Virtru policy.resourcemapping.ResourceMappingService API

openapi: 3.2.0
info:
  title: authorization authorization.AuthorizationService Policy.resourcemapping.Resource Mapping Service API
  description: Resource Mapping Groups
servers:
- url: https://api.virtru.com
  description: Base URL declared by the provider in apis.yml (roadmap#122).
security: []
tags:
- name: policy.resourcemapping.ResourceMappingService
  description: Resource Mapping Groups
paths:
  /policy.resourcemapping.ResourceMappingService/ListResourceMappingGroups:
    post:
      tags:
      - policy.resourcemapping.ResourceMappingService
      summary: ListResourceMappingGroups
      operationId: policy.resourcemapping.ResourceMappingService.ListResourceMappingGroups
      parameters:
      - name: Connect-Protocol-Version
        in: header
        required: true
        schema:
          $ref: '#/components/schemas/connect-protocol-version'
      - name: Connect-Timeout-Ms
        in: header
        schema:
          $ref: '#/components/schemas/connect-timeout-header'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/policy.resourcemapping.ListResourceMappingGroupsRequest'
        required: true
      responses:
        default:
          description: Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/connect.error'
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/policy.resourcemapping.ListResourceMappingGroupsResponse'
  /policy.resourcemapping.ResourceMappingService/GetResourceMappingGroup:
    post:
      tags:
      - policy.resourcemapping.ResourceMappingService
      summary: GetResourceMappingGroup
      operationId: policy.resourcemapping.ResourceMappingService.GetResourceMappingGroup
      parameters:
      - name: Connect-Protocol-Version
        in: header
        required: true
        schema:
          $ref: '#/components/schemas/connect-protocol-version'
      - name: Connect-Timeout-Ms
        in: header
        schema:
          $ref: '#/components/schemas/connect-timeout-header'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/policy.resourcemapping.GetResourceMappingGroupRequest'
        required: true
      responses:
        default:
          description: Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/connect.error'
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/policy.resourcemapping.GetResourceMappingGroupResponse'
  /policy.resourcemapping.ResourceMappingService/CreateResourceMappingGroup:
    post:
      tags:
      - policy.resourcemapping.ResourceMappingService
      summary: CreateResourceMappingGroup
      operationId: policy.resourcemapping.ResourceMappingService.CreateResourceMappingGroup
      parameters:
      - name: Connect-Protocol-Version
        in: header
        required: true
        schema:
          $ref: '#/components/schemas/connect-protocol-version'
      - name: Connect-Timeout-Ms
        in: header
        schema:
          $ref: '#/components/schemas/connect-timeout-header'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/policy.resourcemapping.CreateResourceMappingGroupRequest'
        required: true
      responses:
        default:
          description: Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/connect.error'
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/policy.resourcemapping.CreateResourceMappingGroupResponse'
  /policy.resourcemapping.ResourceMappingService/UpdateResourceMappingGroup:
    post:
      tags:
      - policy.resourcemapping.ResourceMappingService
      summary: UpdateResourceMappingGroup
      operationId: policy.resourcemapping.ResourceMappingService.UpdateResourceMappingGroup
      parameters:
      - name: Connect-Protocol-Version
        in: header
        required: true
        schema:
          $ref: '#/components/schemas/connect-protocol-version'
      - name: Connect-Timeout-Ms
        in: header
        schema:
          $ref: '#/components/schemas/connect-timeout-header'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/policy.resourcemapping.UpdateResourceMappingGroupRequest'
        required: true
      responses:
        default:
          description: Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/connect.error'
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/policy.resourcemapping.UpdateResourceMappingGroupResponse'
  /policy.resourcemapping.ResourceMappingService/DeleteResourceMappingGroup:
    post:
      tags:
      - policy.resourcemapping.ResourceMappingService
      summary: DeleteResourceMappingGroup
      operationId: policy.resourcemapping.ResourceMappingService.DeleteResourceMappingGroup
      parameters:
      - name: Connect-Protocol-Version
        in: header
        required: true
        schema:
          $ref: '#/components/schemas/connect-protocol-version'
      - name: Connect-Timeout-Ms
        in: header
        schema:
          $ref: '#/components/schemas/connect-timeout-header'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/policy.resourcemapping.DeleteResourceMappingGroupRequest'
        required: true
      responses:
        default:
          description: Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/connect.error'
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/policy.resourcemapping.DeleteResourceMappingGroupResponse'
  /policy.resourcemapping.ResourceMappingService/ListResourceMappings:
    post:
      tags:
      - policy.resourcemapping.ResourceMappingService
      summary: ListResourceMappings
      operationId: policy.resourcemapping.ResourceMappingService.ListResourceMappings
      parameters:
      - name: Connect-Protocol-Version
        in: header
        required: true
        schema:
          $ref: '#/components/schemas/connect-protocol-version'
      - name: Connect-Timeout-Ms
        in: header
        schema:
          $ref: '#/components/schemas/connect-timeout-header'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/policy.resourcemapping.ListResourceMappingsRequest'
        required: true
      responses:
        default:
          description: Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/connect.error'
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/policy.resourcemapping.ListResourceMappingsResponse'
  /policy.resourcemapping.ResourceMappingService/ListResourceMappingsByGroupFqns:
    post:
      tags:
      - policy.resourcemapping.ResourceMappingService
      summary: ListResourceMappingsByGroupFqns
      operationId: policy.resourcemapping.ResourceMappingService.ListResourceMappingsByGroupFqns
      parameters:
      - name: Connect-Protocol-Version
        in: header
        required: true
        schema:
          $ref: '#/components/schemas/connect-protocol-version'
      - name: Connect-Timeout-Ms
        in: header
        schema:
          $ref: '#/components/schemas/connect-timeout-header'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/policy.resourcemapping.ListResourceMappingsByGroupFqnsRequest'
        required: true
      responses:
        default:
          description: Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/connect.error'
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/policy.resourcemapping.ListResourceMappingsByGroupFqnsResponse'
  /policy.resourcemapping.ResourceMappingService/GetResourceMapping:
    post:
      tags:
      - policy.resourcemapping.ResourceMappingService
      summary: GetResourceMapping
      operationId: policy.resourcemapping.ResourceMappingService.GetResourceMapping
      parameters:
      - name: Connect-Protocol-Version
        in: header
        required: true
        schema:
          $ref: '#/components/schemas/connect-protocol-version'
      - name: Connect-Timeout-Ms
        in: header
        schema:
          $ref: '#/components/schemas/connect-timeout-header'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/policy.resourcemapping.GetResourceMappingRequest'
        required: true
      responses:
        default:
          description: Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/connect.error'
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/policy.resourcemapping.GetResourceMappingResponse'
  /policy.resourcemapping.ResourceMappingService/CreateResourceMapping:
    post:
      tags:
      - policy.resourcemapping.ResourceMappingService
      summary: CreateResourceMapping
      operationId: policy.resourcemapping.ResourceMappingService.CreateResourceMapping
      parameters:
      - name: Connect-Protocol-Version
        in: header
        required: true
        schema:
          $ref: '#/components/schemas/connect-protocol-version'
      - name: Connect-Timeout-Ms
        in: header
        schema:
          $ref: '#/components/schemas/connect-timeout-header'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/policy.resourcemapping.CreateResourceMappingRequest'
        required: true
      responses:
        default:
          description: Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/connect.error'
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/policy.resourcemapping.CreateResourceMappingResponse'
  /policy.resourcemapping.ResourceMappingService/UpdateResourceMapping:
    post:
      tags:
      - policy.resourcemapping.ResourceMappingService
      summary: UpdateResourceMapping
      operationId: policy.resourcemapping.ResourceMappingService.UpdateResourceMapping
      parameters:
      - name: Connect-Protocol-Version
        in: header
        required: true
        schema:
          $ref: '#/components/schemas/connect-protocol-version'
      - name: Connect-Timeout-Ms
        in: header
        schema:
          $ref: '#/components/schemas/connect-timeout-header'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/policy.resourcemapping.UpdateResourceMappingRequest'
        required: true
      responses:
        default:
          description: Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/connect.error'
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/policy.resourcemapping.UpdateResourceMappingResponse'
  /policy.resourcemapping.ResourceMappingService/DeleteResourceMapping:
    post:
      tags:
      - policy.resourcemapping.ResourceMappingService
      summary: DeleteResourceMapping
      operationId: policy.resourcemapping.ResourceMappingService.DeleteResourceMapping
      parameters:
      - name: Connect-Protocol-Version
        in: header
        required: true
        schema:
          $ref: '#/components/schemas/connect-protocol-version'
      - name: Connect-Timeout-Ms
        in: header
        schema:
          $ref: '#/components/schemas/connect-timeout-header'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/policy.resourcemapping.DeleteResourceMappingRequest'
        required: true
      responses:
        default:
          description: Error
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/connect.error'
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/policy.resourcemapping.DeleteResourceMappingResponse'
components:
  schemas:
    policy.resourcemapping.DeleteResourceMappingResponse:
      type: object
      properties:
        resourceMapping:
          title: resource_mapping
          $ref: '#/components/schemas/policy.ResourceMapping'
      title: DeleteResourceMappingResponse
      additionalProperties: false
    policy.Value:
      type: object
      properties:
        id:
          type: string
          title: id
          description: generated uuid in database
        attribute:
          title: attribute
          $ref: '#/components/schemas/policy.Attribute'
        value:
          type: string
          title: value
        grants:
          type: array
          items:
            $ref: '#/components/schemas/policy.KeyAccessServer'
          title: grants
          description: Deprecated KAS grants for the value. Use kas_keys instead.
        fqn:
          type: string
          title: fqn
        active:
          title: active
          description: active by default until explicitly deactivated
          $ref: '#/components/schemas/google.protobuf.BoolValue'
        subjectMappings:
          type: array
          items:
            $ref: '#/components/schemas/policy.SubjectMapping'
          title: subject_mappings
          description: subject mapping
        kasKeys:
          type: array
          items:
            $ref: '#/components/schemas/policy.SimpleKasKey'
          title: kas_keys
        resourceMappings:
          type: array
          items:
            $ref: '#/components/schemas/policy.ResourceMapping'
          title: resource_mappings
        obligations:
          type: array
          items:
            $ref: '#/components/schemas/policy.Obligation'
          title: obligations
        metadata:
          title: metadata
          description: Common metadata
          $ref: '#/components/schemas/common.Metadata'
      title: Value
      additionalProperties: false
    policy.resourcemapping.ListResourceMappingsResponse:
      type: object
      properties:
        resourceMappings:
          type: array
          items:
            $ref: '#/components/schemas/policy.ResourceMapping'
          title: resource_mappings
        pagination:
          title: pagination
          $ref: '#/components/schemas/policy.PageResponse'
      title: ListResourceMappingsResponse
      additionalProperties: false
    policy.SimpleKasKey:
      type: object
      properties:
        kasUri:
          type: string
          title: kas_uri
          description: The URL of the Key Access Server
        publicKey:
          title: public_key
          description: The public key of the Key that belongs to the KAS
          $ref: '#/components/schemas/policy.SimpleKasPublicKey'
        kasId:
          type: string
          title: kas_id
          description: The ID of the Key Access Server
      title: SimpleKasKey
      additionalProperties: false
    policy.resourcemapping.CreateResourceMappingGroupRequest:
      type: object
      properties:
        namespaceId:
          type: string
          title: namespace_id
          format: uuid
        namespaceFqn:
          type: string
          title: namespace_fqn
          minLength: 1
          format: uri
        name:
          type: string
          title: name
          description: Required
        metadata:
          title: metadata
          description: Common metadata
          $ref: '#/components/schemas/common.MetadataMutable'
      title: CreateResourceMappingGroupRequest
      required:
      - name
      additionalProperties: false
    policy.resourcemapping.GetResourceMappingResponse:
      type: object
      properties:
        resourceMapping:
          title: resource_mapping
          $ref: '#/components/schemas/policy.ResourceMapping'
      title: GetResourceMappingResponse
      additionalProperties: false
    policy.RequestContext:
      type: object
      properties:
        pep:
          title: pep
          $ref: '#/components/schemas/policy.PolicyEnforcementPoint'
      title: RequestContext
      required:
      - pep
      additionalProperties: false
      description: Holds the context needed for obligation fulfillment
    policy.SourceType:
      type: string
      title: SourceType
      enum:
      - SOURCE_TYPE_UNSPECIFIED
      - SOURCE_TYPE_INTERNAL
      - SOURCE_TYPE_EXTERNAL
      description: "Describes whether this kas is managed by the organization or if they imported\n the kas information from an external party. These two modes are necessary in order\n to encrypt a tdf dek with an external parties kas public key."
    policy.ConditionGroup:
      type: object
      properties:
        conditions:
          type: array
          items:
            $ref: '#/components/schemas/policy.Condition'
          title: conditions
          minItems: 1
        booleanOperator:
          title: boolean_operator
          description: the boolean evaluation type across the conditions
          $ref: '#/components/schemas/policy.ConditionBooleanTypeEnum'
      title: ConditionGroup
      required:
      - booleanOperator
      additionalProperties: false
      description: A collection of Conditions evaluated by the boolean_operator provided
    google.protobuf.Any:
      type: object
      properties:
        type:
          type: string
        value:
          type: string
          format: binary
        debug:
          type: object
          additionalProperties: true
      additionalProperties: true
      description: Contains an arbitrary serialized message along with a @type that describes the type of the serialized message.
    policy.resourcemapping.DeleteResourceMappingGroupRequest:
      type: object
      properties:
        id:
          type: string
          title: id
          format: uuid
          description: Required
      title: DeleteResourceMappingGroupRequest
      additionalProperties: false
    policy.resourcemapping.UpdateResourceMappingGroupRequest:
      type: object
      properties:
        id:
          type: string
          title: id
          format: uuid
          description: Required
        namespaceId:
          type: string
          title: namespace_id
          format: uuid
          description: Optional
        namespaceFqn:
          type: string
          title: namespace_fqn
          minLength: 1
          format: uri
          description: Optional
        name:
          type: string
          title: name
          maxLength: 253
          description: 'Optional

