openapi: 3.2.0
info:
  title: Palo Alto Networks Cloud API
  version: '1.0'
  description: 'Operations tagged Cloud across 4 of this provider''s published API definitions: palo-alto-compute-34-03-openapi-34-03-138-sh-openapi.json, palo-alto-compute-openapi-34-04-145-sh-openapi.json, palo-alto-cwpp-34-03-openapi-34-03-138-saas-openapi.json, palo-alto-cwpp-openapi-34-04-145-saas-openapi.json. Each path carries the servers of the definition it was published in.'
servers:
- url: PATH_TO_CONSOLE
tags:
- name: Cloud
  description: Cloud. 6 operations in this definition.
  x-description-source: desc/cloud/cloud.md
paths:
  /api/v34.03/cloud/discovery:
    get:
      description: 'Get Cloud Discovery Scan Results. GET /api/v34.03/cloud/discovery on the Cloud API. Takes 11 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'Provider is the provider filter.

          '
        in: query
        name: provider
        schema:
          description: 'Provider is the provider filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'CredentialID is the account filter.

          '
        in: query
        name: credentialID
        schema:
          description: 'CredentialID is the account filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ServiceType is the service type filter.

          '
        in: query
        name: serviceType
        schema:
          description: 'ServiceType is the service type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Registry is the registry filter.

          '
        in: query
        name: registry
        schema:
          description: 'Registry is the registry filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AccountName is the account name filter.

          '
        in: query
        name: accountName
        schema:
          description: 'AccountName is the account name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Agentless is the agentless filter.

          '
        in: query
        name: agentless
        schema:
          type: boolean
      - description: 'Zone is the zone filter.

          '
        in: query
        name: zone
        schema:
          description: 'Zone is the zone filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.CloudDiscoveryResult'
          description: ''
        default:
          description: ''
      tags:
      - Cloud
      x-prisma-cloud-target-env:
        permission: monitorCloud
      operationId: get-cloud-discovery
      summary: Get Cloud Discovery Scan Results
      x-description-source: desc/cloud/discovery_get.md
  /api/v34.03/cloud/discovery/download:
    get:
      description: 'Download Cloud Discovery Scan Results. GET /api/v34.03/cloud/discovery/download on the Cloud API. Takes 11 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'Provider is the provider filter.

          '
        in: query
        name: provider
        schema:
          description: 'Provider is the provider filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'CredentialID is the account filter.

          '
        in: query
        name: credentialID
        schema:
          description: 'CredentialID is the account filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ServiceType is the service type filter.

          '
        in: query
        name: serviceType
        schema:
          description: 'ServiceType is the service type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Registry is the registry filter.

          '
        in: query
        name: registry
        schema:
          description: 'Registry is the registry filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AccountName is the account name filter.

          '
        in: query
        name: accountName
        schema:
          description: 'AccountName is the account name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Agentless is the agentless filter.

          '
        in: query
        name: agentless
        schema:
          type: boolean
      - description: 'Zone is the zone filter.

          '
        in: query
        name: zone
        schema:
          description: 'Zone is the zone filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Cloud
      x-prisma-cloud-target-env:
        permission: monitorCloud
      operationId: get-cloud-discovery-download
      summary: Download Cloud Discovery Scan Results
      x-description-source: desc/cloud/discovery_download_get.md
  /api/v34.03/cloud/discovery/entities:
    get:
      description: 'Get Discovered Cloud Entities. GET /api/v34.03/cloud/discovery/entities on the Cloud API. Takes 11 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'CredentialID is the account filter.

          '
        in: query
        name: credentialID
        schema:
          description: 'CredentialID is the account filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ServiceType is the service type filter.

          '
        in: query
        name: serviceType
        schema:
          description: 'ServiceType is the service type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Registry is the registry filter.

          '
        in: query
        name: registry
        schema:
          description: 'Registry is the registry filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Zone is the zone filter.

          '
        in: query
        name: zone
        schema:
          description: 'Zone is the zone filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Defended is the defended filter.

          '
        in: query
        name: defended
        schema:
          type: boolean
      - description: 'Images is used for filtering discovered entities by the container image names of a CaaS specification (e.g., AWS ECS Task Definition, GCP Cloud Run, ACI).

