Fortanix
Fortanix Armor and Key Insight API

REST API covering the Armor and Key Insight components of the Fortanix Data & AI Security Platform: cloud and on-premises cryptographic discovery connections, scans, scan inventory, discovery policies, and AWS, Azure, on-premises, services, DSM and post-quantum-cryptography reporting, plus OAuth 2.0 client-credentials authentication.
Documentation GitHub OpenAPI
OpenAPI Specification

{
  "components": {
    "parameters": {
      "DiscoveryAwsKeyUsageParams": {
        "explode": true,
        "in": "query",
        "name": "DiscoveryAwsKeyUsageParams",
        "schema": {
          "$ref": "#/components/schemas/DiscoveryAwsKeyUsageParams"
        }
      },
      "DiscoveryAwsScannedServicesReportByAccountParams": {
        "explode": true,
        "in": "query",
        "name": "DiscoveryAwsScannedServicesReportByAccountParams",
        "schema": {
          "$ref": "#/components/schemas/DiscoveryAwsScannedServicesReportByAccountParams"
        }
      },
      "DiscoveryAzureKeyUsageParams": {
        "explode": true,
        "in": "query",
        "name": "DiscoveryAzureKeyUsageParams",
        "schema": {
          "$ref": "#/components/schemas/DiscoveryAzureKeyUsageParams"
        }
      },
      "DiscoveryAzureScannedServicesReportBySubscriptionParams": {
        "explode": true,
        "in": "query",
        "name": "DiscoveryAzureScannedServicesReportBySubscriptionParams",
        "schema": {
          "$ref": "#/components/schemas/DiscoveryAzureScannedServicesReportBySubscriptionParams"
        }
      },
      "DiscoveryGetAllConnectionsParams": {
        "explode": true,
        "in": "query",
        "name": "DiscoveryGetAllConnectionsParams",
        "schema": {
          "$ref": "#/components/schemas/DiscoveryGetAllConnectionsParams"
        }
      },
      "DiscoveryGetAllPoliciesParams": {
        "explode": true,
        "in": "query",
        "name": "DiscoveryGetAllPoliciesParams",
        "schema": {
          "$ref": "#/components/schemas/DiscoveryGetAllPoliciesParams"
        }
      },
      "DiscoveryInventoryObjectsParams": {
        "explode": true,
        "in": "query",
        "name": "DiscoveryInventoryObjectsParams",
        "schema": {
          "$ref": "#/components/schemas/DiscoveryInventoryObjectsParams"
        }
      },
      "DiscoveryPqcReportConnectionParams": {
        "explode": true,
        "in": "query",
        "name": "DiscoveryPqcReportConnectionParams",
        "schema": {
          "$ref": "#/components/schemas/DiscoveryPqcReportConnectionParams"
        }
      },
      "DiscoveryPqcReportServiceParams": {
        "explode": true,
        "in": "query",
        "name": "DiscoveryPqcReportServiceParams",
        "schema": {
          "$ref": "#/components/schemas/DiscoveryPqcReportServiceParams"
        }
      },
      "DiscoveryScanInventoryObjectsParams": {
        "explode": true,
        "in": "query",
        "name": "DiscoveryScanInventoryObjectsParams",
        "schema": {
          "$ref": "#/components/schemas/DiscoveryScanInventoryObjectsParams"
        }
      },
      "DiscoveryScanParams": {
        "explode": true,
        "in": "query",
        "name": "DiscoveryScanParams",
        "schema": {
          "$ref": "#/components/schemas/DiscoveryScanParams"
        }
      },
      "DiscoveryScannedAwsAccountsParams": {
        "explode": true,
        "in": "query",
        "name": "DiscoveryScannedAwsAccountsParams",
        "schema": {
          "$ref": "#/components/schemas/DiscoveryScannedAwsAccountsParams"
        }
      },
      "DiscoveryScannedAzureSubscriptionsParams": {
        "explode": true,
        "in": "query",
        "name": "DiscoveryScannedAzureSubscriptionsParams",
        "schema": {
          "$ref": "#/components/schemas/DiscoveryScannedAzureSubscriptionsParams"
        }
      },
      "DiscoveryScannedServicesReportByServiceTypeParams": {
        "explode": true,
        "in": "query",
        "name": "DiscoveryScannedServicesReportByServiceTypeParams",
        "schema": {
          "$ref": "#/components/schemas/DiscoveryScannedServicesReportByServiceTypeParams"
        }
      },
      "DiscoveryScannedServicesReportByViolationTypeParams": {
        "explode": true,
        "in": "query",
        "name": "DiscoveryScannedServicesReportByViolationTypeParams",
        "schema": {
          "$ref": "#/components/schemas/DiscoveryScannedServicesReportByViolationTypeParams"
        }
      }
    },
    "schemas": {
      "DiscoveryAcmCertificate": {
        "allOf": [
          {
            "properties": {
              "analysis": {
                "$ref": "#/components/schemas/DiscoveryAcmCertificateAnalysis"
              },
              "certificate_arn": {
                "type": "string"
              },
              "created_at": {
                "example": "20170509T070912Z",
                "pattern": "^\\d{4}\\d{2}\\d{2}T\\d{2}\\d{2}\\d{2}Z$",
                "type": "string"
              },
              "domain_name": {
                "type": "string"
              },
              "extended_key_usages": {
                "items": {
                  "$ref": "#/components/schemas/DiscoveryAcmCertificateExtendedKeyUsage"
                },
                "nullable": true,
                "type": "array"
