{ "$schema": "https://json-schema.org/draft/2020-12/schema", "title": "AssetInternetExposureDetail", "description": "AssetInternetExposureDetail schema from Palo Alto Networks Cortex Xpanse REST API", "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/json-schema/cortex-xpanse-api-asset-internet-exposure-detail-schema.json", "allOf": [ { "type": "object", "description": "Summary of an internet-exposed asset discovered by Xpanse.", "properties": { "asm_id_list": { "type": "array", "items": { "type": "string" }, "description": "List of ASM identifiers for this asset." }, "asset_name": { "type": "string", "description": "Asset hostname, IP address, or identifier." }, "asset_type": { "type": "string", "enum": [ "CERTIFICATE", "CLOUD_COMPUTE_INSTANCE", "CLOUD_LOAD_BALANCER", "CLOUD_OBJECT_STORAGE", "DOMAIN", "NETWORKING_DEVICE", "ON_PREM_SERVER", "UNMANAGED_NETWORK_DEVICE" ] }, "ip_address": { "type": "array", "items": { "type": "string" }, "description": "IP addresses associated with this asset." }, "domain": { "type": "array", "items": { "type": "string" }, "description": "Domain names associated with this asset." }, "ipv6_address": { "type": "array", "items": { "type": "string" } }, "cloud_id": { "type": "string", "description": "Cloud provider resource identifier." }, "cloud_provider": { "type": "string", "enum": [ "AWS", "Azure", "GCP", "OTHER" ] }, "externally_detected_providers": { "type": "array", "items": { "type": "string" } }, "business_units": { "type": "array", "items": { "type": "string" }, "description": "Business units associated with this asset." }, "tags": { "type": "array", "items": { "type": "object", "properties": { "key": { "type": "string" }, "value": { "type": "string" } } } }, "created": { "type": "integer", "description": "Asset first discovery timestamp as Unix epoch milliseconds." }, "last_observed": { "type": "integer", "description": "Most recent observation timestamp as Unix epoch milliseconds." } } }, { "type": "object", "description": "Detailed asset information including all services and observations.", "properties": { "service_list": { "type": "array", "items": { "type": "object", "description": "An internet-exposed network service discovered on an asset.", "properties": { "service_id": { "type": "string" }, "service_name": { "type": "string", "description": "Service name or protocol (e.g., HTTPS, SSH, RDP)." }, "service_type": { "type": "string", "enum": [ "APPLICATION_SERVER", "CLOUD_STORAGE", "DATABASE", "NETWORKING", "REMOTE_DESKTOP", "UNCLASSIFIED", "WEB" ] }, "ip_address": { "type": "array", "items": { "type": "string" } }, "domain": { "type": "array", "items": { "type": "string" } }, "port": { "type": "integer", "description": "TCP/UDP port number." }, "protocol": { "type": "string", "enum": [ "TCP", "UDP" ] }, "provider": { "type": "array", "items": { "type": "string" }, "description": "Cloud or hosting providers detected for this service." }, "business_units": { "type": "array", "items": { "type": "string" } }, "created": { "type": "integer", "description": "Service first discovery timestamp as Unix epoch milliseconds." }, "last_observed": { "type": "integer" }, "is_active": { "type": "string", "enum": [ "Active", "Inactive", "Unconfirmed" ] }, "discovery_type": { "type": "string", "enum": [ "ColocatedOnIp", "DirectlyDiscovered", "CSP", "CertificateAssociation" ] } } } }, "certificate": { "type": "object", "description": "TLS certificate details if applicable.", "properties": { "issuer": { "type": "string" }, "subject": { "type": "string" }, "valid_from": { "type": "string", "format": "date" }, "valid_to": { "type": "string", "format": "date" }, "sha256": { "type": "string" } } }, "active_service_ids": { "type": "array", "items": { "type": "string" } }, "all_service_ids": { "type": "array", "items": { "type": "string" } } } } ] }