          '
        in: query
        name: images
        schema:
          description: 'Images is used for filtering discovered entities by the container image names of a CaaS specification (e.g., AWS ECS Task Definition, GCP Cloud Run, ACI).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ImageDigests is used for filtering discovered entities by the container image digests of a CaaS specification (e.g., AWS ECS Task Definition, GCP Cloud Run, ACI).

          '
        in: query
        name: imageDigests
        schema:
          description: 'ImageDigests is used for filtering discovered entities by the container image digests of a CaaS specification (e.g., AWS ECS Task Definition, GCP Cloud Run, ACI).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.CloudDiscoveryEntity'
          description: ''
        default:
          description: ''
      tags:
      - Cloud
      x-prisma-cloud-target-env:
        permission: monitorCloud
      operationId: get-cloud-discovery-entities
      summary: Get Discovered Cloud Entities
      x-description-source: desc/cloud/discovery_entities_get.md
  /api/v34.03/cloud/discovery/scan:
    post:
      description: 'Start a Cloud Discovery Scan. POST /api/v34.03/cloud/discovery/scan on the Cloud API. Documented responses: 200.'
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Cloud
      x-prisma-cloud-target-env:
        permission: monitorCloud
      operationId: post-cloud-discovery-scan
      summary: Start a Cloud Discovery Scan
      x-description-source: desc/cloud/discovery_scan_post.md
  /api/v34.03/cloud/discovery/stop:
    post:
      description: 'Stop a Cloud Discovery Scan. POST /api/v34.03/cloud/discovery/stop on the Cloud API. Documented responses: 200.'
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Cloud
      x-prisma-cloud-target-env:
        permission: monitorCloud
      operationId: post-cloud-discovery-stop
      summary: Stop a Cloud Discovery Scan
      x-description-source: desc/cloud/discovery_stop_post.md
  /api/v34.03/cloud/discovery/vms:
    get:
      description: 'Get Discovered VMs. GET /api/v34.03/cloud/discovery/vms on the Cloud API. Takes 7 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'Provider is the provider filter.

          '
        in: query
        name: provider
        schema:
          description: 'Provider is the provider filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Region is the region filter.

          '
        in: query
        name: region
        schema:
          description: 'Region is the region filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'HasDefender indicates only VMs with or without a defender should return.

          '
        in: query
        name: hasDefender
        schema:
          type: boolean
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.DiscoveredVM'
          description: ''
        default:
          description: ''
      tags:
      - Cloud
      x-prisma-cloud-target-env:
        permission: monitorCloud
      operationId: get-cloud-discovery-vms
      summary: Get Discovered VMs
      x-description-source: desc/cloud/discovery_vms_get.md
  /api/v34.04/cloud/discovery:
    get:
      description: 'Get Cloud Discovery Scan Results. GET /api/v34.04/cloud/discovery on the Cloud API. Takes 11 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'Provider is the provider filter.

          '
        in: query
        name: provider
        schema:
          description: 'Provider is the provider filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'CredentialID is the account filter.

          '
        in: query
        name: credentialID
        schema:
          description: 'CredentialID is the account filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ServiceType is the service type filter.

          '
        in: query
        name: serviceType
        schema:
          description: 'ServiceType is the service type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Registry is the registry filter.

          '
        in: query
        name: registry
        schema:
          description: 'Registry is the registry filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AccountName is the account name filter.

          '
        in: query
        name: accountName
        schema:
          description: 'AccountName is the account name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Agentless is the agentless filter.

          '
        in: query
        name: agentless
        schema:
          type: boolean
      - description: 'Zone is the zone filter.

          '
        in: query
        name: zone
        schema:
          description: 'Zone is the zone filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.CloudDiscoveryResult'
          description: ''
        default:
          description: ''
      tags:
      - Cloud
      x-prisma-cloud-target-env:
        permission: monitorCloud
      operationId: get-cloud-discovery
      summary: Get Cloud Discovery Scan Results
      x-description-source: desc/cloud/discovery_get.md
  /api/v34.04/cloud/discovery/download:
    get:
      description: 'Download Cloud Discovery Scan Results. GET /api/v34.04/cloud/discovery/download on the Cloud API. Takes 11 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'Provider is the provider filter.

