CloudGuard

CloudGuard Network Security API

Cloud network security - AWS/Azure security group policies, cloud security groups, IP lists, IP address metadata and access leases for just-in-time network access.

GitHub OpenAPI

Operations 49

POST /v2/accesslease/aws Acquire Aws Lease #
GET /v2/AccessLease Get #
DELETE /v2/AccessLease/{id} Delete #
GET /v2/access-lease-invitation/access/{invitationId} Access Invitation #
GET /v2/AccessLeaseInvitation Get Pending Invitations #
POST /v2/AccessLeaseInvitation Create Invitation #
DELETE /v2/AccessLeaseInvitation/{id} Delete #
GET /v2/AwsSecurityGroup/{id}/ReferencingGroups Get All Referenced Security Groups #
GET /v2/AwsSecurityGroup Get All Security Groups #
GET /v2/AwsSecurityGroupPolicy/CloudAccount/{id} Get By Cloud Account #
GET /v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId} Get By External Security Group Id #
DELETE /v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId} Delete Cloud Security Group #
POST /v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId}/ProtectionMode Post Protection Mode #
PUT /v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId}/Services/{policyType} Update Service In Security Group #
POST /v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId}/Services/{policyType} Add Service To Security Group #
DELETE /v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId}/Services/{policyType}/{serviceId} Delete Service From Security Group #
POST /v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId}/tags Update Tags #
GET /v2/AwsSecurityGroupPolicy Get All Security Groups Of Account #
POST /v2/AwsSecurityGroupPolicy Create Aws Security Group #
GET /v2/AzureSecurityGroup/{id} Get #
GET /v2/AzureSecurityGroup Get #
GET /v2/AzureSecurityGroupPolicy/{id} Get #
PUT /v2/AzureSecurityGroupPolicy/{id} Put #
DELETE /v2/AzureSecurityGroupPolicy/{id} Delete #
PUT /v2/AzureSecurityGroupPolicy/{policyId}/TamperProtected Update Protection Mode #
GET /v2/AzureSecurityGroupPolicy/Stats Get Stats #
GET /v2/AzureSecurityGroupPolicy Get #
POST /v2/AzureSecurityGroupPolicy Post #
GET /v2/cloudsecuritygroup/{id} Get #
PUT /v2/cloudsecuritygroup/{id} Put #
DELETE /v2/cloudsecuritygroup/{id} Delete Cloud Security Group #
PATCH /v2/cloudsecuritygroup/{id} Update Sec Group #
POST /v2/cloudsecuritygroup/{id}/protection-mode Change Protection Mode #
PUT /v2/cloudsecuritygroup/{groupid}/services/{policyType} Update Service For Cloud To Security Group #
POST /v2/cloudsecuritygroup/{groupid}/services/{policyType} Add Service Cloud To Security Group #
DELETE /v2/cloudsecuritygroup/{groupid}/services/{policyType}/{serviceid} Delete Service For Cloud To Security Group #
POST /v2/cloudsecuritygroup/{groupid}/tags Update Tags #
GET /v2/cloudsecuritygroup/{groupid}/history Get Security Group Revision History #
GET /v2/CloudSecurityGroup Get #
POST /v2/CloudSecurityGroup Create Cloud Security Group #
GET /v2/IpAddressMetadata Get #
PUT /v2/IpAddressMetadata Put #
POST /v2/IpAddressMetadata Post #
DELETE /v2/IpAddressMetadata Delete #
GET /v2/IpList Get #
POST /v2/IpList Post #
GET /v2/IpList/{id} Get #
PUT /v2/IpList/{id} Put #
DELETE /v2/IpList/{id} Delete #

Documentation

📖
Documentation
https://docs.cgn.portal.checkpoint.com/reference
📖
APIReference
https://docs.cgn.portal.checkpoint.com/reference/introduction
📖
Authentication
https://docs.cgn.portal.checkpoint.com/reference/authentication

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/cloudguard/refs/heads/main/openapi/cloudguard-network-security-openapi.yml