              },
              "issuer": {
                "type": "string"
              },
              "key_algorithm": {
                "$ref": "#/components/schemas/DiscoveryAcmCertificateKeyAlgorithm"
              },
              "not_valid_after": {
                "example": "20170509T070912Z",
                "pattern": "^\\d{4}\\d{2}\\d{2}T\\d{2}\\d{2}\\d{2}Z$",
                "type": "string"
              },
              "not_valid_before": {
                "example": "20170509T070912Z",
                "pattern": "^\\d{4}\\d{2}\\d{2}T\\d{2}\\d{2}\\d{2}Z$",
                "type": "string"
              },
              "renewal_eligibility": {
                "$ref": "#/components/schemas/DiscoveryAcmCertificateRenewalEligibility"
              },
              "serial": {
                "type": "string"
              },
              "signature_algorithm": {
                "$ref": "#/components/schemas/DiscoveryAcmCertificateSignatureAlgorithm"
              },
              "status": {
                "$ref": "#/components/schemas/DiscoveryAcmCertificateStatus"
              },
              "subject_alternative_names": {
                "items": {
                  "type": "string"
                },
                "nullable": true,
                "type": "array"
              },
              "used_by_services": {
                "items": {
                  "type": "string"
                },
                "type": "array"
              }
            },
            "required": [
              "certificate_arn",
              "domain_name",
              "status",
              "renewal_eligibility",
              "issuer",
              "key_algorithm",
              "signature_algorithm",
              "serial",
              "used_by_services",
              "analysis"
            ],
            "type": "object"
          }
        ]
      },
      "DiscoveryAcmCertificateAnalysis": {
        "allOf": [
          {
            "properties": {
              "is_expired": {
                "type": "boolean"
              },
              "is_shared": {
                "type": "boolean"
              },
              "key_algo_crypto_policy_compliance": {
                "$ref": "#/components/schemas/DiscoveryAwsCryptoPolicyCompliance"
              },
              "overly_permissive_usage_violation": {
                "type": "boolean"
              },
              "signature_crypto_policy_compliance": {
                "$ref": "#/components/schemas/DiscoveryAwsCryptoPolicyCompliance"
              }
            },
            "required": [
              "is_shared",
              "is_expired",
              "overly_permissive_usage_violation"
            ],
            "type": "object"
          }
        ]
      },
      "DiscoveryAcmCertificateExtendedKeyUsage": {
        "allOf": [
          {
            "properties": {
              "name": {
                "$ref": "#/components/schemas/DiscoveryAcmCertificateExtendedKeyUsageName"
              },
              "object_identifier": {
                "nullable": true,
                "type": "string"
              }
            },
            "required": ["name"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAcmCertificateExtendedKeyUsageName": {
        "enum": [
          "any",
          "code_signing",
          "custom",
          "email_protection",
          "ipsec_end_system",
          "ipsec_tunnel",
          "ipsec_user",
          "none",
          "ocsp_signing",
          "time_stamping",
          "tls_web_server_authentication",
          "tls_web_client_authentication",
          "unknown"
        ],
        "type": "string"
      },
      "DiscoveryAcmCertificateKeyAlgorithm": {
        "enum": ["rsa2048", "rsa3072", "rsa4096", "unknown"],
        "type": "string"
      },
      "DiscoveryAcmCertificateRenewalEligibility": {
        "enum": ["ineligible", "eligible", "unknown"],
        "type": "string"
      },
      "DiscoveryAcmCertificateSignatureAlgorithm": {
        "enum": ["sha256_with_rsa", "sha512_with_rsa", "unknown"],
        "type": "string"
      },
      "DiscoveryAcmCertificateStatus": {
        "enum": [
          "expired",
          "pending",
          "issued",
          "failed",
          "inactive",
          "revoked",
          "validation_timed_out",
          "unknown"
        ],
        "type": "string"
      },
      "DiscoveryAesOptionsPolicy": {
        "allOf": [
          {
            "properties": {
              "fpe": {
                "$ref": "#/components/schemas/DiscoveryFpeOptions"
              },
              "key_sizes": {
                "items": {
                  "maximum": 4294967295,
                  "minimum": 0,
                  "type": "integer"
                },
                "nullable": true,
                "type": "array"
              },
              "random_iv": {
                "nullable": true,
                "type": "boolean"
              }
            },
            "type": "object"
          }
        ]
      },
      "DiscoveryAll": {
        "description": "A helper enum with a single variant, All, which indicates that something should apply to an\nentire part. (This is here mainly to allow other untagged enums to work properly.)",
        "enum": ["all"],
