CoreStack

CoreStack Product API

Product bundles, Product & Role templates

GitHub OpenAPI

Operations 4

GET /v1/feature_requirements/list List Feature requirements #
GET /v1/product_bundles/list List Product Bundles #
GET /v1/products/list List Products #
GET /v1/role_templates/list List Role Templates #

Documentation

📖
Documentation
https://docs.corestack.io/docs/corestack-api-modules
📖
APIReference
https://docs.corestack.io/reference
📖
Authentication
https://raw.githubusercontent.com/api-evangelist/corestack/refs/heads/main/authentication/corestack-authentication.yml

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/corestack/refs/heads/main/openapi/corestack-product-api-openapi.yml

Other Resources

🔗
Conventions
https://raw.githubusercontent.com/api-evangelist/corestack/refs/heads/main/conventions/corestack-conventions.yml
🔗
ErrorCatalog
https://raw.githubusercontent.com/api-evangelist/corestack/refs/heads/main/errors/corestack-problem-types.yml
🔗
DataModel
https://raw.githubusercontent.com/api-evangelist/corestack/refs/heads/main/data-model/corestack-data-model.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/corestack-product-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

corestack-product-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: CoreStack External Product API
  version: 1.0.0
  termsOfService: http://corestack.io/
  license:
    name: CoreStack Inc License
    url: http://corestack.io/licenses/LICENSE-2.0.html
  description: Product bundles, Product & Role templates
servers:
- url: /
tags:
- name: Product
  description: Product bundles, Product & Role templates
paths:
  /v1/feature_requirements/list:
    get:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/ServiceAccountFeatureRequirement'
      summary: List Feature requirements
      description: List all Feature requirements within CoreStack product.
      operationId: ListFeatureRequirements
      security:
      - auth_token: []
      tags:
      - Product
  /v1/product_bundles/list:
    get:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/ProductBundleDetails'
      summary: List Product Bundles
      description: List all product bundles within CoreStack.
      operationId: ListProductBundles
      security:
      - auth_token: []
      tags:
      - Product
  /v1/products/list:
    get:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/ProductDetails'
      summary: List Products
      description: List all product within CoreStack.
      operationId: ListProducts
      security:
      - auth_token: []
      tags:
      - Product
  /v1/role_templates/list:
    get:
      responses:
        '500':
          description: Internal Server Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '401':
          description: Unauthorized
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '400':
          description: Bad Request
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ModelError'
        '200':
          description: Success
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/RoleTemplatesDetails'
      summary: List Role Templates
      description: List all Role templates within CoreStack.
      operationId: ListRoleTemplates
      security:
      - auth_token: []
      tags:
      - Product
components:
  schemas:
    PolicyActionPair:
      properties:
        policy:
          type: string
          description: Name of the policy
          example: access_governance_dashboard
          enum:
          - access_governance_dashboard
          - access_posture
          - account_governance
          - accountmaster_support_dashboard
          - ai_observability_dashboard
          - alarms
          - anomaly_detector
          - application
          - application_management
          - approve_assessment
          - approver_dashboard_tenant
          - appscripts
          - appsecops_agent
          - assessment_agent
          - rate_optimization_agent
          - appsecops_dashboard
          - assessment_approver
          - assessment_contributor
          - assessment_execution
          - assessment_management
          - associated_accounts
          - audit
          - automation_dashboard
          - automation_workflow
          - aws_security_hub
          - aws_security_hub_dashboard
          - aws_ssm
          - azure_devops_dashboard
          - azure_security_graph
          - azure_sentinel
          - basic_access
          - billing_inventory
          - billing_metric
          - billing_plans
          - blueprint_jobs
          - blueprints
          - browse_catalog
          - budget_management
          - builds_dashboard
          - catalogs
          - cloud_and_tool_accounts
          - cloudaccount_support_dashboard
          - compass_administrator
          - compliance_control
          - compliance_control_definitions
          - compliance_control_mapping
          - compliance_dashboard
          - cost_analysis_report
          - cost_anomaly
          - cost_billing_operations
          - cost_budget_management
          - cost_dashboard
          - cost_posture
          - cost_savings_and_recommendations
          - create_reports
          - currency_exchange_plans
          - custom_reports
          - customer_support_dashboard