          '
        in: query
        name: provider
        schema:
          description: 'Provider is the provider filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'CredentialID is the account filter.

          '
        in: query
        name: credentialID
        schema:
          description: 'CredentialID is the account filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ServiceType is the service type filter.

          '
        in: query
        name: serviceType
        schema:
          description: 'ServiceType is the service type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Registry is the registry filter.

          '
        in: query
        name: registry
        schema:
          description: 'Registry is the registry filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'AccountName is the account name filter.

          '
        in: query
        name: accountName
        schema:
          description: 'AccountName is the account name filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Agentless is the agentless filter.

          '
        in: query
        name: agentless
        schema:
          type: boolean
      - description: 'Zone is the zone filter.

          '
        in: query
        name: zone
        schema:
          description: 'Zone is the zone filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Cloud
      x-prisma-cloud-target-env:
        permission: monitorCloud
      operationId: get-cloud-discovery-download
      summary: Download Cloud Discovery Scan Results
      x-description-source: desc/cloud/discovery_download_get.md
  /api/v34.04/cloud/discovery/entities:
    get:
      description: 'Get Discovered Cloud Entities. GET /api/v34.04/cloud/discovery/entities on the Cloud API. Takes 11 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'CredentialID is the account filter.

          '
        in: query
        name: credentialID
        schema:
          description: 'CredentialID is the account filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ServiceType is the service type filter.

          '
        in: query
        name: serviceType
        schema:
          description: 'ServiceType is the service type filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Registry is the registry filter.

          '
        in: query
        name: registry
        schema:
          description: 'Registry is the registry filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Zone is the zone filter.

          '
        in: query
        name: zone
        schema:
          description: 'Zone is the zone filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Defended is the defended filter.

          '
        in: query
        name: defended
        schema:
          type: boolean
      - description: 'Images is used for filtering discovered entities by the container image names of a CaaS specification (e.g., AWS ECS Task Definition, GCP Cloud Run, ACI).

          '
        in: query
        name: images
        schema:
          description: 'Images is used for filtering discovered entities by the container image names of a CaaS specification (e.g., AWS ECS Task Definition, GCP Cloud Run, ACI).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'ImageDigests is used for filtering discovered entities by the container image digests of a CaaS specification (e.g., AWS ECS Task Definition, GCP Cloud Run, ACI).

          '
        in: query
        name: imageDigests
        schema:
          description: 'ImageDigests is used for filtering discovered entities by the container image digests of a CaaS specification (e.g., AWS ECS Task Definition, GCP Cloud Run, ACI).

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_shared.CloudDiscoveryEntity'
          description: ''
        default:
          description: ''
      tags:
      - Cloud
      x-prisma-cloud-target-env:
        permission: monitorCloud
      operationId: get-cloud-discovery-entities
      summary: Get Discovered Cloud Entities
      x-description-source: desc/cloud/discovery_entities_get.md
  /api/v34.04/cloud/discovery/scan:
    post:
      description: 'Start a Cloud Discovery Scan. POST /api/v34.04/cloud/discovery/scan on the Cloud API. Documented responses: 200.'
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Cloud
      x-prisma-cloud-target-env:
        permission: monitorCloud
      operationId: post-cloud-discovery-scan
      summary: Start a Cloud Discovery Scan
      x-description-source: desc/cloud/discovery_scan_post.md
  /api/v34.04/cloud/discovery/stop:
    post:
      description: 'Stop a Cloud Discovery Scan. POST /api/v34.04/cloud/discovery/stop on the Cloud API. Documented responses: 200.'
      responses:
        '200':
          description: OK
        default:
          description: ''
      tags:
      - Cloud
      x-prisma-cloud-target-env:
        permission: monitorCloud
      operationId: post-cloud-discovery-stop
      summary: Stop a Cloud Discovery Scan
      x-description-source: desc/cloud/discovery_stop_post.md
  /api/v34.04/cloud/discovery/vms:
    get:
      description: 'Get Discovered VMs. GET /api/v34.04/cloud/discovery/vms on the Cloud API. Takes 7 query parameters. Documented responses: 200.'
      parameters:
      - description: 'Offsets the result to a specific report count. Offset starts from 0.

