{"resources":{"arista":{"id":"arista","fields":{"eos":{"name":"eos","type":"\u001barista.eos","title":"Arista EOS network operating system","desc":"Top-level entry point for an Arista EOS device. Exposes system identity (hostname, FQDN, software/hardware version), the data-plane and management surfaces (interfaces, IP interfaces, switchports, VLANs, routes, BGP, MLAG, ACLs), the management-plane services (SSH, telnet, SNMP, NTP), the AAA stack, control-plane policing, and the local user / role / password-policy hardening that auditors check against CIS / DISA STIG benchmarks.","provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true}},"is_extension":true},"arista.eos":{"id":"arista.eos","name":"arista.eos","fields":{"aaa":{"name":"aaa","type":"\u001barista.eos.aaa","title":"AAA (Authentication, Authorization, Accounting) configuration","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"acl":{"name":"acl","type":"\u001barista.eos.acl","title":"Arista EOS standard IP access control list","desc":"A single standard IP access control list, selected by `name` (for example `arista.eos.acl(name: \"management\")`). The ordered `entries` give each rule's permit or deny action, source address, prefix length, and per-rule logging, for connectivity audits and ingress-filtering reviews. The `type` field reports the ACL type (currently only \"standard\" is supported by the EOS SDK).","provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"acls":{"name":"acls","type":"\u0019\u001barista.eos.acl","title":"Standard IP access control lists","min_provider_version":"13.0.1","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"bgp":{"name":"bgp","type":"\u001barista.eos.bgp","title":"BGP configuration and peers","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"controlPlanePolicer":{"name":"controlPlanePolicer","type":"\u001barista.eos.controlPlanePolicer","title":"Control-Plane Policing (CoPP) configuration","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"eapi":{"name":"eapi","type":"\u001barista.eos.eapi","title":"eAPI (management API) service configuration","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"fqdn":{"name":"fqdn","type":"\u0007","title":"Fully qualified domain name","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"hardware":{"name":"hardware","type":"\u001barista.eos.hardware","title":"Hardware environment and inventory","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"hostname":{"name":"hostname","type":"\u0007","title":"System hostname","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"interface":{"name":"interface","type":"\u001barista.eos.interface","title":"Arista EOS network interface","desc":"Physical or logical interface on the switch, selected by `name` (for example `arista.eos.interfaces.where(name == \"Ethernet1\")`). Exposes administrative and line-protocol status, IP addressing, MTU and layer-2 MTU, hardware and burned-in MAC addresses, the forwarding model, and traffic and error counters. Use it to audit which interfaces are enabled, how they are addressed, and their operational state.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"interfaces":{"name":"interfaces","type":"\u0019\u001barista.eos.interface","title":"All network interfaces","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"ipInterface":{"name":"ipInterface","type":"\u001barista.eos.ipInterface","title":"Arista EOS IP interface","desc":"A Layer 3 IP interface configured on the switch, covering routed Ethernet ports, VLAN (SVI) interfaces, loopbacks, and management interfaces. The `name` field selects the interface as it appears in the running-config, for example `Ethernet1`, `Vlan10`, `Loopback0`, or `Management1`. Use it to audit which interfaces carry an IP address, the addresses assigned, and the configured MTU.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"ipInterfaces":{"name":"ipInterfaces","type":"\u0019\u001barista.eos.ipInterface","title":"IP-enabled interfaces with addresses","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"mlag":{"name":"mlag","type":"\u001barista.eos.mlag","title":"MLAG high-availability configuration","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"ntp":{"name":"ntp","type":"\u001barista.eos.ntp","title":"NTP configuration and authentication state","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"ntpAuthKey":{"name":"ntpAuthKey","type":"\u001barista.eos.ntpAuthKey","title":"Arista EOS NTP authentication key","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"passwordPolicy":{"name":"passwordPolicy","type":"\u001barista.eos.passwordPolicy","title":"Password policy and account-lockout configuration","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"portSecurity":{"name":"portSecurity","type":"\u0019\u001barista.eos.portSecurity","title":"Per-interface switchport port-security configurations","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"role":{"name":"role","type":"\u001barista.eos.role","title":"Arista EOS command-authorization role","desc":"Named role that restricts which CLI commands the users assigned to it may run, the building block of role-based access control on EOS. Each role carries an ordered list of permit and deny rules matched against command text (see `rules`), and `default` marks the role applied to users who have no role of their own. Auditing roles confirms that privileged commands are limited to the operators who should have them.