Other Resources

🔗
Overlay
https://raw.githubusercontent.com/api-evangelist/cloudguard/refs/heads/main/overlays/cloudguard-network-security-overlay.yaml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/cloudguard-network-security-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

cloudguard-network-security-openapi.yml Raw ↑ 
info:
  title: Network Security
  version: v2
openapi: 3.0.0
servers:
- url: https://api.dome9.com/
  description: US region
- url: https://api.{region}.dome9.com/
  description: Other regions
  variables:
    region:
      enum:
      - eu1
      - ap1
      - ap2
      - ap3
      - cace1
      default: eu1
paths:
  /v2/accesslease/aws:
    post:
      tags:
      - Access Lease
      summary: Acquire Aws Lease
      operationId: AccessLease_AcquireAwsLease_post_/v2/accesslease/aws
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.AwsAccessLeasePostViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.AwsAccessLeasePostViewModel'
        description: details for the lease
        required: true
      description: Create a new Access Lease for an AWS service
  /v2/AccessLease:
    get:
      tags:
      - Access Lease
      summary: Get
      operationId: AccessLease_Get_get_/v2/AccessLease
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Models.AccessLeasesGroupedViewModel'
      description: Get a list of all active Access Leases
  /v2/AccessLease/{id}:
    delete:
      tags:
      - Access Lease
      summary: Delete
      operationId: AccessLease_Delete_delete_/v2/AccessLease/{id}
      parameters:
      - name: id
        in: path
        description: the id of the lease to terminate
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '204':
          description: No Content
      description: Terminate an Access Lease
  /v2/access-lease-invitation/access/{invitationId}:
    get:
      tags:
      - Access Lease Invitation
      summary: Access Invitation
      operationId: AccessLeaseInvitation_AccessInvitation_get_/v2/access-lease-invitation/access/{invitationId}
      parameters:
      - name: invitationId
        in: path
        description: the id of the invitation
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      description: Get a specific invitation
  /v2/AccessLeaseInvitation:
    get:
      tags:
      - Access Lease Invitation
      summary: Get Pending Invitations
      description: Get a list of pending invitations (invitations not yet activated)
      operationId: AccessLeaseInvitation_GetPendingInvitations_get_/v2/AccessLeaseInvitation
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Dome9.Web.Api.Models.AccessLeaseInvitationViewModel'
    post:
      tags:
      - Access Lease Invitation
      summary: Create Invitation
      operationId: AccessLeaseInvitation_CreateInvitationAsync_post_/v2/AccessLeaseInvitation
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.AccessLeaseInvitationViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.AccessLeaseInvitationViewModel'
        description: lease invitation details
        required: true
      description: Create a new Lease Invitation
  /v2/AccessLeaseInvitation/{id}:
    delete:
      tags:
      - Access Lease Invitation
      summary: Delete
      operationId: AccessLeaseInvitation_Delete_delete_/v2/AccessLeaseInvitation/{id}
      parameters:
      - name: id
        in: path
        description: the id of the lease to delete
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '204':
          description: No Content
      description: Delete a lease invitation
  /v2/AwsSecurityGroup/{id}/ReferencingGroups:
    get:
      tags:
      - Aws Security Group
      summary: Get All Referenced Security Groups
      operationId: AwsSecurityGroup_GetAllReferencedSecurityGroups_get_/v2/AwsSecurityGroup/{id}/ReferencingGroups
      parameters:
      - name: id
        in: path
        description: Aws security group id
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Dome9.Web.Api.AwsSecurityGroup.AwsSecurityGroupViewModel'
      description: Get all referenced security groups
  /v2/AwsSecurityGroup:
    get:
      tags:
      - Aws Security Group
      summary: Get All Security Groups
      operationId: AwsSecurityGroup_GetAllSecurityGroups_get_/v2/AwsSecurityGroup
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Dome9.Web.Api.AwsSecurityGroup.AwsSecurityGroupViewModel'
      description: Get all Aws security group Entities
  /v2/AwsSecurityGroupPolicy/CloudAccount/{id}:
    get:
      tags:
      - Aws Security Group Policy
      summary: Get By Cloud Account
      operationId: AwsSecurityGroupPolicy_GetByCloudAccount_get_/v2/AwsSecurityGroupPolicy/CloudAccount/{id}
      parameters:
      - name: id
        in: path
        description: cloud account id
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupPolicyViewModel'