        "type": "string"
      },
      "DiscoveryAriaOptionsPolicy": {
        "allOf": [
          {
            "properties": {
              "key_sizes": {
                "items": {
                  "maximum": 4294967295,
                  "minimum": 0,
                  "type": "integer"
                },
                "nullable": true,
                "type": "array"
              },
              "random_iv": {
                "nullable": true,
                "type": "boolean"
              }
            },
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsAccount": {
        "allOf": [
          {
            "properties": {
              "details": {
                "$ref": "#/components/schemas/DiscoveryAwsAccountDetails"
              },
              "id": {
                "type": "string"
              }
            },
            "required": ["id"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsAccountDetails": {
        "allOf": [
          {
            "properties": {
              "name": {
                "nullable": true,
                "type": "string"
              }
            },
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsAccountKeysCount": {
        "allOf": [
          {
            "properties": {
              "account": {
                "$ref": "#/components/schemas/DiscoveryAwsAccount"
              },
              "enabled_keys": {
                "type": "integer"
              },
              "total_keys": {
                "type": "integer"
              }
            },
            "required": ["account", "total_keys", "enabled_keys"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsAccountViolationMetrics": {
        "allOf": [
          {
            "properties": {
              "account_id": {
                "type": "string"
              },
              "violations_by_region": {
                "additionalProperties": {
                  "$ref": "#/components/schemas/DiscoveryAwsRegionViolationMetrics"
                },
                "type": "object"
              }
            },
            "required": ["account_id", "violations_by_region"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsCertificateAssessment": {
        "allOf": [
          {
            "properties": {
              "expired_certificate_count": {
                "type": "integer"
              },
              "expiry_metrics_by_issuer": {
                "additionalProperties": {
                  "$ref": "#/components/schemas/DiscoveryExpiryMetrics"
                },
                "type": "object"
              },
              "non_compliant_certificate_by_key_algorithm_count": {
                "type": "integer"
              },
              "non_compliant_certificate_by_signature_count": {
                "type": "integer"
              },
              "overly_permissive_certificate_usage_count": {
                "type": "integer"
              },
              "shared_certificate_count": {
                "type": "integer"
              },
              "total_certificates": {
                "type": "integer"
              }
            },
            "required": [
              "total_certificates",
              "expiry_metrics_by_issuer",
              "expired_certificate_count",
              "shared_certificate_count",
              "non_compliant_certificate_by_key_algorithm_count",
              "non_compliant_certificate_by_signature_count",
              "overly_permissive_certificate_usage_count"
            ],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsCloudDiscoveryData": {
        "allOf": [
          {
            "properties": {
              "cross_account_keys": {
                "nullable": true,
                "type": "integer"
              },
              "customer_managed_keys": {
                "nullable": true,
                "type": "integer"
              },
              "platform_managed_keys": {
                "nullable": true,
                "type": "integer"
              },
              "total_accounts": {
                "type": "integer"
              },
              "total_certificates": {
                "nullable": true,
                "type": "integer"
              },
              "total_keys": {
                "type": "integer"
              },
              "total_regions": {
                "type": "integer"
              },
              "total_services": {
                "type": "integer"
              }
            },
            "required": [
              "total_accounts",
              "total_regions",
              "total_keys",
              "total_services"
            ],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsConfig": {
        "allOf": [
          {
            "properties": {
              "aws_scope": {
                "$ref": "#/components/schemas/DiscoveryAwsScope"
              },
              "creds": {
                "$ref": "#/components/schemas/DiscoveryAwsCredentials"
              },
              "endpoint": {
                "format": "url",
                "nullable": true,
                "type": "string"
              },
              "role_arn": {
                "description": "ARN for AWS Role configured for scanning AWS account/organization",
                "nullable": true,