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"roles":{"name":"roles","type":"\u0019\u001barista.eos.role","title":"User-defined and built-in roles","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"route":{"name":"route","type":"\u001barista.eos.route","title":"Arista EOS IP route","desc":"Single entry in the IP routing table, selected by its `destination` prefix (for example `arista.eos.routes.where(destination == \"10.0.0.0/8\")`): the VRF it belongs to, the source protocol (connected, static, BGP, OSPF, and so on), the administrative distance and metric, the hardware-programmed and kernel-programmed flags, the next-hop list, the route action, and an `active` flag indicating whether the route is currently in use for forwarding.","provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"routes":{"name":"routes","type":"\u0019\u001barista.eos.route","title":"IP routing table entries","min_provider_version":"11.1.0","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"runningConfig":{"name":"runningConfig","type":"\u001barista.eos.runningConfig","title":"Arista EOS running-config (full device configuration)","desc":"Full running-configuration text as emitted by `show running-config`. `content` is the entire config as one string; use it for pattern matching or line-oriented audits, or as a fall-through when no more specific resource exists. To inspect a single block of the configuration use `arista.eos.runningConfig.section(name: \"\u003cheader\u003e\")`.","provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"snmp":{"name":"snmp","type":"\u001barista.eos.snmpSetting","title":"SNMP configuration","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"snmpCommunities":{"name":"snmpCommunities","type":"\u0019\u001barista.eos.snmpCommunity","title":"SNMPv1/v2c community strings (plaintext shared secrets)","min_provider_version":"13.1.9","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"snmpCommunity":{"name":"snmpCommunity","type":"\u001barista.eos.snmpCommunity","title":"Arista EOS SNMPv1/v2c community string configuration","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"snmpSetting":{"name":"snmpSetting","type":"\u001barista.eos.snmpSetting","title":"Arista EOS SNMP daemon configuration","desc":"SNMP daemon state on the switch, covering whether SNMP logging is enabled and which trap notifications the device is configured to send. For SNMPv1 / v2c community strings (a common hardening finding) see `arista.eos.snmpCommunities`.","provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"spt":{"name":"spt","type":"\u001barista.eos.spt","provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"sshSettings":{"name":"sshSettings","type":"\u001barista.eos.sshSettings","title":"Management SSH service configuration","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"stp":{"name":"stp","type":"\u001barista.eos.stp","title":"Arista EOS Spanning Tree Protocol (STP) configuration","desc":"Spanning Tree Protocol state for the device, exposing each configured Multiple Spanning Tree (MST) instance through mstInstances. Use it to audit the STP topology: which bridge is elected root, which is the regional root, and how each interface participates in loop prevention.","provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"switchport":{"name":"switchport","type":"\u001barista.eos.switchport","title":"Arista EOS Layer-2 switchport configuration","desc":"Layer-2 switchport state for one interface, selected by `name` (for example `arista.eos.switchports.where(name == \"Ethernet1\")`). Reports the switchport `mode` (access or trunk), the access VLAN, the trunk native VLAN, the allowed-VLAN list, and any trunk groups, so you can flag misconfigured trunks or unexpected access-VLAN assignments.","provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"switchports":{"name":"switchports","type":"\u0019\u001barista.eos.switchport","title":"Layer 2 switchport configurations","min_provider_version":"11.1.0","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"systemConfig":{"name":"systemConfig","type":"\u001a\u0007\u0007","title":"Global system settings parsed from the running-config","desc":"Keyed map of top-level system settings. `hostname` is the configured device hostname (defaults to `localhost` when unset), and `iprouting` is `true` or `false` reflecting whether IP routing is enabled on the device.","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"telnetService":{"name":"telnetService","type":"\u001barista.eos.telnetService","title":"Management telnet service configuration (insecure plaintext protocol)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"user":{"name":"user","type":"\u001barista.eos.user","title":"Arista EOS local user account","desc":"Local user account defined by a `username` line in the running-config: login name, EOS privilege