      description: Get all security groups policies of cloud account by cloud account id
  /v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId}:
    get:
      tags:
      - Aws Security Group Policy
      summary: Get By External Security Group Id
      operationId: AwsSecurityGroupPolicy_GetByExternalSecurityGroupId_get_/v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId}
      parameters:
      - name: cloudAccountId
        in: path
        description: Cloud account id
        required: true
        schema:
          type: string
          format: uuid
      - name: externalId
        in: path
        description: Aws security group id
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupPolicyViewModel'
      description: Get security group policy by external security group id and cloud account id
    delete:
      tags:
      - Aws Security Group Policy
      summary: Delete Cloud Security Group
      operationId: AwsSecurityGroupPolicy_DeleteCloudSecurityGroup_delete_/v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId}
      parameters:
      - name: cloudAccountId
        in: path
        description: Cloud account id
        required: true
        schema:
          type: string
          format: uuid
      - name: externalId
        in: path
        description: Aws security group id
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
      description: Delete an AWS security group
  /v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId}/ProtectionMode:
    post:
      tags:
      - Aws Security Group Policy
      summary: Post Protection Mode
      operationId: AwsSecurityGroupPolicy_PostProtectionMode_post_/v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId}/ProtectionMode
      parameters:
      - name: cloudAccountId
        in: path
        description: Cloud account id
        required: true
        schema:
          type: string
          format: uuid
      - name: externalId
        in: path
        description: Aws security group id
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupProtectionModeChangeViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupProtectionModeChangeViewModel'
        description: 'protectionMode: FullManage / ReadOnly'
        required: true
      description: Update protection mode to security group
  /v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId}/Services/{policyType}:
    put:
      tags:
      - Aws Security Group Policy
      summary: Update Service In Security Group
      operationId: AwsSecurityGroupPolicy_UpdateServiceInSecurityGroup_put_/v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId}/Services/{policyType}
      parameters:
      - name: cloudAccountId
        in: path
        description: Cloud account id
        required: true
        schema:
          type: string
          format: uuid
      - name: externalId
        in: path
        description: Aws security group id
        required: true
        schema:
          type: string
      - name: policyType
        in: path
        description: the service type (Inbound / Outbound)
        required: true
        schema:
          type: string
          enum:
          - Inbound
          - Outbound
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupServiceViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupServiceViewModel'
        description: updated details for the service
        required: true
      description: Update a service (rule) for an AWS security group
    post:
      tags:
      - Aws Security Group Policy
      summary: Add Service To Security Group
      operationId: AwsSecurityGroupPolicy_AddServiceToSecurityGroup_post_/v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId}/Services/{policyType}
      parameters:
      - name: cloudAccountId
        in: path
        description: Cloud account id
        required: true
        schema:
          type: string
          format: uuid
      - name: externalId
        in: path
        description: Aws security group id
        required: true
        schema:
          type: string
      - name: policyType
        in: path
        description: the service type (Inbound / Outbound))
        required: true
        schema:
          type: string
          enum:
          - Inbound
          - Outbound
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupPolicyServiceViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupPolicyServiceViewModel'
        description: details for the service
        required: true
      description: Creat a new Service (rule) for the security group
  /v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId}/Services/{policyType}/{serviceId}:
    delete:
      tags:
      - Aws Security Group Policy
      summary: Delete Service From Security Group