                "type": "string"
              }
            },
            "required": ["creds", "aws_scope"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsCredentials": {
        "discriminator": {
          "mapping": {
            "access_and_secret_key": "DiscoveryAwsCredentialsVariantAccessAndSecretKey",
            "open_id_connect": "DiscoveryAwsCredentialsVariantOpenIdConnect"
          },
          "propertyName": "$type"
        },
        "oneOf": [
          {
            "$ref": "#/components/schemas/DiscoveryAwsCredentialsVariantAccessAndSecretKey"
          },
          {
            "$ref": "#/components/schemas/DiscoveryAwsCredentialsVariantOpenIdConnect"
          }
        ]
      },
      "DiscoveryAwsCredentialsAccessAndSecretKey": {
        "allOf": [
          {
            "properties": {
              "access_key": {
                "type": "string"
              },
              "secret_key": {
                "nullable": true,
                "type": "string"
              }
            },
            "required": ["access_key"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsCredentialsOpenIdConnect": {
        "allOf": [
          {
            "properties": {
              "auth_config_id": {
                "description": "Uuid for the AuthConfig object within Account",
                "format": "uuid",
                "type": "string"
              }
            },
            "required": ["auth_config_id"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsCredentialsVariantAccessAndSecretKey": {
        "allOf": [
          {
            "properties": {
              "$type": {
                "enum": ["access_and_secret_key"],
                "type": "string"
              }
            },
            "required": ["$type"],
            "type": "object"
          },
          {
            "$ref": "#/components/schemas/DiscoveryAwsCredentialsAccessAndSecretKey"
          }
        ]
      },
      "DiscoveryAwsCredentialsVariantOpenIdConnect": {
        "allOf": [
          {
            "properties": {
              "$type": {
                "enum": ["open_id_connect"],
                "type": "string"
              }
            },
            "required": ["$type"],
            "type": "object"
          },
          {
            "$ref": "#/components/schemas/DiscoveryAwsCredentialsOpenIdConnect"
          }
        ]
      },
      "DiscoveryAwsCryptoPolicyCompliance": {
        "allOf": [
          {
            "properties": {
              "is_compliant": {
                "type": "boolean"
              },
              "violation_reason": {
                "nullable": true,
                "type": "string"
              }
            },
            "required": ["is_compliant"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsDefaultServerSideEncryption": {
        "allOf": [
          {
            "properties": {
              "kms_master_key": {
                "nullable": true,
                "type": "string"
              },
              "sse_algorithm": {
                "$ref": "#/components/schemas/DiscoveryAwsSseAlgorithm"
              }
            },
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsDynamoDbInstance": {
        "allOf": [
          {
            "properties": {
              "analysis": {
                "$ref": "#/components/schemas/DiscoveryAwsDynamoDbInstanceAnalysis"
              },
              "identifier": {
                "nullable": true,
                "type": "string"
              },
              "kms_key_id": {
                "nullable": true,
                "type": "string"
              }
            },
            "required": ["analysis"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsDynamoDbInstanceAnalysis": {
        "allOf": [
          {
            "properties": {
              "encrypted_with_expired_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encrypted_with_noncompliant_key": {
                "type": "boolean"
              },
              "encrypted_with_overly_permissive_management_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encrypted_with_overly_permissive_usage_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encrypted_with_quantum_vulnerable_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encrypted_with_shared_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encryption_status": {
                "$ref": "#/components/schemas/DiscoveryAwsEncryptionStatus"
              },
              "key_availability": {
                "$ref": "#/components/schemas/DiscoveryKeyAvailability"
              }
            },
            "required": ["encrypted_with_noncompliant_key"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsEbsVolume": {
        "allOf": [
          {
            "description": "Internal model to describe an AWS EBS volume.\n\nThis is a selection of the fields most relevant for the current dashboard and could be\nupdated to include more fields in the future.",
            "properties": {
              "analysis": {
                "$ref": "#/components/schemas/DiscoveryAwsEbsVolumeAnalysis"
              },
              "availability_zone": {
                "description": "The region this volume will be available",
                "type": "string"
              },
              "kms_key_id": {