level, assigned role, password state, secret encoding, and any configured SSH key. Audits use these accounts to find privilege-15 users, accounts with no password, weak secret encodings, and stale credentials. The `locked` predicate reports accounts that can no longer authenticate.","provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"users":{"name":"users","type":"\u0019\u001barista.eos.user","title":"Local user accounts","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"version":{"name":"version","type":"\n","title":"EOS software release and hardware identity","desc":"Output of `show version` as a dict. Keys covering the running image are `version`, `internalVersion`, `internalBuildId`, and `architecture`. Hardware identity keys are `modelName`, `mfgName`, `serialNumber`, `hardwareRevision`, `systemMacAddress`, `configMacAddress`, and `hwMacAddress`. Memory keys `memTotal` and `memFree` are in kilobytes, and `uptime` and `bootupTimestamp` are in seconds.","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"vlan":{"name":"vlan","type":"\u001barista.eos.vlan","title":"Arista EOS VLAN","desc":"Layer 2 broadcast domain configured on the switch, selected by its numeric `id` (for example `arista.eos.vlan(id: \"10\")`). Covers the VLAN name, its administrative state (active or suspend), the trunk groups it belongs to, whether it was learned dynamically, and the interfaces assigned to it, so you can audit segmentation and confirm that only expected VLANs and ports are in use.","provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"vlans":{"name":"vlans","type":"\u0019\u001barista.eos.vlan","title":"Configured VLANs","min_provider_version":"11.1.0","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"vrrp":{"name":"vrrp","type":"\u001barista.eos.vrrp","title":"VRRP (Virtual Router Redundancy Protocol) configuration","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS network operating system","desc":"Top-level entry point for an Arista EOS device. Exposes system identity (hostname, FQDN, software/hardware version), the data-plane and management surfaces (interfaces, IP interfaces, switchports, VLANs, routes, BGP, MLAG, ACLs), the management-plane services (SSH, telnet, SNMP, NTP), the AAA stack, control-plane policing, and the local user / role / password-policy hardening that auditors check against CIS / DISA STIG benchmarks.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.aaa":{"id":"arista.eos.aaa","name":"arista.eos.aaa","fields":{"accountingCommands":{"name":"accountingCommands","type":"\u001a\u0007\u0019\u0007","is_mandatory":true,"title":"Accounting commands method lists (key = \"\u003clevel\u003e/\u003clist\u003e\")","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"accountingExec":{"name":"accountingExec","type":"\u001a\u0007\u0019\u0007","is_mandatory":true,"title":"Accounting exec method lists","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"authenticationEnable":{"name":"authenticationEnable","type":"\u001a\u0007\u0019\u0007","is_mandatory":true,"title":"Authentication enable method lists","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"authenticationLogin":{"name":"authenticationLogin","type":"\u001a\u0007\u0019\u0007","is_mandatory":true,"title":"Authentication login method lists (key = list name, e.g. \"default\")","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"authorizationCommands":{"name":"authorizationCommands","type":"\u001a\u0007\u0019\u0007","is_mandatory":true,"title":"Authorization commands method lists (key = \"\u003clevel\u003e/\u003clist\u003e\")","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"authorizationExec":{"name":"authorizationExec","type":"\u001a\u0007\u0019\u0007","is_mandatory":true,"title":"Authorization exec method lists","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"defaultLoginPermitsLocalOnly":{"name":"defaultLoginPermitsLocalOnly","type":"\u0004","is_mandatory":true,"title":"Whether the default authentication list uses only the local user database (no remote AAA configured before local)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"radiusServers":{"name":"radiusServers","type":"\u0019\u0007","is_mandatory":true,"title":"RADIUS server hosts","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"tacacsServers":{"name":"tacacsServers","type":"\u0019\u0007","is_mandatory":true,"title":"TACACS+ server hosts","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS AAA (Authentication, Authorization, Accounting) configuration","desc":"Authentication, authorization, and accounting (AAA) settings parsed from the running-config: the method lists that govern login and enable authentication, command and exec authorization, and command and exec accounting, plus the configured TACACS+ and RADIUS server hosts. The defaultLoginPermitsLocalOnly predicate flags when the default login list can authenticate against the switch's local account database alone with no remote AAA source, a common hardening finding where policy requires TACACS+ or