      operationId: AwsSecurityGroupPolicy_DeleteServiceFromSecurityGroup_delete_/v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId}/Services/{policyType}/{serviceId}
      parameters:
      - name: cloudAccountId
        in: path
        description: Cloud account id
        required: true
        schema:
          type: string
          format: uuid
      - name: externalId
        in: path
        description: Aws security group id
        required: true
        schema:
          type: string
      - name: policyType
        in: path
        description: the service type (Inbound / Outbound)
        required: true
        schema:
          type: string
          enum:
          - Inbound
          - Outbound
      - name: serviceId
        in: path
        description: the service id
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
      description: Delete a service (rule) from an AWS security group
  /v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId}/tags:
    post:
      tags:
      - Aws Security Group Policy
      summary: Update Tags
      operationId: AwsSecurityGroupPolicy_UpdateTags_post_/v2/AwsSecurityGroupPolicy/CloudAccount/{cloudAccountId}/Policy/{externalId}/tags
      parameters:
      - name: cloudAccountId
        in: path
        description: Cloud account id
        required: true
        schema:
          type: string
          format: uuid
      - name: externalId
        in: path
        description: Aws security group id
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupTagsChangeViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupTagsChangeViewModel'
        description: 'Tags model - {{ "key" : "value" }}'
        required: true
      description: Update tags
  /v2/AwsSecurityGroupPolicy:
    get:
      tags:
      - Aws Security Group Policy
      summary: Get All Security Groups Of Account
      operationId: AwsSecurityGroupPolicy_GetAllSecurityGroupsOfAccount_get_/v2/AwsSecurityGroupPolicy
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupPolicyViewModel'
      description: Get a list of all security groups
    post:
      tags:
      - Aws Security Group Policy
      summary: Create Aws Security Group
      operationId: AwsSecurityGroupPolicy_CreateAwsSecurityGroup_post_/v2/AwsSecurityGroupPolicy
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupBaseViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupBaseViewModel'
        description: details for the new AWS security group
        required: true
      description: Create a new AWS security group
  /v2/AzureSecurityGroup/{id}:
    get:
      tags:
      - Azure Security Group
      operationId: AzureSecurityGroup_Get_get_/v2/AzureSecurityGroup/{id}
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Models.AzureSecurityGroupViewModel'
      description: ''
      summary: Get
  /v2/AzureSecurityGroup:
    get:
      tags:
      - Azure Security Group
      operationId: AzureSecurityGroup_Get_get_/v2/AzureSecurityGroup
      parameters:
      - name: cloudAccountId
        in: query
        required: false
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Dome9.Web.Api.Models.AzureSecurityGroupViewModel'
      description: ''
      summary: Get
  /v2/AzureSecurityGroupPolicy/{id}:
    get:
      tags:
      - Azure Security Group Policy
      summary: Get
      operationId: AzureSecurityGroupPolicy_Get_get_/v2/AzureSecurityGroupPolicy/{id}
      parameters:
      - name: id
        in: path
        description: the policy id (in Dome9)
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Azure.SecurityGroupPolicy.ViewModels.AzureSgPolicyGetViewModel'
      description: Get details for a specific Azure Network Security Group policy
    put:
      tags:
      - Azure Security Group Policy
      summary: Put
      operationId: AzureSecurityGroupPolicy_Put_put_/v2/AzureSecurityGroupPolicy/{id}
      parameters:
      - name: id
        in: path
        description: the security group policy id
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Azure.SecurityGroupPolicy.ViewModels.AzureSgPolicyGetViewModel'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Azure.SecurityGroupPolicy.ViewModels.AzureSgPolicyPostViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Azure.SecurityGroupPolicy.ViewModels.AzureSgPolicyPostViewModel'
        description: details for the policy, including the changes
        required: true
      description: Update a security group policy
    delete:
      tags:
      - Azure Security Group Policy
      summary: Delete
      operationId: AzureSecurityGroupPolicy_Delete_delete_/v2/AzureSecurityGroupPolicy/{id}
      parameters:
      - name: id
        in: path
        description: the security group policy id
        required: true
        schema:
          type: string
