CoreStack Cost Anomaly API

Cost Anomaly Detection

Operations 6

POST /cost_anomaly/billing_cost_anomaly Get Account wise daily Billing Cost Anomaly #
POST /cost_anomaly/billing_cost_anomaly_resources Get Account wise daily Billing Cost Anomaly Resources #
POST /cost_anomaly/reject_anomaly Reject Billing Cost Anomaly #
POST /v2/cost_anomaly/dimension/trigger Trigger cost anomaly detection for a dimension, optionally filtered by grouping rules #
POST /v2/cost_anomaly/dimension_grouping_rule/reject Reject Billing Cost Anomaly for Grouping Rule #
POST /v2/cost_anomaly/dimension_grouping_rule_view Get grouping rule–wise daily cost anomalies #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/corestack-cost-anomaly-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

corestack-cost-anomaly-api-openapi.yml Raw ↑
openapi: 3.2.0
info:
  title: CoreStack External Cost Anomaly API
  version: 1.0.0
  termsOfService: http://corestack.io/
  license:
    name: CoreStack Inc License
    url: http://corestack.io/licenses/LICENSE-2.0.html
  description: Cost Anomaly Detection
servers:
- url: /
tags:
- name: Cost Anomaly
  description: Cost Anomaly Detection
paths:
  /cost_anomaly/billing_cost_anomaly:
    post:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CostAnomalySummaryResponse'
      summary: Get Account wise daily Billing Cost Anomaly
      description: View Billing Cost Anomaly Data.
      operationId: CostAnomalySummary
      security:
      - auth_token: []
      tags:
      - Cost Anomaly
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CostAnomalySummaryRequest'
        required: true
  /cost_anomaly/billing_cost_anomaly_resources:
    post:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CostAnomalyResourcesResponse'
      summary: Get Account wise daily Billing Cost Anomaly Resources
      description: View Billing Cost Anomaly Resources.
      operationId: CostAnomalyResources
      security:
      - auth_token: []
      tags:
      - Cost Anomaly
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CostAnomalyResourcesRequest'
        required: true
  /cost_anomaly/reject_anomaly:
    post:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: boolean
      summary: Reject Billing Cost Anomaly
      description: Reject Anomaly
      operationId: RejectAnomaly
      security:
      - auth_token: []
      tags:
      - Cost Anomaly
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CostAnomalyRejectRequest'
        required: true
  /v2/cost_anomaly/dimension/trigger:
    post:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: boolean
      summary: Trigger cost anomaly detection for a dimension, optionally filtered by grouping rules
      description: Trigger cost anomaly detection for a dimension, using grouping rules as filters.
      operationId: TriggerCostAnomalyDetectionForDimension
      security:
      - auth_token: []
      tags:
      - Cost Anomaly
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CostAnomalyDimensionTriggerRequest'
        required: true
  /v2/cost_anomaly/dimension_grouping_rule/reject:
    post:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: boolean
      summary: Reject Billing Cost Anomaly for Grouping Rule
      description: Reject Anomaly Grouping Rule
      operationId: RejectAnomalyDimensionGroupingRule
      security:
      - auth_token: []
      tags:
      - Cost Anomaly
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CostAnomalyGroupingRuleRejectRequest'
        required: true
  /v2/cost_anomaly/dimension_grouping_rule_view:
    post:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/CostAnomalyGroupingRuleResponse'
      summary: Get grouping rule–wise daily cost anomalies
      description: Retrieve grouping rule–wise cost anomalies.