          - dashboard_subscribe
          - dashboard_v2
          - dimension
          - dpo
          - faq
          - finance_dashboard_account
          - iaas
          - inventory
          - inventory_actions
          - inventory_elements
          - itsm_cmdb
          - itsm_configuration
          - itsm_request
          - maintenance
          - manage_workload_owner
          - marketplace_support_dashboard
          - markup_discount
          - master_account
          - milestone_management
          - monitoring_alerts
          - my_approvals
          - my_cloud_apps
          - notification_service
          - operation_posture
          - operations_activity
          - operations_dashboard
          - operations_report
          - order_history
          - payment
          - policies
          - policy_data
          - policy_exclusions
          - policy_jobs
          - portfolio_management
          - product_bundle
          - project_management
          - quota_management
          - recommendations
          - recommendations_dashboard
          - recommendations_dashboard_v2
          - reports
          - request
          - reservation_recommendations
          - reservation_utilization
          - resource_consistency_dashboard
          - resource_list
          - resource_locks
          - resource_posture
          - resource_tags
          - roles
          - sbom_management
          - schedules
          - scope
          - script_jobs
          - scripts
          - secops_dashboard_v2
          - security_operations_dashboard
          - security_posture
          - self_service_catalog
          - self_service_dashboard
          - signup_users
          - stackops__auto_approve
          - stackops__deployments
          - stackops__products
          - stackops__stacks
          - stackops__stacks_cost_estimation
          - stackops__stacks_delegation
          - subscription
          - tag_pattern
          - tagging_governance_baselines
          - template_generator
          - template_jobs
          - templates
          - tenant_support_dashboard
          - tenants
          - terms_conditions
          - tools_integrations
          - transaction
          - user_delegation
          - user_support_dashboard
          - usergroup
          - users
          - utilization_metrics
          - visualiser
          - wellarchitected_frameworks
          - workload
          - workload_component
          - workload_contributor
          - workload_management
          x-cs-enum-type: PolicyEnum
        action:
          type: string
          description: Action supported for the policy
          example: access_analytics
          enum:
          - access_analytics
          - access_governance
          - account
          - activate
          - activity_analytics
          - admin_dashboard
          - admin_reports
          - approval
          - approve
          - assessment_reports
          - automation_analytics
          - availability_reports
          - backup_analytics
          - cancel
          - clone
          - cloud_inventory_reports
          - cloud_service_analytics
          - compliance_analytics
          - compliance_reports
          - contribute
          - cost_analytics
          - cost_governance
          - cost_recommendations
          - cost_reports
          - cost_usage_reports
          - create
          - delegate
          - delete
          - detail
          - execute
          - extend_trial
          - generate_posture
          - global
          - inventory_analytics
          - inventory_report
          - inventory_reports
          - manage
          - manage_acl
          - manage_owner
          - manage_children
          - manager_dashboard
          - monitoring_analytics
          - monitoring_reports
          - operations_governance
          - partner_cost_reports
          - patch_analytics
          - patch_compliance_report
          - patch_management
          - policy_reports
          - private
          - publish
          - read
          - read_children
          - reject
          - remediate
          - resolve
          - resource_governance
          - revoke
          - security_analytics
          - security_governance
          - security_reports
          - self_service_reports
          - share
          - show_menu
          - status
          - system_reports
          - tenant
          - terminate_trial
          - threat_analytics
          - update
          - utilization_reports
          - view_quota
          - vulnerability_analytics
          x-cs-enum-type: ActionEnum
      type: object
    ServiceAccountFeatureRequirementPerProvider:
      properties:
        provider:
          description: Type of Provider this applies to
          $ref: '#/components/schemas/ServiceAccountNativeDetailsBase'
        mandatory_dependent_features:
          type: array
          description: List of sub-features that are always needed. They block onboarding until onboarded themselves.
          items:
            type: string
            description: Feature for the account
            example: appsecops__onboarding
            enum:
            - appsecops__onboarding
            - assessments__wellarchitected
            - assessments__wellarchitected__auto_assessment
            - assessments__wellarchitected__auto_assessment__aws_sync
            - assessments__wellarchitected__custom_framework__aws_sync
            - cloudops__activity
            - cloudops__activity__periodic
            - cloudops__activity__real_time_sync_read
            - cloudops__activity__real_time_sync_write
            - cloudops__backup_management
            - cloudops__cloudwatch_agent
            - cloudops__monitoring_alerts
            - cloudops__monitoring_alerts__periodic
            - cloudops__monitoring_alerts__real_time_sync_read
            - cloudops__monitoring_alerts__real_time_sync_write
            - cloudops__patch_management
            - cloudops__runbooks
            - cloudops__utilization
            - core__inventory
            - core__inventory__management
            - core__policy_engine
            - core__policy_engine__aws_config
            - core__policy_engine__azure_policy
            - core__resource_discovery
            - core__resource_discovery_extra
            - core__tagging_governance
            - core__tagging_governance_extra
            - finops__assessments
            - finops__azurehybridbenefit_recommendations
            - finops__budget
            - finops__cloud_native_recommendations
            - finops__cost_anomaly
            - finops__cost_processing
            - finops__cost_savings
            - finops__enterprise_discount_program
            - finops__reservation
            - finops__right_size_recommendations
            - finops__savings_plans
            - finops__schedule_recommendations
            - governance__request
            - integration__application_performance_monitoring
            - integration__azure_security_graph
            - integration__azure_sentinel
            - integration__tenable_nessus
            - secops__access
            - secops__aws_security_hub
            - secops__cloud_native_security_information_event_management
            - secops__compliance
            - secops__threats
            - secops__threats__posture_read
            - secops__threats__posture_write
            - secops__threats__realtime_alerts_read
            - secops__threats__realtime_alerts_write
            - secops__vulnerabilities
            - secops__vulnerabilities__read
            - secops__vulnerabilities__write
            - selfservice__governance
            - stackops
            - stackops__deployment
            - system__roles
            x-cs-enum-type: ServiceAccountFeature
        optional_dependent_features:
          type: array
          description: List of sub-features that can be optionally enabled. They don't block onboarding until onboarded themselves.
          items:
            type: string
            description: Feature for the account
            example: appsecops__onboarding
            enum:
            - appsecops__onboarding
            - assessments__wellarchitected
            - assessments__wellarchitected__auto_assessment
            - assessments__wellarchitected__auto_assessment__aws_sync
            - assessments__wellarchitected__custom_framework__aws_sync
            - cloudops__activity
            - cloudops__activity__periodic
            - cloudops__activity__real_time_sync_read
            - cloudops__activity__real_time_sync_write
            - cloudops__backup_management
            - cloudops__cloudwatch_agent
            - cloudops__monitoring_alerts
            - cloudops__monitoring_alerts__periodic
            - cloudops__monitoring_alerts__real_time_sync_read
            - cloudops__monitoring_alerts__real_time_sync_write
            - cloudops__patch_management
            - cloudops__runbooks
            - cloudops__utilization
            - core__inventory
            - core__inventory__management
            - core__policy_engine
            - core__policy_engine__aws_config
            - core__policy_engine__azure_policy
            - core__resource_discovery
            - core__resource_discovery_extra
            - core__tagging_governance
            - core__tagging_governance_extra
            - finops__assessments
            - finops__azurehybridbenefit_recommendations
            - finops__budget
            - finops__cloud_native_recommendations
            - finops__cost_anomaly
            - finops__cost_processing
            - finops__cost_savings
            - finops__enterprise_discount_program
            - finops__reservation
            - finops__right_size_recommendations
            - finops__savings_plans
            - finops__schedule_recommendations
            - governance__request
            - integration__application_performance_monitoring
            - integration__azure_security_graph
            - integration__azure_sentinel
            - integration__tenable_nessus
            - secops__access
            - secops__aws_security_hub
            - secops__cloud_native_security_information_event_management
            - secops__compliance
            - secops__threats
            - secops__threats__posture_read
            - secops__threats__posture_write