                "description": "The arn of the key in KMS that encrypts this drive",
                "nullable": true,
                "type": "string"
              },
              "volume_id": {
                "description": "The ARN of the volume",
                "nullable": true,
                "type": "string"
              },
              "volume_size": {
                "description": "The storage limit (in GB) of the volume",
                "format": "int32",
                "nullable": true,
                "type": "integer"
              },
              "volume_state": {
                "$ref": "#/components/schemas/DiscoveryAwsEbsVolumeState"
              },
              "volume_type": {
                "$ref": "#/components/schemas/DiscoveryAwsEbsVolumeType"
              }
            },
            "required": ["availability_zone", "analysis"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsEbsVolumeAnalysis": {
        "allOf": [
          {
            "properties": {
              "encrypted_with_expired_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encrypted_with_noncompliant_key": {
                "type": "boolean"
              },
              "encrypted_with_overly_permissive_management_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encrypted_with_overly_permissive_usage_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encrypted_with_quantum_vulnerable_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encrypted_with_shared_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encryption_status": {
                "$ref": "#/components/schemas/DiscoveryAwsEncryptionStatus"
              },
              "key_availability": {
                "$ref": "#/components/schemas/DiscoveryKeyAvailability"
              }
            },
            "required": ["encrypted_with_noncompliant_key"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsEbsVolumeState": {
        "description": "Enumeration of the states that a volume may occupy.\n\nThis enum will default to the `Other` variant when a new variant is\nfound as the SDK from AWS marks their enum as \"non-exhaustive\"",
        "enum": [
          "available",
          "creating",
          "deleted",
          "deleting",
          "error",
          "in_use",
          "other"
        ],
        "type": "string"
      },
      "DiscoveryAwsEbsVolumeType": {
        "description": "Enumeration of the various types of volumes supported.\n\nThis enum will default to the `Other` variant when a new variant is\nfound as the SDK from AWS marks their enum as \"non-exhaustive\"",
        "enum": ["gp2", "gp3", "io1", "io2", "sc1", "st1", "standard", "other"],
        "type": "string"
      },
      "DiscoveryAwsEfsFileSystem": {
        "allOf": [
          {
            "properties": {
              "analysis": {
                "$ref": "#/components/schemas/DiscoveryAwsEfsFileSystemAnalysis"
              },
              "file_system_id": {
                "type": "string"
              },
              "kms_key_id": {
                "nullable": true,
                "type": "string"
              },
              "life_cycle_state": {
                "$ref": "#/components/schemas/DiscoveryAwsEfsLifeCycleState"
              },
              "size": {
                "format": "int64",
                "nullable": true,
                "type": "integer"
              }
            },
            "required": ["file_system_id", "life_cycle_state", "analysis"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsEfsFileSystemAnalysis": {
        "allOf": [
          {
            "properties": {
              "encrypted_with_expired_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encrypted_with_noncompliant_key": {
                "type": "boolean"
              },
              "encrypted_with_overly_permissive_management_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encrypted_with_overly_permissive_usage_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encrypted_with_quantum_vulnerable_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encrypted_with_shared_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encryption_status": {
                "$ref": "#/components/schemas/DiscoveryAwsEncryptionStatus"
              },
              "key_availability": {
                "$ref": "#/components/schemas/DiscoveryKeyAvailability"
              }
            },
            "required": ["encrypted_with_noncompliant_key"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsEfsLifeCycleState": {
        "enum": [
          "available",
          "creating",
          "deleted",
          "deleting",
          "error",
          "updating",
          "unknown"
        ],
        "type": "string"
      },
      "DiscoveryAwsEksCluster": {
        "allOf": [
          {
            "properties": {
              "analysis": {
                "$ref": "#/components/schemas/DiscoveryAwsEksClusterAnalysis"
              },
              "encryption_status": {
                "$ref": "#/components/schemas/DiscoveryAwsEksEncryptionStatus"
              },
              "kms_key_id": {
                "nullable": true,
                "type": "string"
              },
              "name": {
                "type": "string"
              },