      operationId: GetGroupingRuleCostAnomalies
      security:
      - auth_token: []
      tags:
      - Cost Anomaly
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CostAnomalyGroupingRuleRequest'
        required: true
components:
  schemas:
    CostAnomalyDimensionTriggerRequest:
      required:
      - dimension_id
      properties:
        dimension_id:
          type: string
          description: Dimension ID
        grouping_rule_ids:
          type: array
          items:
            type: string
            description: Grouping Rule IDs
      type: object
    CostAnomalyGroupingRuleRejectRequest:
      required:
      - bill_date
      - currency
      - dimension_id
      - grouping_rule_id
      - product_category
      - reject_reason
      - reject_until
      - resource_category
      - service_account_id
      properties:
        service_account_id:
          type: string
          description: Service Account ID
          x-cs-type: ObjectId
        dimension_id:
          type: string
          description: Dimension ID
        grouping_rule_id:
          type: string
          description: Grouping Rule ID
        reject_until:
          type: string
          format: date-time
          description: Reject Until time for the anomaly
        reject_reason:
          type: string
          description: Rejected Reason
        product_category:
          type: string
          description: Product Category
        resource_category:
          type: string
          description: Resource Category
        bill_date:
          type: string
          format: date-time
          description: Bill date in yyyy-mm-dd format
        currency:
          type: string
          description: Billing Currency
          example: AED
          enum:
          - AED
          - ALL
          - ARS
          - AUD
          - BAM
          - BDT
          - BGN
          - BHD
          - BRL
          - CAD
          - CHF
          - CLP
          - CNY
          - COP
          - CRC
          - CZK
          - DKK
          - EGP
          - EUR
          - GBP
          - HKD
          - HRK
          - HUF
          - IDR
          - ILS
          - INR
          - ISK
          - JPY
          - KES
          - KRW
          - KWD
          - KZT
          - MOP
          - MVR
          - MXN
          - MYR
          - NOK
          - NZD
          - OMR
          - PEN
          - PHP
          - PKR
          - PLN
          - QAR
          - RON
          - RSD
          - RUB
          - SAR
          - SEK
          - SGD
          - THB
          - TRY
          - TWD
          - USD
          - VND
          - ZAR
          x-cs-enum-type: Currency
      type: object
    CostAnomalyProductCategorySummary:
      allOf:
      - $ref: '#/components/schemas/CostAnomalySummary'
      - required:
        - product_category
        - resource_category
        properties:
          product_category:
            type: string
            description: Name of the Product category
          resource_category:
            type: string
            description: Name of the Resource category
        type: object
    CostAnomalyResourceDetails:
      required:
      - anomaly_type
      - cost_impact
      - resource_id
      properties:
        resource_id:
          type: string
          description: Name of the resource
        cost_impact:
          type: number
          description: Cost incurred by the resource
        anomaly_type:
          type: string
          description: Anomaly Type of the cost. Example 'anomaly_type':'above_threshold'
          example: below_threshold
          enum:
          - below_threshold
          - above_threshold
          x-cs-enum-type: CostAnomalyType
        anomaly_count:
          type: integer
          description: Product category wise anomaly count
        upper_cost_bound:
          type: number
          description: Upper cost bound of daily cost anomaly summary
        lower_cost_bound:
          type: number
          description: Lower cost bound of daily cost anomaly summary
        expected_cost:
          type: number
          description: Expected cost of daily cost anomaly summary
        actual_cost:
          type: number
          description: Actual cost of daily cost anomaly
      type: object
    CostAnomalyResourcesResponse:
      properties:
        details:
          type: array
          description: Cost Anomaly resource wise daily summary
          items:
            $ref: '#/components/schemas/CostAnomalySummaryResource'
      type: object
    CostAnomalyGroupingRuleRequest:
      required:
      - currency
      - dimension_rule_mappings
      - end_date
      - start_date
      properties:
        start_date:
          type: string
          format: date-time
          description: specify the start date
        end_date:
          type: string
          format: date-time
          description: specify the end date
        anomaly_status:
          type: string
          description: Required Anomaly status
          example: active
          enum:
          - active
          - rejected
          x-cs-enum-type: AnomalyStatus
        time_zone:
          type: string
          description: Optional timezone of the caller
        filters:
          description: Query expression to filter line items
          $ref: '#/components/schemas/QueryOperator'
        currency:
          type: string
          description: Billing Currency
          example: AED
          enum:
          - AED
          - ALL
          - ARS
          - AUD
          - BAM
          - BDT
          - BGN
          - BHD
          - BRL
          - CAD
          - CHF
          - CLP
          - CNY
          - COP
          - CRC
          - CZK
          - DKK
          - EGP
          - EUR
          - GBP
          - HKD
          - HRK
          - HUF
          - IDR
          - ILS
          - INR
          - ISK
          - JPY
          - KES
          - KRW
          - KWD
          - KZT
          - MOP
          - MVR
          - MXN
          - MYR
          - NOK
          - NZD
          - OMR
          - PEN
          - PHP
          - PKR
          - PLN
          - QAR
          - RON
          - RSD
          - RUB
          - SAR
          - SEK
          - SGD
          - THB
          - TRY
          - TWD
          - USD
          - VND
          - ZAR
          x-cs-enum-type: Currency
        dimension_rule_mappings:
          type: array
          description: List of dimensions with their respective grouping rule IDs
          items:
            $ref: '#/components/schemas/DimensionRuleMapping'
        billing_source:
          type: string
          description: Records based on the actual metric that is used during anomaly detection
      type: object
    ModelError:
      required:
      - message
      properties:
        message:
          type: string
          description: Error response message.