            - secops__threats__realtime_alerts_read
            - secops__threats__realtime_alerts_write
            - secops__vulnerabilities
            - secops__vulnerabilities__read
            - secops__vulnerabilities__write
            - selfservice__governance
            - stackops
            - stackops__deployment
            - system__roles
            x-cs-enum-type: ServiceAccountFeature
        ondemand_dependent_features:
          type: array
          description: List of sub-features that can be enabled after onboarding. They are included in access validation but don't directly participate in onboarding.
          items:
            type: string
            description: Feature for the account
            example: appsecops__onboarding
            enum:
            - appsecops__onboarding
            - assessments__wellarchitected
            - assessments__wellarchitected__auto_assessment
            - assessments__wellarchitected__auto_assessment__aws_sync
            - assessments__wellarchitected__custom_framework__aws_sync
            - cloudops__activity
            - cloudops__activity__periodic
            - cloudops__activity__real_time_sync_read
            - cloudops__activity__real_time_sync_write
            - cloudops__backup_management
            - cloudops__cloudwatch_agent
            - cloudops__monitoring_alerts
            - cloudops__monitoring_alerts__periodic
            - cloudops__monitoring_alerts__real_time_sync_read
            - cloudops__monitoring_alerts__real_time_sync_write
            - cloudops__patch_management
            - cloudops__runbooks
            - cloudops__utilization
            - core__inventory
            - core__inventory__management
            - core__policy_engine
            - core__policy_engine__aws_config
            - core__policy_engine__azure_policy
            - core__resource_discovery
            - core__resource_discovery_extra
            - core__tagging_governance
            - core__tagging_governance_extra
            - finops__assessments
            - finops__azurehybridbenefit_recommendations
            - finops__budget
            - finops__cloud_native_recommendations
            - finops__cost_anomaly
            - finops__cost_processing
            - finops__cost_savings
            - finops__enterprise_discount_program
            - finops__reservation
            - finops__right_size_recommendations
            - finops__savings_plans
            - finops__schedule_recommendations
            - governance__request
            - integration__application_performance_monitoring
            - integration__azure_security_graph
            - integration__azure_sentinel
            - integration__tenable_nessus
            - secops__access
            - secops__aws_security_hub
            - secops__cloud_native_security_information_event_management
            - secops__compliance
            - secops__threats
            - secops__threats__posture_read
            - secops__threats__posture_write
            - secops__threats__realtime_alerts_read
            - secops__threats__realtime_alerts_write
            - secops__vulnerabilities
            - secops__vulnerabilities__read
            - secops__vulnerabilities__write
            - selfservice__governance
            - stackops
            - stackops__deployment
            - system__roles
            x-cs-enum-type: ServiceAccountFeature
        access_policies:
          type: array
          description: Cloud Access Policies required for this Provider
          items:
            $ref: '#/components/schemas/ServiceAccountCloudAccessPolicy'
      type: object
    ProductBundleDetails:
      properties:
        name:
          type: string
          description: Name of the product bundle
        description:
          type: string
          description: Description of the product bundle
        products:
          type: array
          description: Products included in the bundle
          items:
            type: string
      type: object
    ServiceAccountCloudAccessPolicy:
      properties:
        access_type:
          type: string
          description: Cloud access type to select
          example: read
          enum:
          - read
          - write
          x-cs-enum-type: CloudAccountAccessType
        access_policy:
          type: string
          description: Cloud Access Policy
      type: object
    RoleTemplatesDetails:
      properties:
        name:
          type: string
          description: Name of the role_template
        role:
          type: string
          description: Role of the template defined
        description:
          type: string
          description: Description of the role template
        policies:
          type: array
          description: List of policy defined for corresponding role template
          items:
            $ref: '#/components/schemas/PolicyActionPair'
        cloud_services:
          type: array
          description: List of cloud services supported for the role template
          items:
            type: string
            description: Cloud Provider to select
            example: AWS
            enum:
            - AWS
            - Azure
            - AzureStack