          '
        in: query
        name: offset
        schema:
          type: integer
      - description: 'Limit is the amount to fix.

          '
        in: query
        name: limit
        schema:
          type: integer
      - description: 'Sorts the result using a key.

          '
        in: query
        name: sort
        schema:
          type: string
      - description: 'Sorts the result in reverse order.

          '
        in: query
        name: reverse
        schema:
          type: boolean
      - description: 'Provider is the provider filter.

          '
        in: query
        name: provider
        schema:
          description: 'Provider is the provider filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'Region is the region filter.

          '
        in: query
        name: region
        schema:
          description: 'Region is the region filter.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
      - description: 'HasDefender indicates only VMs with or without a defender should return.

          '
        in: query
        name: hasDefender
        schema:
          type: boolean
      responses:
        '200':
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/-_types.DiscoveredVM'
          description: ''
        default:
          description: ''
      tags:
      - Cloud
      x-prisma-cloud-target-env:
        permission: monitorCloud
      operationId: get-cloud-discovery-vms
      summary: Get Discovered VMs
      x-description-source: desc/cloud/discovery_vms_get.md
components:
  schemas:
    common.OSDistroInfo:
      description: OSDistroInfo represents information regarding the OS distribution
      properties:
        distro:
          description: 'Distro is the OS distro name (e.g. ubuntu).

            '
          type: string
        distroRelease:
          description: 'DistroRelease is the OS distro release (e.g. willy).

            '
          type: string
        fullName:
          description: 'FullName is the full name of the distro (e.g. Ubuntu 19.10).

            '
          type: string
        underlyingDistro:
          description: 'UnderlyingDistro is used in cases OS an OS is built on top of another, and we need to know both.

            '
          type: string
        underlyingDistroRelease:
          description: 'UnderlyingDistroRelease is used in cases OS an OS is built on top of another, and we need to know both.

            '
          type: string
        version:
          description: 'Version is the OS release numeric version (e.g. 19.10).

            '
          type: string
      type: object
    prisma.ECSLaunchType:
      enum:
      - - EC2
        - FARGATE
        - EXTERNAL
      type: string
    -_shared.CloudDiscoveryEntity:
      items:
        $ref: '#/components/schemas/shared.CloudDiscoveryEntity'
      type: array
    common.CloudProvider:
      description: CloudProvider specifies the cloud provider name
      enum:
      - - aws
        - azure
        - gcp
        - alibaba
        - oci
        - others
      type: string
    common.ExternalLabel:
      description: ExternalLabel holds an external label with a source and timestamp
      properties:
        key:
          description: 'Label key.

            '
          type: string
        sourceName:
          description: 'Source name (e.g., for a namespace, the source name can be ''twistlock'').

            '
          type: string
        sourceType:
          $ref: '#/components/schemas/common.ExternalLabelSourceType'
        timestamp:
          description: 'Time when the label was fetched.

            '
          format: date-time
          type: string
        value:
          description: 'Value of the label.

            '
          type: string
      type: object
    -_shared.CloudDiscoveryResult:
      items:
        $ref: '#/components/schemas/shared.CloudDiscoveryResult'
      type: array
    shared.CloudDiscoveryResult:
      description: CloudDiscoveryResult represents a cloud scan result for a specific cloud provider, service and region
      properties:
        accountID:
          description: 'AccountID is the cloud account ID.

            '
          type: string
        accountName:
          description: 'AccountName is the cloud account name.

            '
          type: string
        agentless:
          description: 'Agentless indicates whether the account is scan by agentless.

            '
          type: boolean
        collections:
          description: 'Collections are the matched result collections.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        credentialId:
          description: 'CredentialID is the id reference of the credential used.

            '
          type: string
        defended:
          description: 'Defended is the number of defended entities (registries, functions, clusters).

            '
          type: integer
        defenseCoverage:
          description: 'DefenseCoverage is the defense coverage percentage (0-100).

            '
          type: integer
        err:
          description: 'Err holds any error found during a scan.

            '
          type: string
        nodes:
          description: 'Nodes is the number of nodes.