      type: object
    CostAnomalySummaryAccount:
      required:
      - bill_date
      - billing_source
      - cloud_account_id
      properties:
        cloud_account_id:
          type: string
          description: service account id
        bill_date:
          type: string
          format: date-time
          description: Time of results
        categories:
          type: array
          description: categories wise daily cost anomaly summary
          items:
            $ref: '#/components/schemas/CostAnomalyProductCategorySummary'
        service_account_level_anomalies:
          description: Service account level anomalies
          $ref: '#/components/schemas/CostAnomalySummary'
        billing_source:
          type: string
          description: Records based on the actual metric that is used during anomaly detection
      type: object
    CostAnomalySummaryResponse:
      properties:
        details:
          type: array
          description: Cost Anomaly account  wise daily summary
          items:
            $ref: '#/components/schemas/CostAnomalySummaryAccount'
      type: object
    CostAnomalyGroupingRuleDetail:
      required:
      - actual_cost
      - anomaly_type
      - cost_impact
      - expected_cost
      - product_category
      - resource_category
      - service_account_id
      properties:
        anomaly_type:
          type: string
          description: Anomaly type for this detail row
          example: below_threshold
          enum:
          - below_threshold
          - above_threshold
          x-cs-enum-type: CostAnomalyType
        anomaly_count:
          type: integer
          description: Product category wise anomaly count
        cost_impact:
          type: number
          description: Cost impact for this anomaly
        expected_cost:
          type: number
          description: Expected cost for this anomaly
        actual_cost:
          type: number
          description: Actual cost for this anomaly
        service_account_id:
          type: string
          description: Service Account ID for this anomaly
          x-cs-type: ObjectId
        product_category:
          type: string
          description: Product category, e.g. EC2
        resource_category:
          type: string
          description: Resource category, e.g. Compute
        resource_id:
          type: string
          description: Resource identifier, e.g. ec2:i-123
        region:
          type: string
          description: Region for the resource, e.g. us-east-1
        reject_until:
          type: string
          format: date-time
          description: Rejected Until time for the anomaly
        reject_reason:
          type: string
          description: Rejected Reason
      type: object
    CostAnomalyRejectRequest:
      required:
      - bill_date
      - product_category
      - reject_reason
      - reject_until
      - resource_category
      - service_account_ids
      properties:
        service_account_ids:
          type: array
          description: Service Account IDs
          items:
            type: string
            x-cs-type: ObjectId
        bill_date:
          type: string
          format: date-time
          description: Bill date in yyyy-mm-dd format
        product_category:
          type: string
          description: Product Category name
        resource_category:
          type: string
          description: Resource Category name
        reject_until:
          type: string
          format: date-time
        reject_reason:
          type: string
      type: object
    QueryOperator:
      required:
      - __type
      properties: {}
      discriminator:
