643 matches
28 actions
Conjur
28 actions
Security/Conjur
Details about a single resource.
If permitted_roles and privilege are given, Conjur lists the
roles with the specified privilege on the resource.
If check, privilege and role are given, Conjur checks if the
specified role has the privilege on the resource.
If permitted_roles and check are both given, Conjur responds to the check call ONLY.
{
"type": "object",
"properties": {
"account": {
"type": "string",
"description": "Conjur account name"
},
"check": {
"type": "boolean",
"description": "Checks whether a role has a privilege on a resource."
},
"identifier": {
"type": "string",
"description": "Resource identifier. Requires to be encoded when in path.\n\n##### Examples:\n\n- `myapp-01` -> `myapp-01` (unchanged)\n- `alice@devops` -> `alice%40devops`\n- `prod/aws/db-password` -> `prod%2Faws%2Fdb-password`\n- `research+development` -> `research%2Bdevelopment`\n- `sales&marketing` -> `sales%26marketing`\n"
},
"kind": {
"type": "string"
},
"permitted_roles": {
"type": "boolean"
},
"privilege": {
"type": "string",
"description": "Denotes a type of permission allowed on a resource"
},
"role": {
"type": "string",
"description": "##### Kinds of roles:\n\n- User: one unique wonderful human\n- Host: a single logical machine (in the broad sense, not just physical)\n- Layer: a collection of hosts that have the same privileges\n- Group: a collection of users and groups that have the same privileges\n- Policy: a role which owns of a set of related object\n\nAny identifier included in the URL must be URL-encoded to be recognized by the Conjur API.\n\n##### Resource Identifiers:\n\n- `myapp-01` -> `myapp-01` (unchanged)\n- `alice@devops` -> `alice%40devops`\n- `prod/aws/db-password` -> `prod%2Faws%2Fdb-password`\n- `research+development` -> `research%2Bdevelopment`\n- `sales&marketing` -> `sales%26marketing`\n"
}
},
"required": [
"account",
"identifier",
"kind"
],
"additionalProperties": false
}{
"type": "object",
"properties": {
"annotations": {
"type": "array",
"items": {
"type": "string"
}
},
"created_at": {
"type": "string"
},
"id": {
"type": "string"
},
"owner": {
"type": "string"
},
"permissions": {
"type": "array",
"items": {
"type": "object",
"properties": {
"policy": {
"type": "string"
},
"privilege": {
"type": "string"
},
"role": {
"type": "string"
}
}
}
},
"policy": {
"type": "string"
},
"policy_versions": {
"type": "array",
"items": {
"type": "object",
"properties": {
"client_ip": {
"type": "string"
},
"created_at": {
"type": "string"
},
"finished_at": {
"type": "string"
},
"id": {
"type": "string"
},
"policy_sha256": {
"type": "string"
},
"policy_text": {
"type": "string"
},
"role": {
"type": "string"
},
"version": {
"type": "number"
}
}
}
},
"restricted_to": {
"type": "array",
"items": {
"type": "string"
}
},
"secrets": {
"type": "array",
"items": {
"type": "object",
"properties": {
"expires_at": {
"type": "string"
},
"version": {
"type": "number"
}
}
}
}
}
}