            Optional field must be an alphanumeric string, allowing hyphens and underscores but not as the first or last character. The stored group name will be normalized to lower case.:

            ```

            size(this) == 0 || this.matches(''^[a-zA-Z0-9](?:[a-zA-Z0-9_-]*[a-zA-Z0-9])?$'')

            ```


            '
        metadata:
          title: metadata
          description: Common metadata
          $ref: '#/components/schemas/common.MetadataMutable'
        metadataUpdateBehavior:
          title: metadata_update_behavior
          $ref: '#/components/schemas/common.MetadataUpdateEnum'
      title: UpdateResourceMappingGroupRequest
      additionalProperties: false
    policy.resourcemapping.GetResourceMappingRequest:
      type: object
      properties:
        id:
          type: string
          title: id
          format: uuid
          description: Required
      title: GetResourceMappingRequest
      additionalProperties: false
    policy.AttributeRuleTypeEnum:
      type: string
      title: AttributeRuleTypeEnum
      enum:
      - ATTRIBUTE_RULE_TYPE_ENUM_UNSPECIFIED
      - ATTRIBUTE_RULE_TYPE_ENUM_ALL_OF
      - ATTRIBUTE_RULE_TYPE_ENUM_ANY_OF
      - ATTRIBUTE_RULE_TYPE_ENUM_HIERARCHY
    policy.Attribute:
      type: object
      properties:
        id:
          type: string
          title: id
        namespace:
          title: namespace
          description: namespace of the attribute
          $ref: '#/components/schemas/policy.Namespace'
        name:
          type: string
          title: name
          description: attribute name
        rule:
          title: rule
          description: attribute rule enum
          $ref: '#/components/schemas/policy.AttributeRuleTypeEnum'
        values:
          type: array
          items:
            $ref: '#/components/schemas/policy.Value'
          title: values
        grants:
          type: array
          items:
            $ref: '#/components/schemas/policy.KeyAccessServer'
          title: grants
          description: Deprecated KAS grants for the attribute. Use kas_keys instead.
        fqn:
          type: string
          title: fqn
        active:
          title: active
          description: active by default until explicitly deactivated
          $ref: '#/components/schemas/google.protobuf.BoolValue'
        kasKeys:
          type: array
          items:
            $ref: '#/components/schemas/policy.SimpleKasKey'
          title: kas_keys
          description: Keys associated with the attribute
        allowTraversal:
          title: allow_traversal
          description: "Whether or not we will use the attribute definition during encryption\n if the attribute value is missing."
          $ref: '#/components/schemas/google.protobuf.BoolValue'
        metadata:
          title: metadata
          description: Common metadata
          $ref: '#/components/schemas/common.Metadata'
      title: Attribute
      required:
      - rule
      additionalProperties: false
    policy.ObligationValue:
      type: object
      properties:
        id:
          type: string
          title: id
        obligation:
          title: obligation
          $ref: '#/components/schemas/policy.Obligation'
        value:
          type: string
          title: value
        triggers:
          type: array
          items:
            $ref: '#/components/schemas/policy.ObligationTrigger'
          title: triggers
        fqn:
          type: string
          title: fqn
        metadata:
          title: metadata
          $ref: '#/components/schemas/common.Metadata'
      title: ObligationValue
      additionalProperties: false
    policy.KeyAccessServer:
      type: object
      properties:
        id:
          type: string
          title: id
        uri:
          type: string
          title: uri
          description: 'Address of a KAS instance