          format: uuid
      responses:
        '204':
          description: No Content
      description: Delete a security group policy
  /v2/AzureSecurityGroupPolicy/{policyId}/TamperProtected:
    put:
      tags:
      - Azure Security Group Policy
      summary: Update Protection Mode
      operationId: AzureSecurityGroupPolicy_UpdateProtectionMode_put_/v2/AzureSecurityGroupPolicy/{policyId}/TamperProtected
      parameters:
      - name: policyId
        in: path
        description: the security group policy id>
        required: true
        schema:
          type: string
          format: uuid
      - name: tamperProtected
        in: query
        description: enable/disable Tamper protection
        required: true
        schema:
          type: boolean
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Azure.SecurityGroupPolicy.ViewModels.AzureSgPolicyGetViewModel'
      description: Enable or disable Tamper Protetion for a specific security group policy
  /v2/AzureSecurityGroupPolicy/Stats:
    get:
      tags:
      - Azure Security Group Policy
      summary: Get Stats
      operationId: AzureSecurityGroupPolicy_GetStats_get_/v2/AzureSecurityGroupPolicy/Stats
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Dome9.Web.Api.Azure.SecurityGroupPolicy.ViewModels.AzureSgPolicyStatsViewModel'
      description: Get statistics for the security group policies for the Dome9 user
  /v2/AzureSecurityGroupPolicy:
    get:
      tags:
      - Azure Security Group Policy
      summary: Get
      operationId: AzureSecurityGroupPolicy_Get_get_/v2/AzureSecurityGroupPolicy
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Dome9.Web.Api.Azure.SecurityGroupPolicy.ViewModels.AzureSgPolicyGetViewModel'
      description: Get a list of all Network Security Group Policies for the Azure accounts in the Dome9 account
    post:
      tags:
      - Azure Security Group Policy
      summary: Post
      operationId: AzureSecurityGroupPolicy_Post_post_/v2/AzureSecurityGroupPolicy
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Azure.SecurityGroupPolicy.ViewModels.AzureSgPolicyGetViewModel'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Azure.SecurityGroupPolicy.ViewModels.AzureSgPolicyPostViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Azure.SecurityGroupPolicy.ViewModels.AzureSgPolicyPostViewModel'
        description: details for the policy
        required: true
      description: Create a security group policy
  /v2/cloudsecuritygroup/{id}:
    get:
      tags:
      - Cloud Security Group
      summary: Get
      operationId: CloudSecurityGroup_Get_get_/v2/cloudsecuritygroup/{id}
      parameters:
      - name: id
        in: path
        description: the AWS security group id (Dome9 internal ID / AWS securiy group ID)
        required: true
        schema:
          type: string
      - name: cloudAccountId
        in: query
        description: the security group cloud account ID (Optional)
        required: false
        schema:
          type: string
          format: uuid
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupWithSrlViewModel'
      description: Get a specific AWS security group
    put:
      tags:
      - Cloud Security Group
      summary: Put
      operationId: CloudSecurityGroup_Put_put_/v2/cloudsecuritygroup/{id}
      parameters:
      - name: id
        in: path
        description: the AWS security group id (Dome9 Internal Id / AWS Security group id)
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupViewModel'
        description: updated details for the security group
        required: true
      description: Update an AWS security group
    delete:
      tags:
      - Cloud Security Group
      summary: Delete Cloud Security Group
      operationId: CloudSecurityGroup_DeleteCloudSecurityGroup_delete_/v2/cloudsecuritygroup/{id}
      parameters:
      - name: id
        in: path
        description: the AWS security group id (Dome9 Internal Id / AWS Security group id)
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
      description: Delete an AWS security group
    patch:
      tags:
      - Cloud Security Group
      summary: Update Sec Group
      operationId: CloudSecurityGroup_UpdateSecGroup_patch_/v2/cloudsecuritygroup/{id}
      parameters:
      - name: id
        in: path
        description: the AWS security group id
        required: true
        schema:
          type: integer
          format: int64
      responses:
        '204':
          description: No Content
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupViewModel'
        description: updated details for the security group. only 'IsProtected' is used in this call which defines whether
          to protect or unprotect the security group.
        required: true
      description: Updates an AWS security group protection mode