        propertyName: __type
      type: object
      x-cs-subtypes:
      - subtype_model: QueryOperatorTrue
        subtype_name: QueryOperatorTrue
      - subtype_model: QueryOperatorFalse
        subtype_name: QueryOperatorFalse
      - subtype_model: QueryOperatorBinary
        subtype_name: QueryOperatorBinary
      - subtype_model: QueryOperatorBinaryLogic
        subtype_name: QueryOperatorBinaryLogic
      - subtype_model: QueryOperatorNary
        subtype_name: QueryOperatorNary
      - subtype_model: QueryOperatorNaryLogic
        subtype_name: QueryOperatorNaryLogic
      - subtype_model: QueryOperatorComparator
        subtype_name: QueryOperatorComparator
      - subtype_model: QueryOperatorComparatorLogic
        subtype_name: QueryOperatorComparatorLogic
      - subtype_model: QueryOperatorUnary
        subtype_name: QueryOperatorUnary
      - subtype_model: QueryOperatorUnaryNot
        subtype_name: QueryOperatorUnaryNot
      - subtype_model: QueryOperatorBinaryForGraph
        subtype_name: QueryOperatorBinaryForGraph
      - subtype_model: QueryOperatorBinaryLogicForGraph
        subtype_name: QueryOperatorBinaryLogicForGraph
      - subtype_model: QueryOperatorNaryForGraph
        subtype_name: QueryOperatorNaryForGraph
      - subtype_model: QueryOperatorNaryLogicForGraph
        subtype_name: QueryOperatorNaryLogicForGraph
      - subtype_model: QueryOperatorUnaryForGraph
        subtype_name: QueryOperatorUnaryForGraph
      - subtype_model: QueryOperatorUnaryNotForGraph
        subtype_name: QueryOperatorUnaryNotForGraph
      - subtype_model: ServiceAccountQueryOperator
        subtype_name: ServiceAccountQueryOperator
      - subtype_model: TenantQueryOperator
        subtype_name: TenantQueryOperator
      - subtype_model: DescendantServiceAccountQueryOperator
        subtype_name: DescendantServiceAccountQueryOperator
      - subtype_model: DescendantServiceAccountInTenantQueryOperator
        subtype_name: DescendantServiceAccountInTenantQueryOperator
      - subtype_model: TenantTagKeyQueryOperator
        subtype_name: TenantTagKeyQueryOperator
      - subtype_model: TenantTagKeyValueQueryOperator
        subtype_name: TenantTagKeyValueQueryOperator
      - subtype_model: LocationQueryOperator
        subtype_name: LocationQueryOperator
      - subtype_model: AvailabilityZoneQueryOperator
        subtype_name: AvailabilityZoneQueryOperator
      - subtype_model: BillingSourceQueryOperator
        subtype_name: BillingSourceQueryOperator
      - subtype_model: CurrencyQueryOperator
        subtype_name: CurrencyQueryOperator
      - subtype_model: ProductCategoryQueryOperator
        subtype_name: ProductCategoryQueryOperator
      - subtype_model: ProductFamilyQueryOperator
        subtype_name: ProductFamilyQueryOperator
      - subtype_model: ProductServiceCodeQueryOperator
        subtype_name: ProductServiceCodeQueryOperator
      - subtype_model: ProductSkuQueryOperator
        subtype_name: ProductSkuQueryOperator
      - subtype_model: PublisherQueryOperator
        subtype_name: PublisherQueryOperator
      - subtype_model: ResourceCategoryQueryOperator
        subtype_name: ResourceCategoryQueryOperator
      - subtype_model: ResourceIdQueryOperator
        subtype_name: ResourceIdQueryOperator
      - subtype_model: ResourceGroupQueryOperator
        subtype_name: ResourceGroupQueryOperator
      - subtype_model: ResourceNameQueryOperator
        subtype_name: ResourceNameQueryOperator
      - subtype_model: ResourceOperationQueryOperator
        subtype_name: ResourceOperationQueryOperator
      - subtype_model: ResourceQueryExtraPresence
        subtype_name: ResourceQueryExtraPresence