RADIUS.","min_provider_version":"13.1.9","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.acl":{"id":"arista.eos.acl","name":"arista.eos.acl","fields":{"entries":{"name":"entries","type":"\u0019\u001barista.eos.acl.entry","title":"ACL entries (rules)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"entry":{"name":"entry","type":"\u001barista.eos.acl.entry","title":"Arista EOS ACL entry (rule)","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"ACL name","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"type":{"name":"type","type":"\u0007","is_mandatory":true,"title":"ACL type (currently only \"standard\" supported by SDK)","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS standard IP access control list","desc":"A single standard IP access control list, selected by `name` (for example `arista.eos.acl(name: \"management\")`). The ordered `entries` give each rule's permit or deny action, source address, prefix length, and per-rule logging, for connectivity audits and ingress-filtering reviews. The `type` field reports the ACL type (currently only \"standard\" is supported by the EOS SDK).","min_provider_version":"13.0.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.acl.entry":{"id":"arista.eos.acl.entry","name":"arista.eos.acl.entry","fields":{"aclName":{"name":"aclName","type":"\u0007","is_mandatory":true,"title":"ACL name this entry belongs to","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"action":{"name":"action","type":"\u0007","is_mandatory":true,"title":"Action: \"permit\" or \"deny\"","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"log":{"name":"log","type":"\u0004","is_mandatory":true,"title":"Whether logging is enabled for this rule","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"sequenceNumber":{"name":"sequenceNumber","type":"\u0005","is_mandatory":true,"title":"Sequence number (determines evaluation order)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"srcAddress":{"name":"srcAddress","type":"\u0007","is_mandatory":true,"title":"Source IP address","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"srcPrefixLen":{"name":"srcPrefixLen","type":"\u0005","is_mandatory":true,"title":"Source prefix length (CIDR notation, e.g., 24 for /24)","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS ACL entry (rule)","private":true,"min_provider_version":"13.0.1","defaults":"sequenceNumber action","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.bgp":{"id":"arista.eos.bgp","name":"arista.eos.bgp","fields":{"asNumber":{"name":"asNumber","type":"\u0007","title":"BGP Autonomous System Number","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"enabled":{"name":"enabled","type":"\u0004","title":"Whether BGP is enabled on this device","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"peer":{"name":"peer","type":"\u001barista.eos.bgp.peer","title":"Arista EOS BGP peer","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"routerId":{"name":"routerId","type":"\u0007","title":"BGP Router ID","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"vrf":{"name":"vrf","type":"\u001barista.eos.bgp.vrf","title":"Arista EOS BGP VRF","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"vrfs":{"name":"vrfs","type":"\u0019\u001barista.eos.bgp.vrf","title":"BGP VRFs","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS BGP configuration","desc":"Border Gateway Protocol configuration for the device, covering whether BGP is enabled, the global autonomous system number, the router ID, and the per-VRF configurations in vrfs. Each VRF lists its peers with their session state, prefix counts, and inbound and outbound route maps, so you can audit routing adjacencies and the filters applied to them.","min_provider_version":"13.0.1","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.bgp.peer":{"id":"arista.eos.bgp.peer","name":"arista.eos.bgp.peer","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Peer description","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"inboundRouteMap":{"name":"inboundRouteMap","type":"\u0007","is_mandatory":true,"title":"Inbound route map","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"outboundRouteMap":{"name":"outboundRouteMap","type":"\u0007","is_mandatory":true,"title":"Outbound route map","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"peerAddress":{"name":"peerAddress","type":"\u0007","is_mandatory":true,"title":"Peer IP address","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"prefixesAccepted":{"name":"prefixesAccepted","type":"\u0005","is_mandatory":true,"title":"Number of prefixes accepted from peer (after inbound filtering)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"prefixesReceived":{"name":"prefixesReceived","type":"\u0005","is_mandatory":true,"title":"Number of prefixes received from peer","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"remoteAs":{"name":"remoteAs","type":"\u0007","is_mandatory":true,"title":"Remote Autonomous System Number","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Peer state (Established, Idle, Active, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"uptime":{"name":"uptime","type":"\u0005","is_mandatory":true,"title":"Uptime in