  /v2/cloudsecuritygroup/{id}/protection-mode:
    post:
      tags:
      - Cloud Security Group
      summary: Change Protection Mode
      operationId: CloudSecurityGroup_ChangeProtectionMode_post_/v2/cloudsecuritygroup/{id}/protection-mode
      parameters:
      - name: id
        in: path
        description: the AWS security group id (Dome9 internal ID / AWS security group ID)
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupProtectionModeChangeViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupProtectionModeChangeViewModel'
        description: details for the security group, including the protection mode. Only 'ProtectionMode' is required in this
          call (FullManage or ReadOnly).
        required: true
      description: Change the protection mode for an AWS security group
  /v2/cloudsecuritygroup/{groupid}/services/{policyType}:
    put:
      tags:
      - Cloud Security Group
      summary: Update Service For Cloud To Security Group
      operationId: CloudSecurityGroup_UpdateServiceForCloudToSecurityGroup_put_/v2/cloudsecuritygroup/{groupid}/services/{policyType}
      parameters:
      - name: groupid
        in: path
        description: the security group id (Dome9 internal ID / AWS security group id)
        required: true
        schema:
          type: string
      - name: policyType
        in: path
        description: the service type (Inbound / Outbound)
        required: true
        schema:
          type: string
          enum:
          - Inbound
          - Outbound
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupServiceViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupServiceViewModel'
        description: updated details for the service
        required: true
      description: Update a service (rule) for an AWS security group
    post:
      tags:
      - Cloud Security Group
      summary: Add Service Cloud To Security Group
      operationId: CloudSecurityGroup_AddServiceCloudToSecurityGroup_post_/v2/cloudsecuritygroup/{groupid}/services/{policyType}
      parameters:
      - name: groupid
        in: path
        description: the security group id (Dome9 internal ID / AWS security group id)
        required: true
        schema:
          type: string
      - name: policyType
        in: path
        description: the service type (Inbound / Outbound))
        required: true
        schema:
          type: string
          enum:
          - Inbound
          - Outbound
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupServiceViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupServiceViewModel'
        description: details for the service
        required: true
      description: Creat a new Service (rule) for the security group
  /v2/cloudsecuritygroup/{groupid}/services/{policyType}/{serviceid}:
    delete:
      tags:
      - Cloud Security Group
      summary: Delete Service For Cloud To Security Group
      operationId: CloudSecurityGroup_DeleteServiceForCloudToSecurityGroup_delete_/v2/cloudsecuritygroup/{groupid}/services/{policyType}/{serviceid}
      parameters:
      - name: groupid
        in: path
        description: the security group id (Dome9 internal ID / AWS security group id)
        required: true
        schema:
          type: string
      - name: policyType
        in: path
        description: the service type (Inbound / Outbound)
        required: true
        schema:
          type: string
          enum:
          - Inbound
          - Outbound
      - name: serviceid
        in: path
        description: the service id
        required: true
        schema:
          type: string
      responses:
        '204':
          description: No Content
      description: Delete a service from an AWS security group
  /v2/cloudsecuritygroup/{groupid}/tags:
    post:
      tags:
      - Cloud Security Group
      summary: Update Tags
      operationId: CloudSecurityGroup_UpdateTags_post_/v2/cloudsecuritygroup/{groupid}/tags
      parameters:
      - name: groupid
        in: path
        description: the security group id (Dome9 internal ID / AWS security group id)
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupTagsChangeViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Models.CloudSecurityGroupTagsChangeViewModel'
        description: the updated list of tags and their values
        required: true
      description: Update the list of tags for an AWS securitry group
  /v2/cloudsecuritygroup/{groupid}/history:
    get:
      tags:
      - Cloud Security Group
      summary: Get Security Group Revision History
      operationId: CloudSecurityGroup_GetSec

# --- truncated at 32 KB (134 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cloudguard/refs/heads/main/openapi/cloudguard-network-security-openapi.yml