{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "Defender",
  "description": "Defender schema from Palo Alto Networks Prisma Cloud Compute API",
  "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/json-schema/prisma-cloud-compute-api-defender-schema.json",
  "type": "object",
  "properties": {
    "hostname": {
      "type": "string",
      "description": "Hostname where the Defender is deployed."
    },
    "version": {
      "type": "string",
      "description": "Defender agent version."
    },
    "type": {
      "type": "string",
      "enum": [
        "docker",
        "dockerWindows",
        "cri",
        "fargate",
        "appEmbedded",
        "serverless"
      ],
      "description": "Type of Defender deployment."
    },
    "connected": {
      "type": "boolean",
      "description": "Whether the Defender is currently connected to the Console."
    },
    "lastModified": {
      "type": "string",
      "format": "date-time",
      "description": "Timestamp of the last status update from the Defender."
    },
    "cluster": {
      "type": "string",
      "description": "Kubernetes cluster name if applicable."
    },
    "cloudMetadata": {
      "type": "object",
      "properties": {
        "provider": {
          "type": "string"
        },
        "accountId": {
          "type": "string"
        },
        "region": {
          "type": "string"
        }
      }
    },
    "category": {
      "type": "string",
      "enum": [
        "container",
        "host",
        "serverless",
        "appEmbedded"
      ]
    }
  }
}