            '
          type: integer
        project:
          description: 'Project is the GCP project that was scanned.

            '
          type: string
        provider:
          $ref: '#/components/schemas/common.CloudProvider'
        region:
          description: 'Region is the region that was scanned, for example: GCP - "us-east-1", Azure - "westus".

            '
          type: string
        registry:
          description: 'Registry is the registry that was scanned, for example: testcloudscanregistry.azurecr.io.

            '
          type: string
        registryTags:
          additionalProperties:
            $ref: '#/components/schemas/string'
          description: 'RegistryTags are the registry tags.

            '
          type: object
        serviceType:
          $ref: '#/components/schemas/shared.ScanResultType'
        total:
          description: 'Total is total number of entities found in cloud scan.

            '
          type: integer
        undefended:
          description: 'Undefended is the number of undefended entities (registries, functions, clusters).

            '
          type: integer
        zone:
          description: 'Zone is the zone that was scanned, only relevant to GCP.

            '
          type: string
      type: object
    string:
      type: string
    common.ExternalLabelSourceType:
      description: ExternalLabelSourceType indicates the source of the labels
      enum:
      - - namespace
        - deployment
        - pod
        - aws
        - azure
        - gcp
        - oci
      type: string
    types.DiscoveredVM:
      description: DiscoveredVM represents the information about the instance, fetched from the cloud compute interface
      properties:
        _id:
          description: 'ID is the instance id. E.g. "i-5cd23551".

            '
          type: string
        accountID:
          description: 'AccountID is the cloud provider account ID.

            '
          type: string
        architecture:
          description: 'Architecture is the architecture of the image.

            '
          type: string
        arn:
          description: 'The Amazon Resource Name (ARN) assigned to the instance.

            '
          type: string
        awsSubnetID:
          description: 'AWSSubnetID is the ID of the subnet associated with the VM (AWS only).

            '
          type: string
        awsVPCID:
          description: 'AWSVPCID is the ID of the VPC associated with the VM (AWS only).

            '
          type: string
        cluster:
          description: 'Cluster is the cluster name that is associated with the vm.

            '
          type: string
        collections:
          description: 'Collections is a list of the matched collections.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        createdAt:
          description: 'CreatedAt is the time when the instance was launched.

            '
          format: date-time
          type: string
        fqdn:
          description: 'FQDN is the host''s fully qualified domain name . E.g. "ip-192-0-2-0.us-east-2.compute.internal".

            '
          type: string
        hasDefender:
          description: 'HasDefender indicates that the instance has a defender installed on it.

            '
          type: boolean
        hostname:
          description: 'Hostname is the hostname. E.g. "ip-192-0-2-0" or "custom".

            '
          type: string
        imageID:
          description: 'ImageID is the ID of the AMI used to launch the instance. E.g. "ami-35501205".

            '
          type: string
        imageName:
          description: 'ImageName is the name of the AMI used to launch the instance.

            '
          type: string
        name:
          description: 'Name is the instance name.

            '
          type: string
        os:
          description: 'OS is the Operating System installed on the instance.

            '
          type: string
        osInfo:
          $ref: '#/components/schemas/common.OSDistroInfo'
        provider:
          $ref: '#/components/schemas/common.CloudProvider'
        region:
          description: 'Region is the region the VM is located at.

            '
          type: string
        tags:
          description: 'Tags are the tags of the VM instance.

            '
          items:
            $ref: '#/components/schemas/common.ExternalLabel'
          type: array
        timestamp:
          description: 'Timestamp is the time in which the instance info was fetched.

            '
          format: date-time
          type: string
      type: object
    shared.ScanResultType:
      description: ScanResultType represents a cloud scan result type
      enum:
      - - aws-ecr
        - aws-lambda
        - aws-ecs-task-definition
        - aws-ec2
        - aws-eks
        - aws-eks-fargate-container
        - aws-ecs
        - aws-s3
        - aws-config
        - aws-cloud-trail
        - aws-kms
        - aws-cloud-watch
        - aws-sns
        - aws-security-hub
        - aws-secrets-manager
        - aws-parameter-store
        - azure-acr
        - azure-functions
        - azure-aks
        - azure-aci
        - azure-vm
        - gcp-gcr
        - gcp-gcf
        - gcp-gke
        - gcp-vm
        - gcp-artifact
        - gcp-cloud-run-service
        - oci-instance
      type: string
    -_types.DiscoveredVM:
      items:
        $ref: '#/components/schemas/types.DiscoveredVM'
      type: array
    shared.CloudDiscoveryEntity:
      description: CloudDiscoveryEntity holds data about a discovered entity
      properties:
        accountID:
          description: 'AccountID is the cloud provider account ID.