      - subtype_model: ResourceQueryExtraKey
        subtype_name: ResourceQueryExtraKey
      - subtype_model: ScopeContainsTenantQueryOperator
        subtype_name: ScopeContainsTenantQueryOperator
      - subtype_model: ScopeContainsServiceAccountQueryOperator
        subtype_name: ScopeContainsServiceAccountQueryOperator
      - subtype_model: ScopeIsQueryOperator
        subtype_name: ScopeIsQueryOperator
      - subtype_model: ServiceCategoryQueryOperator
        subtype_name: ServiceCategoryQueryOperator
      - subtype_model: ServiceTypeQueryOperator
        subtype_name: ServiceTypeQueryOperator
      - subtype_model: CompartmentNameQueryOperator
        subtype_name: CompartmentNameQueryOperator
      - subtype_model: ResourceQueryExtraKeyValue
        subtype_name: ResourceQueryExtraKeyValue
      - subtype_model: WorkFlowIdQueryOperator
        subtype_name: WorkFlowIdQueryOperator
      - subtype_model: RecommendationSubClassificationQueryOperator
        subtype_name: RecommendationSubClassificationQueryOperator
      - subtype_model: ServiceNowCmdbQuerySyncLogResourceId
        subtype_name: ServiceNowCmdbQuerySyncLogResourceId
      - subtype_model: ServiceNowCmdbQuerySyncLogResourceType
        subtype_name: ServiceNowCmdbQuerySyncLogResourceType
      - subtype_model: ServiceNowCmdbQuerySyncLogAction
        subtype_name: ServiceNowCmdbQuerySyncLogAction
      - subtype_model: ServiceNowCmdbQuerySyncLogStatus
        subtype_name: ServiceNowCmdbQuerySyncLogStatus
      - subtype_model: ServiceNowCmdbQuerySyncLogService
        subtype_name: ServiceNowCmdbQuerySyncLogService
      - subtype_model: ServiceAccountNativeDetailsQueryOperator
        subtype_name: ServiceAccountNativeDetailsQueryOperator
      - subtype_model: ServiceAccountStatusQueryOperator
        subtype_name: ServiceAccountStatusQueryOperator
      - subtype_model: ServiceAccountTagKeyQueryOperator
        subtype_name: ServiceAccountTagKeyQueryOperator
      - subtype_model: ServiceAccountTagKeyRegexQueryOperator
        subtype_name: ServiceAccountTagKeyRegexQueryOperator
      - subtype_model: ServiceAccountTagKeyValueQueryOperator
        subtype_name: ServiceAccountTagKeyValueQueryOperator
      - subtype_model: ApplicableHealthMetricsQueryOperator
        subtype_name: ApplicableHealthMetricsQueryOperator
      - subtype_model: EpssScoreRangeQueryOperator
        subtype_name: EpssScoreRangeQueryOperator
      - subtype_model: CvssMetricScoreRangeQueryOperator
        subtype_name: CvssMetricScoreRangeQueryOperator
      - subtype_model: GraphionScoreRangeQueryOperator
        subtype_name: GraphionScoreRangeQueryOperator
      - subtype_model: AppSecopsApplicationIdQueryOperator
        subtype_name: AppSecopsApplicationIdQueryOperator
      - subtype_model: AppSecopsPortfolioIdQueryOperator
        subtype_name: AppSecopsPortfolioIdQueryOperator
      - subtype_model: AppSecopsProjectIdQueryOperator
        subtype_name: AppSecopsProjectIdQueryOperator
      - subtype_model: AppSecopsSbomComponentIdQueryOperator
        subtype_name: AppSecopsSbomComponentIdQueryOperator
      - subtype_model: AppSecopsSbomVersionIdQueryOperator
        subtype_name: AppSecopsSbomVersionIdQueryOperator
      - subtype_model: AppSecopsComponentProductQueryOperator
        subtype_name: AppSecopsComponentProductQueryOperator
      - subtype_model: AppSecopsSbomComponentTypeQueryOperator
        subtype_name: AppSecopsSbomComponentTypeQueryOperator
      - subtype_model: AppSecopsSbomVersionSubmittedByQueryOperator
        subtype_name: AppSecopsSbomVersionSubmittedByQueryOperator
      - subtype_model: AppSecopsSbomVersionSubmittedDateQueryOperator