            - Azure_CSP
            - Azure_CSP-Direct
            - Azure_EA
            - Azure_MCA
            - Cloudstack
            - GCP
            - MS_VMM
            - OCI
            - Openstack
            - PrivateCloud
            - Rackspace
            - VMware
            - VMware_VCD
            - vCenter
            x-cs-enum-type: CloudServiceName
        integrated_tools:
          type: array
          description: List of integrated tools supported for the role template
          items:
            type: string
            description: Integrated Tool to select
            example: Anomaly_Detector
            enum:
            - Anomaly_Detector
            - AppDynamics
            - App_Insights
            - ArrowSphere
            - Azure_Devops
            - Azure_Security_Graph
            - Azure_Sentinel
            - Corestack
            - DockerHub
            - ElasticSearch
            - Freshservice
            - GitHub
            - JIRA_DataCenter
            - JIRA_ServiceDesk
            - JIRA_ServiceManagement
            - Jenkins
            - Logstash
            - Microsoft_Teams
            - Nagios
            - Newrelic
            - Prometheus
            - Qualys
            - RedHat_Satellite
            - ServiceNow
            - TCL_ITSM
            - Tenable_Nessus
            - ZOHO_ServiceDesk
            - Zabbix
            x-cs-enum-type: IntegratedToolName
        resources:
          type: array
          description: List of resources supported for the role template
          items:
            type: string
            description: Resource Service to select
            example: kubernetes_cluster
            enum:
            - kubernetes_cluster
            x-cs-enum-type: ResourceName
        saas_services:
          type: array
          description: List of SaaS services supported for the role template
          items:
            type: string
            description: SaaS Service to select
            example: Anthropic
            enum:
            - Anthropic
            - OpenAI
            - Databricks
            - Snowflake
            - CircleCI
            - Datadog
            - Dropbox
            - Dynatrace
            - Elastic
            - Grafana
            - IBM_Tencent
            - Microsoft_Teams
            - New_Relic
            - Okta
            - SaasCustomTool
            - Salesforce_Sales_Cloud
            - Splunk
            x-cs-enum-type: SaasServiceName
      type: object
    ProductDetails:
      required:
      - name
      properties:
        name:
          type: string
          description: Name of the product
          example: AppSecOps
          enum:
          - AppSecOps
          - Assessments
          - CloudOps
          - FinOps
          - Product_Admin
          - SecOps
          - Self Service
          - StackOps
          x-cs-enum-type: ProductEnum
        description:
          type: string
          description: Description of the product
        features:
          type: array
          items:
            type: string
            description: Feature for the account
            example: appsecops__onboarding
            enum:
            - appsecops__onboarding
            - assessments__wellarchitected
            - assessments__wellarchitected__auto_assessment
            - assessments__wellarchitected__auto_assessment__aws_sync
            - assessments__wellarchitected__custom_framework__aws_sync
            - cloudops__activity
            - cloudops__activity__periodic
            - cloudops__activity__real_time_sync_read
            - cloudops__activity__real_time_sync_write
            - cloudops__backup_management
            - cloudops__cloudwatch_agent
            - cloudops__monitoring_alerts
            - cloudops__monitoring_alerts__periodic
            - cloudops__monitoring_alerts__real_time_sync_read
            - cloudops__monitoring_alerts__real_time_sync_write
            - cloudops__patch_management
            - cloudops__runbooks
            - cloudops__utilization
            - core__inventory
            - core__inventory__management
            - core__policy_engine
            - core__policy_engine__aws_config
            - core__policy_engine__azure_policy
            - core__resource_discovery
            - core__resource_discovery_extra
            - core__tagging_governance
            - core__tagging_governance_extra
            - finops__assessments
            - finops__azurehybridbenefit_recommendations
            - finops__budget
            - finops__cloud_native_recommendations
            - finops__cost_anomaly
            - finops__cost_processing
            - finops__cost_savings
            - finops__enterprise_discount_program
            - finops__reservation
            - finops__right_size_recommendations
            - finops__savings_plans
            - finops__schedule_recommendations
            - governance__request
            - integration__application_performance_monitoring
            - integration__azure_security_graph
            - integration__azure_sentinel
            - integration__tenable_nessus
            - secops__access
            - secops__aws_security_hub