seconds","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"vrfName":{"name":"vrfName","type":"\u0007","is_mandatory":true,"title":"VRF name","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS BGP peer","private":true,"min_provider_version":"13.0.1","defaults":"peerAddress","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.bgp.vrf":{"id":"arista.eos.bgp.vrf","name":"arista.eos.bgp.vrf","fields":{"asNumber":{"name":"asNumber","type":"\u0007","is_mandatory":true,"title":"BGP Autonomous System Number for this VRF","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"VRF name","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"peers":{"name":"peers","type":"\u0019\u001barista.eos.bgp.peer","is_mandatory":true,"title":"BGP peers in this VRF","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"routerId":{"name":"routerId","type":"\u0007","is_mandatory":true,"title":"BGP Router ID for this VRF","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS BGP VRF","private":true,"min_provider_version":"13.0.1","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.controlPlanePolicer":{"id":"arista.eos.controlPlanePolicer","name":"arista.eos.controlPlanePolicer","fields":{"configured":{"name":"configured","type":"\u0004","is_mandatory":true,"title":"Whether a `control-plane` block exists in the running-config","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"ip6AccessGroup":{"name":"ip6AccessGroup","type":"\u0007","is_mandatory":true,"title":"IPv6 access-group applied to control-plane (empty if none)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"ip6AccessGroupAcl":{"name":"ip6AccessGroupAcl","type":"\u001barista.eos.acl","title":"IPv6 access-group ACL bound to the control plane, resolved from ip6AccessGroup (null when none is bound)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"ipAccessGroup":{"name":"ipAccessGroup","type":"\u0007","is_mandatory":true,"title":"IPv4 access-group applied to control-plane (empty if none)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"ipAccessGroupAcl":{"name":"ipAccessGroupAcl","type":"\u001barista.eos.acl","title":"IPv4 access-group ACL bound to the control plane, resolved from ipAccessGroup (null when none is bound)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"policyApplied":{"name":"policyApplied","type":"\u0004","is_mandatory":true,"title":"Whether a `service-policy input \u003cname\u003e` is applied","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"policyName":{"name":"policyName","type":"\u0007","is_mandatory":true,"title":"The service-policy name (empty if none applied)","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS Control-Plane Policing (CoPP) configuration","desc":"Control-Plane Policing (CoPP) protects the device CPU and management plane against denial-of-service by rate-limiting and filtering the traffic destined for the control plane. The fields report whether a `control-plane` block is present, whether a service policy is applied, and which IPv4 and IPv6 access-groups are bound to the control plane. The ipAccessGroupAcl and ip6AccessGroupAcl fields resolve to the underlying arista.eos.acl resources so audits can inspect the rules actually enforced.","min_provider_version":"13.1.9","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.eapi":{"id":"arista.eos.eapi","name":"arista.eos.eapi","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether eAPI is enabled on the device","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"httpServerConfigured":{"name":"httpServerConfigured","type":"\u0004","is_mandatory":true,"title":"Whether the plaintext HTTP eAPI server is configured","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"httpServerPort":{"name":"httpServerPort","type":"\u0005","is_mandatory":true,"title":"TCP port the HTTP eAPI server listens on","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"httpServerRunning":{"name":"httpServerRunning","type":"\u0004","is_mandatory":true,"title":"Whether the plaintext HTTP eAPI server is currently running","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"httpsServerConfigured":{"name":"httpsServerConfigured","type":"\u0004","is_mandatory":true,"title":"Whether the HTTPS eAPI server is configured","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"httpsServerPort":{"name":"httpsServerPort","type":"\u0005","is_mandatory":true,"title":"TCP port the HTTPS eAPI server listens on","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"httpsServerRunning":{"name":"httpsServerRunning","type":"\u0004","is_mandatory":true,"title":"Whether the HTTPS eAPI server is currently running","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"localHttpServerConfigured":{"name":"localHttpServerConfigured","type":"\u0004","is_mandatory":true,"title":"Whether the local (loopback-only) HTTP eAPI server is configured","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"localHttpServerPort":{"name":"localHttpServerPort","type":"\u0005","is_mandatory":true,"title":"TCP port the local HTTP eAPI server listens on","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"localHttpServerRunning":{"name":"localHttpServerRunning","type":"\u0004","is_mandatory":true,"title":"Whether