        subtype_name: AppSecopsSbomVersionSubmittedDateQueryOperator
      - subtype_model: AppSecopsSbomVersionBuildIdQueryOperator
        subtype_name: AppSecopsSbomVersionBuildIdQueryOperator
      - subtype_model: AppSecopsSbomNameQueryOperator
        subtype_name: AppSecopsSbomNameQueryOperator
      - subtype_model: AppSecopsCveIdQueryOperator
        subtype_name: AppSecopsCveIdQueryOperator
      - subtype_model: AppSecopsEpssScoreQueryOperator
        subtype_name: AppSecopsEpssScoreQueryOperator
      - subtype_model: AppSecopsCvssScoreQueryOperator
        subtype_name: AppSecopsCvssScoreQueryOperator
      - subtype_model: AppSecopsGraphionScoreQueryOperator
        subtype_name: AppSecopsGraphionScoreQueryOperator
      - subtype_model: SecopsVulnerabilitySeverityQueryOperator
        subtype_name: SecopsVulnerabilitySeverityQueryOperator
      - subtype_model: AppSecopsIsKnownExploitedVulnerabilityQueryOperator
        subtype_name: AppSecopsIsKnownExploitedVulnerabilityQueryOperator
      - subtype_model: AppSecopsVulnerabilityExploitabilityMetricAttackVectorV31QueryOperator
        subtype_name: AppSecopsVulnerabilityExploitabilityMetricAttackVectorV31QueryOperator
      - subtype_model: AppSecopsFixAvailableQueryOperator
        subtype_name: AppSecopsFixAvailableQueryOperator
      - subtype_model: AppSecopsVulnerabilityExploitabilityMetricAttackComplexityV31QueryOperator
        subtype_name: AppSecopsVulnerabilityExploitabilityMetricAttackComplexityV31QueryOperator
      - subtype_model: AppSecopsVulnerabilityExploitabilityMetricPrivilegesRequiredV31QueryOperator
        subtype_name: AppSecopsVulnerabilityExploitabilityMetricPrivilegesRequiredV31QueryOperator
      - subtype_model: AppSecopsVulnerabilityExploitabilityMetricScopeV31QueryOperator
        subtype_name: AppSecopsVulnerabilityExploitabilityMetricScopeV31QueryOperator
      - subtype_model: AppSecopsVulnerabilityExploitabilityUserInteractionV31QueryOperator
        subtype_name: AppSecopsVulnerabilityExploitabilityUserInteractionV31QueryOperator
      - subtype_model: AppSecopsVulnerabilityImpactMetricConfidentialityImpactV31QueryOperator
        subtype_name: AppSecopsVulnerabilityImpactMetricConfidentialityImpactV31QueryOperator
      - subtype_model: AppSecopsVulnerabilityImpactMetricIntegrityImpactV31QueryOperator
        subtype_name: AppSecopsVulnerabilityImpactMetricIntegrityImpactV31QueryOperator
      - subtype_model: AppSecopsVulnerabilityImpactMetricAvailabilityImpactV31QueryOperator
        subtype_name: AppSecopsVulnerabilityImpactMetricAvailabilityImpactV31QueryOperator
      - subtype_model: AppSecopsContainerFindingsSBOMVersionIdsQueryOperator
        subtype_name: AppSecopsContainerFindingsSBOMVersionIdsQueryOperator
      - subtype_model: AppSecopsContainerFindingsCategoryQueryOperator
        subtype_name: AppSecopsContainerFindingsCategoryQueryOperator
      - subtype_model: AppSecopsContainerFindingsExecutionPhaseQueryOperator
        subtype_name: AppSecopsContainerFindingsExecutionPhaseQueryOperator
      - subtype_model: AppSecopsContainerFindingsSeverityQueryOperator
        subtype_name: AppSecopsContainerFindingsSeverityQueryOperator
      - subtype_model: AppSecopsContainerFindingsStatusQueryOperator
        subtype_name: AppSecopsContainerFindingsStatusQueryOperator
      - subtype_model: DimensionSourceQueryOperator
        subtype_name: DimensionSourceQueryOperator
      - subtype_model: DimensionQueryOperator
        subtype_name: DimensionQueryOperator
      - subtype_model: ResourceTypeQueryOperator
        subtype_name: ResourceTypeQueryOperator
      - subtype_model: PodIdRegexQueryOperator
        subtype_name: PodIdRegexQueryOperator
