# authorship: generated by API Evangelist tooling. Stamped 2026-08-18
# on the file's own generator header (roadmap#64). An unmarked file is
# NOT assumed to be ours -- absence of evidence was never stamped.
x-method: generated
# amazon-device-farm — Spectral ruleset (strengthened)
# Plain Spectral. Existing hand-authored rules preserved; measured rules added
# from this provider's own OpenAPI conventions by strengthen_ruleset.py,
# then self-validated against the spec.
#
# Provenance:
# - servers-https-only: 50% of servers already https (warn)
# - query-params-casing: camel @ 100% (n=22)
# - operationid-casing: pascal @ 100% (n=77)
# - schema-names-casing: pascal @ 99% (n=335)
# - schema-properties-casing: snake @ 50% (n=598)
# - security: global (root) — NOT emitting operation-security-required
# - pagination params observed: ['nextToken']
# - merge: kept 24 existing, added 3 measured, upgraded 0
# - added: query-params-casing, schema-names-casing, schema-properties-casing
extends:
- spectral:oas
rules:
info-title-prefix:
description: API title should include "Device Farm"
severity: warn
given: $.info.title
then:
function: pattern
functionOptions:
match: Device Farm
info-description-required:
description: API must have a description
severity: error
given: $.info
then:
field: description
function: truthy
info-version-required:
description: API must have a version
severity: error
given: $.info
then:
field: version
function: truthy
openapi-version-3:
description: Must use OpenAPI 3.x
severity: error
given: $
then:
field: openapi
function: pattern
functionOptions:
match: ^3\.
servers-defined:
description: At least one server must be defined
severity: error
given: $
then:
field: servers
function: truthy
servers-https-only:
description: All server URLs must use HTTPS
severity: error
given: $.servers[*].url
then:
function: pattern
functionOptions:
match: ^https://
operation-summary-required:
description: All operations must have a summary
severity: error
given: $.paths[*][get,post,put,delete,patch]
then:
field: summary
function: truthy
operation-description-required:
description: All operations must have a description
severity: warn
given: $.paths[*][get,post,put,delete,patch]
then:
field: description
function: truthy
operation-id-required:
description: All operations must have an operationId
severity: error
given: $.paths[*][get,post,put,delete,patch]
then:
field: operationId
function: truthy
operation-id-pascal-case:
description: OperationIds should use PascalCase (AWS Device Farm convention)
severity: warn
given: $.paths[*][get,post,put,delete,patch].operationId
then:
function: pattern
functionOptions:
match: ^[A-Z][a-zA-Z0-9]*$
operation-tags-required:
description: All operations must have at least one tag
severity: warn
given: $.paths[*][get,post,put,delete,patch]
then:
field: tags
function: truthy
parameter-description-required:
description: All parameters must have a description
severity: warn
given: $.paths[*][get,post,put,delete,patch].parameters[*]
then:
field: description
function: truthy
parameter-schema-required:
description: All parameters must have a schema
severity: error
given: $.paths[*][get,post,put,delete,patch].parameters[*]
then:
field: schema
function: truthy
post-should-have-request-body:
description: POST operations should typically have a request body
severity: info
given: $.paths[*].post
then:
field: requestBody
function: truthy
response-success-required:
description: Operations must have at least one 2xx response
severity: error
given: $.paths[*][get,post,put,delete,patch].responses
then:
function: schema
functionOptions:
schema:
type: object
anyOf:
- required:
- '200'
- required:
- '201'
- required:
- '204'
response-description-required:
description: All responses must have a description
severity: error
given: $.paths[*][get,post,put,delete,patch].responses[*]
then:
field: description
function: truthy
response-error-4xx:
description: Operations should document 4xx error responses
severity: info
given: $.paths[*][get,post,put,delete,patch].responses
then:
function: schema
functionOptions:
schema:
type: object
anyOf:
- required:
- '400'
- required:
- '404'
- required:
- '409'
schema-description-required:
description: Top-level schemas should have descriptions
severity: info
given: $.components.schemas[*]
then:
field: description
function: truthy
schema-type-required:
description: Schemas should have a type defined
severity: warn
given: $.components.schemas[*]
then:
field: type
function: truthy
security-global-defined:
description: Global security should be defined
severity: warn
given: $
then:
field: security
function: truthy
security-schemes-defined:
description: Security schemes should be defined in components
severity: warn
given: $.components
then:
field: securitySchemes
function: truthy
get-no-request-body:
description: GET operations must not have a request body
severity: error
given: $.paths[*].get
then:
field: requestBody
function: falsy
no-empty-descriptions:
description: Descriptions must not be empty strings
severity: error
given: $..description
then:
function: truthy
external-docs-encouraged:
description: API should reference external documentation
severity: info
given: $
then:
field: externalDocs
function: truthy
query-params-casing:
description: Query parameters should be camelCase (the dominant convention in this API).
severity: warn
given: $.paths[*][get,post,put,patch,delete].parameters[?(@.in=='query')]
then:
field: name
function: casing
functionOptions:
type: camel
schema-names-casing:
description: Component schema names should be PascalCase (the dominant convention in this API).
severity: warn
given: $.components.schemas
then:
field: '@key'
function: pattern
functionOptions:
match: ^[A-Z][A-Za-z0-9]*$
schema-properties-casing:
description: Schema properties should be snake_case (the dominant convention in this API).
severity: info
given: $.components.schemas[*].properties
then:
field: '@key'
function: casing
functionOptions:
type: snake
Discovery needs no key. Ratings and market analysis are Pro.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.