the local HTTP eAPI server is currently running","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"unixSocketServerConfigured":{"name":"unixSocketServerConfigured","type":"\u0004","is_mandatory":true,"title":"Whether the Unix-domain-socket eAPI server is configured","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"unixSocketServerRunning":{"name":"unixSocketServerRunning","type":"\u0004","is_mandatory":true,"title":"Whether the Unix-domain-socket eAPI server is currently running","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS eAPI (management API) configuration","desc":"Management-API (eAPI) service surface, the transport through which mql itself connects to the device. `enabled` indicates whether eAPI is configured at all; the per-protocol fields (`httpServerConfigured` / `httpServerRunning` / `httpServerPort`, the matching `httpsServer*` and `localHttpServer*` triplets, and the `unixSocketServer*` pair) report which transports are actually listening. Common compliance audits check that `httpServerConfigured` is false (no plaintext HTTP) while `httpsServerConfigured` and `httpsServerRunning` are both true.","min_provider_version":"13.2.7","defaults":"enabled httpsServerRunning httpServerRunning","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.hardware":{"id":"arista.eos.hardware","name":"arista.eos.hardware","fields":{"fan":{"name":"fan","type":"\u001barista.eos.hardware.fan","title":"Arista EOS cooling fan","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"fans":{"name":"fans","type":"\u0019\u001barista.eos.hardware.fan","title":"Cooling fans","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"inventory":{"name":"inventory","type":"\u0019\u001barista.eos.hardware.inventoryItem","title":"Hardware inventory (chassis, modules, transceivers)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"inventoryItem":{"name":"inventoryItem","type":"\u001barista.eos.hardware.inventoryItem","title":"Arista EOS hardware inventory item","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"powerSupplies":{"name":"powerSupplies","type":"\u0019\u001barista.eos.hardware.powerSupply","title":"Power supply units","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"powerSupply":{"name":"powerSupply","type":"\u001barista.eos.hardware.powerSupply","title":"Arista EOS power supply unit","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true}},"title":"Arista EOS hardware environment and inventory","desc":"Chassis hardware and environmental state for an EOS device. The `powerSupplies` field reports each PSU's state, capacity, output, and embedded temperature sensors and fans; `fans` reports each cooling fan's status and configured-versus-current speed; and `inventory` lists every chassis, module, and transceiver with its serial number and hardware revision. Useful for auditing power and cooling redundancy (missing or failed PSUs and fans) and tracking installed components by serial number.","min_provider_version":"13.0.1","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.hardware.fan":{"id":"arista.eos.hardware.fan","name":"arista.eos.hardware.fan","fields":{"configuredSpeed":{"name":"configuredSpeed","type":"\u0005","is_mandatory":true,"title":"Configured speed percentage","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Tray-qualified fan identifier (e.g., \"FanTray1/1/1\")","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"speed":{"name":"speed","type":"\u0005","is_mandatory":true,"title":"Current speed percentage","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Operational status (ok, down, notInserted, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"trayLabel":{"name":"trayLabel","type":"\u0007","is_mandatory":true,"title":"Fan tray label (e.g., \"FanTray1\", \"FanTray2\")","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS cooling fan","private":true,"min_provider_version":"13.0.1","defaults":"name status speed","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.hardware.inventoryItem":{"id":"arista.eos.hardware.inventoryItem","name":"arista.eos.hardware.inventoryItem","fields":{"category":{"name":"category","type":"\u0007","is_mandatory":true,"title":"Inventory category (system, powerSupply, fanTray, transceiver, card)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Component description","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"hardwareRevision":{"name":"hardwareRevision","type":"\u0007","is_mandatory":true,"title":"Hardware revision","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"manufacturerDate":{"name":"manufacturerDate","type":"\u0007","is_mandatory":true,"title":"Manufacturing date","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Component name (e.g., \"Chassis\", \"Supervisor\", \"PowerSupply1\")","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"serialNumber":{"name":"serialNumber","type":"\u0007","is_mandatory":true,"title":"Serial number","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS hardware inventory item","private":true,"min_provider_version":"13.0.1","defaults":"name description