            URI must be a valid URL (e.g., ''https://demo.com/'') followed by additional segments. Each segment must start and end with an alphanumeric character, can contain hyphens, alphanumeric characters, and slashes.:

            ```

            this.matches(''^https?://[a-zA-Z0-9]([a-zA-Z0-9\\-]{0,61}[a-zA-Z0-9])?(\\.[a-zA-Z0-9]([a-zA-Z0-9\\-]{0,61}[a-zA-Z0-9])?)*(:[0-9]+)?(/.*)?$'')

            ```


            '
        publicKey:
          title: public_key
          description: 'Deprecated: KAS can have multiple key pairs'
          $ref: '#/components/schemas/policy.PublicKey'
        sourceType:
          title: source_type
          description: 'The source of the KAS: (INTERNAL, EXTERNAL)'
          $ref: '#/components/schemas/policy.SourceType'
        kasKeys:
          type: array
          items:
            $ref: '#/components/schemas/policy.SimpleKasKey'
          title: kas_keys
          description: Kas keys associated with this KAS
        name:
          type: string
          title: name
          description: "Optional\n Unique name of the KAS instance"
        metadata:
          title: metadata
          description: Common metadata
          $ref: '#/components/schemas/common.Metadata'
      title: KeyAccessServer
      additionalProperties: false
      description: Key Access Server Registry
    connect-timeout-header:
      type: number
      title: Connect-Timeout-Ms
      description: Define the timeout, in ms
    google.protobuf.BoolValue:
      type: boolean
      description: "Wrapper message for `bool`.\n\n The JSON representation for `BoolValue` is JSON `true` and `false`.\n\n Not recommended for use in new APIs, but still useful for legacy APIs and\n has no plan to be removed."
    policy.Action.StandardAction:
      type: string
      title: StandardAction
      enum:
      - STANDARD_ACTION_UNSPECIFIED
      - STANDARD_ACTION_DECRYPT
      - STANDARD_ACTION_TRANSMIT
    policy.resourcemapping.CreateResourceMappingGroupResponse:
      type: object
      properties:
        resourceMappingGroup:
          title: resource_mapping_group
          $ref: '#/components/schemas/policy.ResourceMappingGroup'
      title: CreateResourceMappingGroupResponse
      additionalProperties: false
    policy.SubjectConditionSet:
      type: object
      properties:
        id:
          type: string
          title: id
        namespace:
          title: namespace
          description: "the namespace containing this subject condition set\n possible this is empty in the case a subject condition set\n has not been migrated to a namespace."
          $ref: '#/components/schemas/policy.Namespace'
        subjectSets:
          type: array
          items:
            $ref: '#/components/schemas/policy.SubjectSet'
          title: subject_sets
          minItems: 1
        metadata:
          title: metadata
          $ref: '#/components/schemas/common.Metadata'
      title: SubjectConditionSet
      additionalProperties: false
      description: 'A container for multiple Subject Sets, each containing Condition Groups, each

        containing Conditions. Multiple Subject Sets in a SubjectConditionSet are

        evaluated with AND logic. As each Subject Mapping has only one Attribute

        Value, the SubjectConditionSet is reusable across multiple Subject Mappings /

        Attribute Values and is an independent unit.'
    policy.Condition:
      type: object
      properties:
        subjectExternalSelectorValue:
          type: string
          title: subject_external_selector_value
          description: "a selector for a field value on a flattened Entity Representation (such as\n from idP/LDAP)"
        operator:
          title: operator
          description: the evaluation operator of relation
          $ref: '#/components/schemas/policy.SubjectMappingOperatorEnum'
        subjectExternalValues:
          type: array
          items:
            type: string
            minItems: 1
          title: subject_external_values
          minItems: 1
          description: "list of comparison values for the result of applying the\n subject_external_selector_value on a flattened Entity Representation\n (Subject), evaluated by the operator"
      title: Condition
      required:
      - subjectExternalSelectorValue
      - operator
      additionalProperties: false
      description: '*

