{
  "$schema": "https://json-structure.org/meta/core/v0/#",
  "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/json-structure/prisma-cloud-dspm-api-data-store-structure.json",
  "name": "DataStore",
  "description": "DataStore schema from Palo Alto Networks Prisma Cloud DSPM API",
  "type": "object",
  "properties": {
    "id": {
      "type": "string",
      "description": "Unique data store identifier in Prisma Cloud."
    },
    "name": {
      "type": "string",
      "description": "Name of the data store as it appears in the cloud provider."
    },
    "cloudProvider": {
      "type": "string",
      "description": "Cloud provider where the data store is hosted.",
      "enum": [
        "aws",
        "azure",
        "gcp"
      ]
    },
    "cloudAccountId": {
      "type": "string",
      "description": "Cloud account ID that owns the data store."
    },
    "region": {
      "type": "string",
      "description": "Cloud region where the data store is located."
    },
    "serviceType": {
      "type": "string",
      "description": "Category of the data store service.",
      "enum": [
        "relationalDatabase",
        "noSqlDatabase",
        "objectStorage",
        "fileShare",
        "dataWarehouse",
        "dataLake",
        "cache",
        "messageQueue"
      ]
    },
    "serviceName": {
      "type": "string",
      "description": "Specific cloud service name (e.g., Amazon S3, Amazon RDS)."
    },
    "encryptionEnabled": {
      "type": "boolean",
      "description": "Whether encryption at rest is enabled."
    },
    "isPubliclyAccessible": {
      "type": "boolean",
      "description": "Whether the data store is accessible from the public internet."
    },
    "riskLevel": {
      "type": "string",
      "description": "Overall risk level computed from data sensitivity and security posture.",
      "enum": [
        "critical",
        "high",
        "medium",
        "low"
      ]
    },
    "sensitiveDataCount": {
      "type": "int32",
      "description": "Number of sensitive data assets found in this data store."
    },
    "classificationLabels": {
      "type": "array",
      "description": "Distinct classification labels found in the data store.",
      "items": {
        "type": "string"
      }
    },
    "dataAssetCount": {
      "type": "int32",
      "description": "Total number of data assets discovered in this data store."
    },
    "discoveredAt": {
      "type": "datetime",
      "description": "Timestamp when the data store was first discovered by DSPM."
    },
    "lastScannedAt": {
      "type": "datetime",
      "description": "Timestamp of the most recent data classification scan."
    }
  }
}