              "status": {
                "$ref": "#/components/schemas/DiscoveryAwsEksClusterStatus"
              }
            },
            "required": ["name", "encryption_status", "status", "analysis"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsEksClusterAnalysis": {
        "allOf": [
          {
            "properties": {
              "encrypted_with_expired_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encrypted_with_noncompliant_key": {
                "type": "boolean"
              },
              "encrypted_with_overly_permissive_management_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encrypted_with_overly_permissive_usage_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encrypted_with_quantum_vulnerable_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encrypted_with_shared_key": {
                "nullable": true,
                "type": "boolean"
              },
              "encryption_status": {
                "$ref": "#/components/schemas/DiscoveryAwsEncryptionStatus"
              },
              "key_availability": {
                "$ref": "#/components/schemas/DiscoveryKeyAvailability"
              }
            },
            "required": ["encrypted_with_noncompliant_key"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsEksClusterStatus": {
        "enum": [
          "active",
          "creating",
          "deleting",
          "failed",
          "pending",
          "updating",
          "unknown"
        ],
        "type": "string"
      },
      "DiscoveryAwsEksEncryptionStatus": {
        "enum": ["encrypted", "unencrypted"],
        "type": "string"
      },
      "DiscoveryAwsEncryptionStatus": {
        "enum": [
          "unencrypted",
          "encrypted_with_csp_generated_key",
          "encrypted_with_platform_managed_key",
          "encrypted_with_customer_managed_key"
        ],
        "type": "string"
      },
      "DiscoveryAwsFilterMetadata": {
        "allOf": [
          {
            "properties": {
              "account_metrics": {
                "$ref": "#/components/schemas/DiscoveryServiceMetadataMetrics"
              },
              "region_metrics": {
                "$ref": "#/components/schemas/DiscoveryServiceMetadataMetrics"
              }
            },
            "required": ["account_metrics", "region_metrics"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsKeyUsageDetails": {
        "allOf": [
          {
            "properties": {
              "key": {
                "$ref": "#/components/schemas/DiscoveryAwsObject"
              },
              "key_id": {
                "type": "string"
              },
              "protected_services": {
                "items": {
                  "$ref": "#/components/schemas/DiscoveryAwsObject"
                },
                "type": "array"
              }
            },
            "required": ["key_id", "key", "protected_services"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsKeyUsageParams": {
        "allOf": [
          {
            "properties": {
              "filter": {
                "type": "string"
              },
              "limit": {
                "type": "integer"
              },
              "previous_id": {
                "type": "string"
              },
              "previous_sort_value": {
                "type": "string"
              },
              "sort_by": {
                "type": "string"
              }
            },
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsKeyUsageResponse": {
        "allOf": [
          {
            "properties": {
              "items": {
                "items": {
                  "$ref": "#/components/schemas/DiscoveryAwsKeyUsageDetails"
                },
                "type": "array"
              }
            },
            "required": ["items"],
            "type": "object"
          }
        ]
      },
      "DiscoveryAwsKeysAssessment": {
        "allOf": [
          {
            "properties": {
              "count_by_origin": {
                "additionalProperties": {
                  "type": "integer"
                },
                "type": "object"
              },
              "overly_permissive_key_management": {
                "type": "integer"
              },
              "overly_permissive_key_usage": {
                "type": "integer"
              },
              "pending_deletion_keys": {
                "type": "integer"
              },
              "pending_expiration_keys": {
                "type": "integer"
              },
              "quantum_vulnerable_keys": {
                "type": "integer"
              },
              "total_keys": {
               

# --- truncated at 32 KB (452 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/fortanix/refs/heads/main/openapi/fortanix-armor-key-insight-openapi-original.json
Where this information came from
This is an independent, third-party profile of Fortanix Armor and Key Insight API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.
The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.
Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.
info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.
Fortanix Armor and Key Insight API

Documentation

Specifications

Other Resources

OpenAPI Specification