serialNumber","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.hardware.powerSupply":{"id":"arista.eos.hardware.powerSupply","name":"arista.eos.hardware.powerSupply","fields":{"capacity":{"name":"capacity","type":"\u0005","is_mandatory":true,"title":"Maximum output capacity in watts","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"fans":{"name":"fans","type":"\u0019\n","is_mandatory":true,"title":"Cooling fans on this PSU","desc":"One entry per fan, each with `name` (fan identifier), `status` (fan operational status), and `speed` (current speed percentage).","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"inputCurrent":{"name":"inputCurrent","type":"\u0006","is_mandatory":true,"title":"Current input current in amps","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"managed":{"name":"managed","type":"\u0004","is_mandatory":true,"title":"Whether this PSU is managed by the system","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"modelName":{"name":"modelName","type":"\u0007","is_mandatory":true,"title":"Power supply model name","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Power supply slot name (e.g., \"1\", \"2\")","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"outputCurrent":{"name":"outputCurrent","type":"\u0006","is_mandatory":true,"title":"Current output current in amps","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"outputPower":{"name":"outputPower","type":"\u0006","is_mandatory":true,"title":"Current output power in watts","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Operational state (ok, powerLoss, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"tempSensors":{"name":"tempSensors","type":"\u0019\n","is_mandatory":true,"title":"Temperature sensors on this PSU","desc":"One entry per sensor, each with `name` (sensor identifier), `status` (sensor operational status), and `temperature` (current reading in degrees Celsius).","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"uptime":{"name":"uptime","type":"\u0006","is_mandatory":true,"title":"PSU uptime in seconds","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS power supply unit","private":true,"min_provider_version":"13.0.1","defaults":"name state modelName","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.interface":{"id":"arista.eos.interface","name":"arista.eos.interface","fields":{"autoNegotiate":{"name":"autoNegotiate","type":"\u0004","title":"Auto-negotiation enabled","min_provider_version":"13.0.1","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"bandwidth":{"name":"bandwidth","type":"\u0005","is_mandatory":true,"title":"Interface bandwidth","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"burnedInAddress":{"name":"burnedInAddress","type":"\u0007","is_mandatory":true,"title":"Burned-in (factory-assigned) MAC address of the interface","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Interface description","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"duplex":{"name":"duplex","type":"\u0007","title":"Duplex setting (full, half, auto)","min_provider_version":"13.0.1","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"enabled":{"name":"enabled","type":"\u0004","title":"Whether the interface is enabled administratively","desc":"True unless `interfaceStatus` is `disabled`, meaning the interface has not been shut down in the configuration.","min_provider_version":"13.0.1","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"forwardingModel":{"name":"forwardingModel","type":"\u0007","is_mandatory":true,"title":"Forwarding mode","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"hardware":{"name":"hardware","type":"\u0007","is_mandatory":true,"title":"Hardware Name","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"interfaceAddress":{"name":"interfaceAddress","type":"\u0019\n","is_mandatory":true,"title":"Interface addressing","desc":"One entry per configured address. Each is a dict with keys `PrimaryIP` and `VirtualIP` (each `{Address, MaskLen}`), `SecondaryIPOrderedList` (a list of the same shape), `SecondaryIPs`, and `BroadcastAddress`.","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"interfaceCounters":{"name":"interfaceCounters","type":"\n","is_mandatory":true,"title":"Traffic and error counters","desc":"Dict of interface counters with keys `InOctets`, `OutOctets`, `InUcastPkts`, `OutUcastPkts`, `InMulticastPkts`, `OutMulticastPkts`, `InBroadcastPkts`, `OutBroadcastPkts`, `InDiscards`, `OutDiscards`, `TotalInErrors`, `TotalOutErrors`, `LinkStatusChanges`, `LastClear`, `CounterRefreshTime`, and the nested `InputErrorsDetail` and `OutErrorsDetail` error breakdowns.","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"interfaceMembership":{"name":"interfaceMembership","type":"\u0007","is_mandatory":true,"title":"Interface membership","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"interfaceStatistics":{"name":"interfaceStatistics","type":"\n","is_mandatory":true,"title":"Interface throughput rates","desc":"Dict of rate statistics with keys `InBitsRate`, `OutBitsRate`, `InPktsRate`, `OutPktsRate`, and `UpdateInterval` (the sampling window over which the rates are