        A Condition defines a rule of <the value at the flattened ''selector value''

        location> <operator> <subject external values>'
    policy.resourcemapping.UpdateResourceMappingRequest:
      type: object
      properties:
        id:
          type: string
          title: id
          format: uuid
          description: Required
        attributeValueId:
          type: string
          title: attribute_value_id
          description: 'Optional

            Optional field must be a valid UUID:

            ```

            size(this) == 0 || this.matches(''^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$'')

            ```


            '
        terms:
          type: array
          items:
            type: string
            maxItems: 1000
          title: terms
          maxItems: 1000
          description: Optional
        groupId:
          type: string
          title: group_id
          description: 'Optional

            Optional field must be a valid UUID:

            ```

            size(this) == 0 || this.matches(''^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}$'')

            ```


            '
        namespaceId:
          type: string
          title: namespace_id
          format: uuid
          description: "Optional\n The namespace that owns this resource mapping. If a group_id is set on the\n mapping, this must match the group's namespace."
        namespaceFqn:
          type: string
          title: namespace_fqn
          minLength: 1
          format: uri
          description: "Optional\n Alternative to namespace_id; the FQN of the owning namespace."
        metadata:
          title: metadata
          description: "Optional\n Common Metadata"
          $ref: '#/components/schemas/common.MetadataMutable'
        metadataUpdateBehavior:
          title: metadata_update_behavior
          $ref: '#/components/schemas/common.MetadataUpdateEnum'
      title: UpdateResourceMappingRequest
      additionalProperties: false
    policy.SubjectMappingOperatorEnum:
      type: string
      title: SubjectMappingOperatorEnum
      enum:
      - SUBJECT_MAPPING_OPERATOR_ENUM_UNSPECIFIED
      - SUBJECT_MAPPING_OPERATOR_ENUM_IN
      - SUBJECT_MAPPING_OPERATOR_ENUM_NOT_IN
      - SUBJECT_MAPPING_OPERATOR_ENUM_IN_CONTAINS
    policy.SubjectSet:
      type: object
      properties:
        conditionGroups:
          type: array
          items:
            $ref: '#/components/schemas/policy.ConditionGroup'
          title: condition_groups
          minItems: 1
          description: multiple Condition Groups are evaluated with AND logic
      title: SubjectSet
      additionalProperties: false
      description: A collection of Condition Groups
    policy.Namespace:
      type: object
      properties:
        id:
          type: string
          title: id
          description: generated uuid in database
        name:
          type: string
          title: name
          description: "used to partition Attribute Definitions, support by namespace AuthN and\n enable federation"
        fqn:
          type: string
          title: fqn
        active:
          title: active
          description: active by default until explicitly deactivated
          $ref: '#/components/schemas/google.protobuf.BoolValue'
        metadata:
          title: metadata
          $ref: '#/components/schemas/common.Metadata'
        grants:
          type: array
          items:
            $ref: '#/components/schemas/policy.KeyAccessServer'
          title: grants
          description: Deprecated KAS grants for the namespace. Use kas_keys instead.
        kasKeys:
          type: array
          items:
            $ref: '#/components/schemas/policy.SimpleKasKey'
          title: kas_keys
          description: Keys for the namespace
      title: Namespace
      additionalProperties: false
    policy.Obligation:
      type: object
      properties:
        id:
          type: string
          title: id
        namespace:
          title: namespace
          $ref: '#/components/schemas/policy.Namespace'
        name:
          type: string
          title: name
        values:
          type: array
          items:
            $ref: '#/c

# --- truncated at 32 KB (56 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/virtru/refs/heads/main/openapi/virtru-policy-resourcemapping-resourcemappingservice-api-openapi.yml