      - subtype_model: PodNameRegexQueryOperator
        subtype_name: PodNameRegexQueryOperator
      - subtype_model: ContainerIdRegexQueryOperator
        subtype_name: ContainerIdRegexQueryOperator
      - subtype_model: PodNamesQueryOperator
        subtype_name: PodNamesQueryOperator
      - subtype_model: PodIdsQueryOperator
        subtype_name: PodIdsQueryOperator
      - subtype_model: UtilizationTypeQueryOperator
        subtype_name: UtilizationTypeQueryOperator
      - subtype_model: ResourceIdRegexQueryOperator
        subtype_name: ResourceIdRegexQueryOperator
      - subtype_model: ResourceNameRegexQueryOperator
        subtype_name: ResourceNameRegexQueryOperator
      - subtype_model: ExtrasValueRegexQueryOperator
        subtype_name: ExtrasValueRegexQueryOperator
      - subtype_model: TagKeyValueRegexQueryOperator
        subtype_name: TagKeyValueRegexQueryOperator
      - subtype_model: ResourceQueryTagKeyKind
        subtype_name: ResourceQueryTagKeyKind
      - subtype_model: ResourceQueryTagKeyValuesKind
        subtype_name: ResourceQueryTagKeyValuesKind
      - subtype_model: TagKeyStringValueRegexQueryOperator
        subtype_name: TagKeyStringValueRegexQueryOperator
      - subtype_model: TagKindStringKeyRegexQueryOperator
        subtype_name: TagKindStringKeyRegexQueryOperator
      - subtype_model: ServiceAccountNameRegexQueryOperator
        subtype_name: ServiceAccountNameRegexQueryOperator
      - subtype_model: TenantNameRegexQueryOperator
        subtype_name: TenantNameRegexQueryOperator
      - subtype_model: PlatFormAccountQueryOperator
        subtype_name: PlatFormAccountQueryOperator
      - subtype_model: BillingLineItemTypeQueryOperator
        subtype_name: BillingLineItemTypeQueryOperator
      - subtype_model: BillingEntityQueryOperator
        subtype_name: BillingEntityQueryOperator
      - subtype_model: LineItemDescriptionQueryOperator
        subtype_name: LineItemDescriptionQueryOperator
      - subtype_model: LineItemDescriptionRegexQueryOperator
        subtype_name: LineItemDescriptionRegexQueryOperator
      - subtype_model: MeterSubCategoryQueryOperator
        subtype_name: MeterSubCategoryQueryOperator
      - subtype_model: PricingCategoryQueryOperator
        subtype_name: PricingCategoryQueryOperator
      - subtype_model: PricingPurchaseOptionQueryOperator
        subtype_name: PricingPurchaseOptionQueryOperator
      - subtype_model: TagKeyRegexQueryOperator
        subtype_name: TagKeyRegexQueryOperator
      - subtype_model: BillingLineItemTypeRegexQueryOperator
        subtype_name: BillingLineItemTypeRegexQueryOperator
      - subtype_model: ResourceGroupRegexQueryOperator
        subtype_name: ResourceGroupRegexQueryOperator
      - subtype_model: ResourceCategoryRegexQueryOperator
        subtype_name: ResourceCategoryRegexQueryOperator
      - subtype_model: ProductCategoryRegexQueryOperator
        subtype_name: ProductCategoryRegexQueryOperator
      - subtype_model: BillingEntityRegexQueryOperator
        subtype_name: BillingEntityRegexQueryOperator
      - subtype_model: ResourceOperationRegexQueryOperator
        subtype_name: ResourceOperationRegexQueryOperator
      - subtype_model: ResourceQueryFieldPresence
        subtype_name: ResourceQueryFieldPresence
      - subtype_model: AssessmentRunReportDetailQuerySection
        subtype_name: AssessmentRunReportDetailQuerySection
      - subtype_model: AssessmentRunReportSummaryQuerySection
        subtype_name: AssessmentRunReportSummaryQuerySection
  

# --- truncated at 32 KB (50 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/corestack/refs/heads/main/openapi/corestack-cost-anomaly-api-openapi.yml