Palo Alto Networks · Schema

AssetInternetExposureDetail

AssetInternetExposureDetail schema from Palo Alto Networks Cortex Xpanse REST API

Cloud SecurityCybersecurityFirewallNetwork SecuritySASESOARThreat IntelligenceXDR
View JSON Schema on GitHub

JSON Schema

cortex-xpanse-api-asset-internet-exposure-detail-schema.json Raw ↑
{
  "$schema": "https://json-schema.org/draft/2020-12/schema",
  "title": "AssetInternetExposureDetail",
  "description": "AssetInternetExposureDetail schema from Palo Alto Networks Cortex Xpanse REST API",
  "$id": "https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/json-schema/cortex-xpanse-api-asset-internet-exposure-detail-schema.json",
  "allOf": [
    {
      "type": "object",
      "description": "Summary of an internet-exposed asset discovered by Xpanse.",
      "properties": {
        "asm_id_list": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "List of ASM identifiers for this asset."
        },
        "asset_name": {
          "type": "string",
          "description": "Asset hostname, IP address, or identifier."
        },
        "asset_type": {
          "type": "string",
          "enum": [
            "CERTIFICATE",
            "CLOUD_COMPUTE_INSTANCE",
            "CLOUD_LOAD_BALANCER",
            "CLOUD_OBJECT_STORAGE",
            "DOMAIN",
            "NETWORKING_DEVICE",
            "ON_PREM_SERVER",
            "UNMANAGED_NETWORK_DEVICE"
          ]
        },
        "ip_address": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "IP addresses associated with this asset."
        },
        "domain": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "Domain names associated with this asset."
        },
        "ipv6_address": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "cloud_id": {
          "type": "string",
          "description": "Cloud provider resource identifier."
        },
        "cloud_provider": {
          "type": "string",
          "enum": [
            "AWS",
            "Azure",
            "GCP",
            "OTHER"
          ]
        },
        "externally_detected_providers": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "business_units": {
          "type": "array",
          "items": {
            "type": "string"
          },
          "description": "Business units associated with this asset."
        },
        "tags": {
          "type": "array",
          "items": {
            "type": "object",
            "properties": {
              "key": {
                "type": "string"
              },
              "value": {
                "type": "string"
              }
            }
          }
        },
        "created": {
          "type": "integer",
          "description": "Asset first discovery timestamp as Unix epoch milliseconds."
        },
        "last_observed": {
          "type": "integer",
          "description": "Most recent observation timestamp as Unix epoch milliseconds."
        }
      }
    },
    {
      "type": "object",
      "description": "Detailed asset information including all services and observations.",
      "properties": {
        "service_list": {
          "type": "array",
          "items": {
            "type": "object",
            "description": "An internet-exposed network service discovered on an asset.",
            "properties": {
              "service_id": {
                "type": "string"
              },
              "service_name": {
                "type": "string",
                "description": "Service name or protocol (e.g., HTTPS, SSH, RDP)."
              },
              "service_type": {
                "type": "string",
                "enum": [
                  "APPLICATION_SERVER",
                  "CLOUD_STORAGE",
                  "DATABASE",
                  "NETWORKING",
                  "REMOTE_DESKTOP",
                  "UNCLASSIFIED",
                  "WEB"
                ]
              },
              "ip_address": {
                "type": "array",
                "items": {
                  "type": "string"
                }
              },
              "domain": {
                "type": "array",
                "items": {
                  "type": "string"
                }
              },
              "port": {
                "type": "integer",
                "description": "TCP/UDP port number."
              },
              "protocol": {
                "type": "string",
                "enum": [
                  "TCP",
                  "UDP"
                ]
              },
              "provider": {
                "type": "array",
                "items": {
                  "type": "string"
                },
                "description": "Cloud or hosting providers detected for this service."
              },
              "business_units": {
                "type": "array",
                "items": {
                  "type": "string"
                }
              },
              "created": {
                "type": "integer",
                "description": "Service first discovery timestamp as Unix epoch milliseconds."
              },
              "last_observed": {
                "type": "integer"
              },
              "is_active": {
                "type": "string",
                "enum": [
                  "Active",
                  "Inactive",
                  "Unconfirmed"
                ]
              },
              "discovery_type": {
                "type": "string",
                "enum": [
                  "ColocatedOnIp",
                  "DirectlyDiscovered",
                  "CSP",
                  "CertificateAssociation"
                ]
              }
            }
          }
        },
        "certificate": {
          "type": "object",
          "description": "TLS certificate details if applicable.",
          "properties": {
            "issuer": {
              "type": "string"
            },
            "subject": {
              "type": "string"
            },
            "valid_from": {
              "type": "string",
              "format": "date"
            },
            "valid_to": {
              "type": "string",
              "format": "date"
            },
            "sha256": {
              "type": "string"
            }
          }
        },
        "active_service_ids": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "all_service_ids": {
          "type": "array",
          "items": {
            "type": "string"
          }
        }
      }
    }
  ]
}