            '
          type: string
        activeServicesCount:
          description: 'ActiveServicesCount is the number of active services in ecs cluster.

            '
          format: int64
          type: integer
        arn:
          description: 'The Amazon Resource Name (ARN) assigned to the entity.

            '
          type: string
        collections:
          description: 'Collections are the matched result collections.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        containerGroup:
          description: 'ContainerGroup is the azure aci container group the container belongs to.

            '
          type: string
        createdAt:
          description: 'CreatedAt is the time when the entity was created.

            '
          format: date-time
          type: string
        defended:
          description: 'Defended indicates if the entity is defended.

            '
          type: boolean
        endpoints:
          description: 'Endpoints are the cluster endpoints.

            '
          items:
            $ref: '#/components/schemas/string'
          type: array
        image:
          description: 'Image is the container image name as defined in a CaaS specification (e.g., AWS ECS Task Definition, GCP Cloud Run, ACI).

            '
          type: string
        imageDigest:
          description: 'ImageDigest is the image digest.

            '
          type: string
        kubernetes:
          $ref: '#/components/schemas/shared.CloudDiscoveryKubernetesMetadata'
        lastModified:
          description: 'LastModified is the modification time of the function.

            '
          format: date-time
          type: string
        launchTypes:
          description: 'LaunchTypes are task launch types the task definition was validated against.

            '
          items:
            $ref: '#/components/schemas/prisma.ECSLaunchType'
          type: array
        name:
          description: 'Name is the name of the entity.

            '
          type: string
        nodesCount:
          description: 'NodesCount is the number of nodes in the cluster (aks, gke).

            '
          type: integer
        provider:
          $ref: '#/components/schemas/common.CloudProvider'
        region:
          description: 'Region is the region that was scanned, for example: GCP - "us-east-1", Azure - "westus".

            '
          type: string
        registry:
          description: 'Registry is the Azure registry that was scanned, for example: testcloudscanregistry.azurecr.io.

            '
          type: string
        resourceGroup:
          description: 'ResourceGroup is the the azure resource group containing the entity.

            '
          type: string
        runningTasksCount:
          description: 'RunningTasksCount is the number of running tasks in ecs cluster.

            '
          format: int64
          type: integer
        runtime:
          description: 'Runtime is runtime environment for the function, i.e. nodejs.

            '
          type: string
        service:
          description: 'Service is the GCP Cloud Run service that was scanned.

            '
          type: string
        serviceRevision:
          description: 'CloudRunServiceRevision is the GCP Cloud Run service revision that was scanned.

            '
          type: string
        serviceType:
          $ref: '#/components/schemas/shared.ScanResultType'
        status:
          description: 'Status is the current status of entity.

            '
          type: string
        timestamp:
          description: 'Timestamp is the time in which the instance info was fetched.

            '
          format: date-time
          type: string
        version:
          description: 'Version is the version of the entity.

            '
          type: string
        zone:
          description: 'Zone is the GCP zone that was scanned.

            '
          type: string
      type: object
    shared.CloudDiscoveryKubernetesMetadata:
      properties:
        namespace:
          description: 'Namespace is the namespace containing the discovered Kubernetes entity, e.g., a container.

            '
          type: string
        podName:
          description: 'PodName is the name of the pod containing the discovered Kubernetes entity, e.g., a container.

            '
          type: string
      type: object
x-refined-from:
- palo-alto-compute-34-03-openapi-34-03-138-sh-openapi.json
- palo-alto-compute-openapi-34-04-145-sh-openapi.json
- palo-alto-cwpp-34-03-openapi-34-03-138-saas-openapi.json
- palo-alto-cwpp-openapi-34-04-145-saas-openapi.json