            - secops__cloud_native_security_information_event_management
            - secops__compliance
            - secops__threats
            - secops__threats__posture_read
            - secops__threats__posture_write
            - secops__threats__realtime_alerts_read
            - secops__threats__realtime_alerts_write
            - secops__vulnerabilities
            - secops__vulnerabilities__read
            - secops__vulnerabilities__write
            - selfservice__governance
            - stackops
            - stackops__deployment
            - system__roles
            x-cs-enum-type: ServiceAccountFeature
        role_templates:
          type: array
          description: Role templates mapped for the product
          items:
            type: string
      type: object
    ServiceAccountFeatureRequirement:
      properties:
        feature:
          type: string
          description: CoreStack Feature
          example: appsecops__onboarding
          enum:
          - appsecops__onboarding
          - assessments__wellarchitected
          - assessments__wellarchitected__auto_assessment
          - assessments__wellarchitected__auto_assessment__aws_sync
          - assessments__wellarchitected__custom_framework__aws_sync
          - cloudops__activity
          - cloudops__activity__periodic
          - cloudops__activity__real_time_sync_read
          - cloudops__activity__real_time_sync_write
          - cloudops__backup_management
          - cloudops__cloudwatch_agent
          - cloudops__monitoring_alerts
          - cloudops__monitoring_alerts__periodic
          - cloudops__monitoring_alerts__real_time_sync_read
          - cloudops__monitoring_alerts__real_time_sync_write
          - cloudops__patch_management
          - cloudops__runbooks
          - cloudops__utilization
          - core__inventory
          - core__inventory__management
          - core__policy_engine
          - core__policy_engine__aws_config
          - core__policy_engine__azure_policy
          - core__resource_discovery
          - core__resource_discovery_extra
          - core__tagging_governance
          - core__tagging_governance_extra
          - finops__assessments
          - finops__azurehybridbenefit_recommendations
          - finops__budget
          - finops__cloud_native_recommendations
          - finops__cost_anomaly
          - finops__cost_processing
          - finops__cost_savings
          - finops__enterprise_discount_program
          - finops__reservation
          - finops__right_size_recommendations
          - finops__savings_plans
          - finops__schedule_recommendations
          - governance__request
          - integration__application_performance_monitoring
          - integration__azure_security_graph
          - integration__azure_sentinel
          - integration__tenable_nessus
          - secops__access
          - secops__aws_security_hub
          - secops__cloud_native_security_information_event_management
          - secops__compliance
          - secops__threats
          - secops__threats__posture_read
          - secops__threats__posture_write
          - secops__threats__realtime_alerts_read
          - secops__threats__realtime_alerts_write
          - secops__vulnerabilities
          - secops__vulnerabilities__read
          - secops__vulnerabilities__write
          - selfservice__governance
          - stackops
          - stackops__deployment
          - system__roles
          x-cs-enum-type: ServiceAccountFeature
        access_type:
          type: string
          description: Limit to matching access types
          example: read
          enum:
          - read
          - write
          x-cs-enum-type: CloudAccountAccessType
        providers:
          type: array
          description: Requirements for this feature, based on Provider
          items:
            $ref: '#/components/schemas/ServiceAccountFeatureRequirementPerProvider'
        executor:
          type: string
          description: Executor responsible for this feature
          example: AI
          enum:
          - AI
          - AI_AGENT
          - AI_BG
          - BROKER
          - COMPLIANCE
          - COST
          - COST_BG
          - COST_BG_CLOUD_BILLING
          - COST_BG_K8S_BILLING
          - FEATURE_FLAGS
          - GOVERNANCE
          - HEATSTACK
          - HEATSTACK_BG
          - IDENTITY
          - IDENTITY_BG
          - OPERATIONS
          - REPORT_GENERATION
          - RESOURCE_INVENTORY
          - RESOURCE_INVENTORY_BG
          - SECURITY
          x-cs-enum-type: BackgroundJobExecutor
        system_only:
          type: boolean
          description: If set, managed by the system
        all_products:
          type: boolean
          description: If set, allowed in any account
      type: object
    ModelError:
      required:
      - message
      properties:
        message:
          type: string
          description: Error response message.
      type: object
    ServiceAccountNativeDetailsBase:
      required:
      - type
      properties: {}
      discriminator:
        prop

# --- truncated at 32 KB (46 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/corestack/refs/heads/main/openapi/corestack-product-api-openapi.yml