT_ACCOUNTS - FRAMEWORK_CONTROL_MAPPING_RESET - MAPPED_CONTROLS_RESET_ON_REQUIREMENT - MAPPED_REQUIREMENTS_RESET_ON_CONTROL - AUTOPILOT_USER_DELETED_ROLE - AP_INFRASTRUCTURE_BROAD_POLICY_ACCESS_PATTERNS - AP_INFRASTRUCTURE_RBAC - AP_INFRASTRUCTURE_RUNTIME_CONFIGURATION - AP_INFRASTRUCTURE_TAGGING - AP_INFRASTRUCTURE_DELETION_PROTECTION - AP_INFRASTRUCTURE_DATA_RETENTION - AP_INFRASTRUCTURE_KEY_ROTATION - AP_INFRASTRUCTURE_SECRET_ROTATION - TICKET_DOWNLOAD - AP_INFRASTRUCTURE_AUTOMATIC_REPAIRS - AP_INFRASTRUCTURE_CONNECTION_DRAINING - AP_INFRASTRUCTURE_HIGH_AVAILABILITY - AP_INFRASTRUCTURE_POLICY_BASED_ACCESS_CONTROL - AP_AWS_IAM_USERS_COMPANY_INFRASTRUCTURE_MFA_ENABLED ExceptionResponseDto: type: object properties: statusCode: type: number message: type: string code: type: number debugInfo: type: object properties: name: type: string message: type: string stack: type: string required: - name - message required: - statusCode - message - code EventExpandEnum: type: string enum: - connection - issues - metadata - testId - testName - user EventSortTypeLimitedEnum: type: string enum: - createdAt EventsResponsePublicV2Dto: type: object properties: data: description: Data set based on the pagination limits type: array items: $ref: '#/components/schemas/EventResponsePublicV2Dto' pagination: $ref: '#/components/schemas/PaginationTotalCountResponsePublicV2Dto' required: - data - pagination ConnectionCompactResponsePublicV2Dto: type: object properties: id: type: number example: '1' description: The Connection ID clientType: type: string enum: - GOOGLE - OKTA - MICROSOFT_365 - AWS - GCP - AZURE - HEROKU - GITHUB - GITLAB - BITBUCKET - SHORTCUT - JIRA - ASANA - GUSTO - KARMACHECK - GITHUB_ISSUES - RIPPLING - CERTN - MERGEDEV_ADP_WORKFORCE_NOW - MERGEDEV_BAMBOO_HR - MERGEDEV_HR_PARTNER - MERGEDEV_HI_BOB - MERGEDEV_HUMAANS - MERGEDEV_PERSONIO - MERGEDEV_SAGE - DIGITAL_OCEAN - MERGEDEV_KALLIDUS - MERGEDEV_TRINET - MERGEDEV_TRINET_HR - MERGEDEV_FRESHTEAM - MERGEDEV_SAP_SUCCESSFACTORS - TRELLO - GITLAB_ISSUES - MERGEDEV_JUSTWORKS - LINEAR - PIVOTAL_TRACKER - WORK_OS - MERGEDEV_PAYLOCITY - MONGO_DB_ATLAS - TARGET_PROCESS - CLICKUP - CHECKR - MERGEDEV_WORKDAY - ZOHO - CLOUDFLARE - JAMF - AZURE_BOARDS - AZURE_REPOS - MERGEDEV_HR_CLOUD - INTUNE - OKTA_IDENTITY - GOODHIRE - KANDJI - AWS_CODECOMMIT - FIBERY - CURRICULA - JUMPCLOUD - HEXNODE_UEM - RIPPLING_MDM - AWS_ORG_UNITS - KNOWBE4 - MERGEDEV_UKG_PRO - MERGEDEV_UKG_READY - DATADOG - SLACK - DOCUSIGN - MICROSOFT_TEAMS - AWS_INSPECTOR - MERGEDEV_ONELOGIN - MERGEDEV_JUMPCLOUD - CONFLUENCE - WORKSPACE_ONE - NEW_RELIC - MERGEDEV_SERVICENOW - RAPID7 - MERGEDEV_AHA - MERGEDEV_BASECAMP - MERGEDEV_BITBUCKET - MERGEDEV_FRESHDESK - MERGEDEV_FRESHSERVICE - MERGEDEV_HEIGHT - MERGEDEV_HIVE - MERGEDEV_TEAMWORK - MERGEDEV_WRIKE - MERGEDEV_ZENDESK - CSV_IDP - APIDECK - AWS_GOV_CLOUD - SENTINEL_ONE - MERGEDEV_NAMELY - MERGEDEV_INSPERITY_PREMIER - MERGEDEV_DAYFORCE - MERGEDEV_ALEXISHR - MERGEDEV_BREATHE - MERGEDEV_CHARLIE - MERGEDEV_CHARTHOP - MERGEDEV_DEEL - MERGEDEV_FACTORIAL - MERGEDEV_INTELLIHR - MERGEDEV_KEKA - MERGEDEV_LUCCA - MERGEDEV_OFFICIENT - MERGEDEV_PAYCHEX - MERGEDEV_PEOPLE_HR - MERGEDEV_OYSTERHR - MERGEDEV_PAYCOR - HUBSPOT - ZOOM - AUTH0 - SENTRY - ZAPIER - SNOWFLAKE - MIRO - MERGEDEV_EMPLOYMENT_HERO - SEGMENT - WIZ - XERO - GITHUB_CODE - ATLASSIAN - PAGER_DUTY - STACKONE_SMARTRECRUITERS - STACKONE_TEAMTAILOR - CROWDSTRIKE - GITHUB_ENTERPRISE - NOTION - STACKONE_KLAVIYO - STACKONE_LASTPASS - STACKONE_LEAPSOME - STACKONE_LEVER - STACKONE_ORACLEHCM - STACKONE_PINPOINT - STACKONE_PIPEDRIVE - STACKONE_RECRUITEE - STACKONE_WEBEX - STACKONE_WORKABLE - STACKONE_ZELT - STACKONE_BITWARDEN - STACKONE_SALESLOFT - STACKONE_DIXA - STACKONE_FRESHSALES - STACKONE_CANVA - STACKONE_GREENHOUSE - STACKONE_ASHBY - STACKONE_ATTIO - STACKONE_CONTENTFUL - COVERDASH - MERGEDEV_FRONT - SALESFORCE - STACKONE_ELASTIC - STACKONE_RENDER - STACKONE_TERRAFORM - STACKONE_DOMO - STACKONE_ENVOY - STACKONE_SCALEWAY - STACKONE_JETBRAINS - STACKONE_FIVETRAN - STACKONE_INTERCOM - STACKONE_AUTODESK - GITHUB_ACTIONS - AZURE_ORG_UNITS - MICROSOFT_365_GCC_HIGH - STACKONE_AIRCALL - STACKONE_15FIVE - STACKONE_ROLLBAR - STACKONE_EGNYTE - STACKONE_QLIK - STACKONE_BULLHORN - STACKONE_OPENVPN - STACKONE_SOPHOS - STACKONE_MEISTERTASK - STACKONE_TALENTLMS - STACKONE_ONEFLOW - STACKONE_RING_CENTRAL - STACKONE_ARTICULATE - STACKONE_DIALPAD - STACKONE_TABLEAU - AZURE_DEVOPS - STACKONE_1PASSWORD - STACKONE_MIXPANEL - STACKONE_SONARCLOUD - STACKONE_TWILIO - STACKONE_ANSIBLE - STACKONE_LATTICE - STACKONE_WEBFLOW - STACKONE_LACEWORK - STACKONE_DATABRICKS - STACKONE_IFS - STACKONE_TRAVISCI - STACKONE_MATILLIONETL - STACKONE_OPTIMIZELY - UAR_CSV - STERLING - HIRERIGHT - VETTY - MERGEDEV_CYBERARK - SALESFORCE_UAR - GOOGLE_ADMIN_CONSOLE - VERCEL - STACKONE_DUO - STACKONE_GONG - STACKONE_IRONCLAD - STACKONE_SCORO - STACKONE_TEAMVIEWER_REMOTE - STACKONE_SPOTDRAFT - STACKONE_SPENDESK - STACKONE_SENDGRID - STACKONE_SMARTSHEET - STACKONE_CHECKMK - LEEN_TENABLE - LEEN_QUALYS - LEEN_SEMGREP - LEEN_SNYK - LEEN_CROWDSTRIKE_VMS - LEEN_MS_DEFENDER_VMS - LEEN_SENTINELONE_VMS - GITLAB_ON_PREM - CUSTOM - LEEN_RAPID7_VMS - BAMBOO_HR - GITLAB_ISSUES_ON_PREM - GITHUB_ISSUES_ENTERPRISE - BITBUCKET_CODE - LEEN_ARNICA - STACKONE_NETLIFY - STACKONE_OPENAI - KOLIDE - MERGEDEV_JIRA_DATA_CENTER - MERGEDEV_PINGONE - GOOGLE_ADMIN_CONSOLE_OAUTH - GOOGLE_OAUTH - STACKONE_ANTHROPIC - INTUNE_GCC_HIGH - STACKONE_DROPBOX - STACKONE_DROPBOX_SIGN - STACKONE_HARVEST - STACKONE_KAMELEOON - STACKONE_MAKE - STACKONE_RETOOL - STACKONE_TOGGL - STACKONE_BOX - MERGEDEV_ZOHO_PEOPLE - MERGEDEV_ZOHO_DESK - LEEN_WIZ_VMS - LEEN_WIZ_CODE - LEEN_AIKIDO - MERGEDEV_LATTICE_HRIS - MERGEDEV_DARWINBOX - MERGEDEV_PAYCOM - AZURE_GCC_HIGH - AZURE_MG_GCC_HIGH - STACKONE_EASY_LLAMA - MERGEDEV_LEAPSOME - CUSTOM_XFA - LEEN_MS_DEFENDER_VMS_GCC_HIGH - STACKONE_CORNERSTONE - STACKONE_DOCEBO - STACKONE_GO1 - STACKONE_LINKEDIN_LEARNING - STACKONE_SAP_LEARNING - STACKONE_WORKDAY_LEARNING - STACKONE_360LEARNING - STACKONE_BRAINIER - STACKONE_COURSERA - STACKONE_XYLEME - STACKONE_INFOSEC - STACKONE_PEOPLE_FLUENT - STACKONE_UDEMY - AIKIDO - AZURE_ENTRA_ID - GOOGLE_CLOUD_IDENTITY - HYPERCOMPLY - INTRUDER - IRIS_AI - JIT - TINES - TORQ - TRAY - SWIF - LEEN_ORCA_SECURITY - ZIP - CUSTOM_MDM - LEEN_UPWIND - WORK_OS_SCIM - LEEN_GITLAB_VMS - NINJAONE_MDM - FIELDGUIDE - OKTA_OAUTH - IRONCLAD_VENDOR - CUSTOM_HRIS - RAMP - TROPIC_VENDOR - AZURE_BOARDS_ENTRA - AZURE_REPOS_ENTRA - AZURE_DEVOPS_ENTRA - CERTN_CENTRIC - DATAGRAIL - LEEN_SOCKET example: GOOGLE description: The client type clientId: type: - string - 'null' example: drata.com description: The client id from the external system associated to this connection clientAlias: type: - string - 'null' example: My-connection-alias-1 description: Alias for the connection state: type: string enum: - ACTIVE - MISCONFIGURED example: ACTIVE description: The state of the connection createdAt: type: - string - 'null' format: date-time example: '2025-07-01T16:45:55.246Z' description: When this connection was created updatedAt: type: - string - 'null' format: date-time example: '2025-07-01T16:45:55.246Z' description: When this connection was last updated connectedAt: type: - string - 'null' format: date-time example: '2025-07-01T16:45:55.246Z' description: When this connection was successfully established failedAt: type: - string - 'null' format: date-time example: '2025-07-01T16:45:55.246Z' description: When this connection failed deletedAt: type: - string - 'null' format: date-time example: '2025-07-01T16:45:55.246Z' description: When the connection was deleted required: - id - clientType - clientId - clientAlias - state - createdAt - updatedAt - connectedAt - failedAt - deletedAt EvidenceJobStatusEnum: type: string enum: - Pending - Running - Completed - Failed securitySchemes: bearer: scheme: bearer bearerFormat: API_KEY type: http x-refined-from: - drata-api-v2-openapi.json - drata-api-v2-openapi.yml