computed).","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"interfaceStatus":{"name":"interfaceStatus","type":"\u0007","is_mandatory":true,"title":"Interface status","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"l2Mtu":{"name":"l2Mtu","type":"\u0005","is_mandatory":true,"title":"Layer 2 MTU","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"lastStatusChangeTimestamp":{"name":"lastStatusChangeTimestamp","type":"\u0005","is_mandatory":true,"title":"Last interface change timestamp","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"lineProtocolStatus":{"name":"lineProtocolStatus","type":"\u0007","is_mandatory":true,"title":"Interface protocol status","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"mtu":{"name":"mtu","type":"\u0005","is_mandatory":true,"title":"MTU","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Interface name (for example `Ethernet1` or `Management1`)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"physicalAddress":{"name":"physicalAddress","type":"\u0007","is_mandatory":true,"title":"MAC address of the interface","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"status":{"name":"status","type":"\n","title":"Link status details","desc":"Dict from `show interfaces status` with keys `bandwidth`, `interfaceType`, `description`, `autoNegotiateActive`, `duplex`, `linkStatus`, `lineProtocolStatus`, and `vlanInformation` (`{interfaceMode, vlanId, interfaceForwardingModel}`). The `duplex` and `autoNegotiate` fields are derived from this dict.","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS network interface","desc":"Physical or logical interface on the switch, selected by `name` (for example `arista.eos.interfaces.where(name == \"Ethernet1\")`). Exposes administrative and line-protocol status, IP addressing, MTU and layer-2 MTU, hardware and burned-in MAC addresses, the forwarding model, and traffic and error counters. Use it to audit which interfaces are enabled, how they are addressed, and their operational state.","private":true,"min_provider_version":"9.0.0","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.ipInterface":{"id":"arista.eos.ipInterface","name":"arista.eos.ipInterface","fields":{"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"IP Address","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"mtu":{"name":"mtu","type":"\u0007","is_mandatory":true,"title":"MTU","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Interface Name","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS IP interface","desc":"A Layer 3 IP interface configured on the switch, covering routed Ethernet ports, VLAN (SVI) interfaces, loopbacks, and management interfaces. The `name` field selects the interface as it appears in the running-config, for example `Ethernet1`, `Vlan10`, `Loopback0`, or `Management1`. Use it to audit which interfaces carry an IP address, the addresses assigned, and the configured MTU.","private":true,"min_provider_version":"9.0.0","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.mlag":{"id":"arista.eos.mlag","name":"arista.eos.mlag","fields":{"domainId":{"name":"domainId","type":"\u0007","title":"MLAG domain ID","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"interface":{"name":"interface","type":"\u001barista.eos.mlag.interface","title":"Arista EOS MLAG interface (Port-Channel with MLAG ID)","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"interfaces":{"name":"interfaces","type":"\u0019\u001barista.eos.mlag.interface","title":"Port-Channel interfaces configured with MLAG IDs","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"localInterface":{"name":"localInterface","type":"\u0007","title":"Local interface used for MLAG communication (typically a VLAN interface)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"peerAddress":{"name":"peerAddress","type":"\u0007","title":"IP address of the MLAG peer switch","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"peerLink":{"name":"peerLink","type":"\u0007","title":"Interface used as the peer-link (typically a Port-Channel)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"shutdown":{"name":"shutdown","type":"\u0004","title":"Whether MLAG is administratively shutdown","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS MLAG (Multi-Chassis Link Aggregation) configuration","desc":"Multi-Chassis Link Aggregation domain, which lets two switches present themselves as a single logical device so downstream hosts can dual-home a Port-Channel across both chassis for redundancy. Query this to confirm the peer relationship is healthy: the domain pairing (domainId, peerAddress), the control path (localInterface and peerLink), whether the domain is administratively disabled (shutdown), and which Port-Channels carry an MLAG ID. A shutdown or misconfigured peer link breaks the redundancy the design depends on.","min_provider_version":"13.0.1","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.mlag.interface":{"id":"arista.eos.mlag.interface","name":"arista.eos.mlag.interface","fields":{"mlagId":{"name":"mlagId","type":"\u0007","is_mandatory":true,"title":"MLAG ID assigned to this Port-Channel","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Port-Channel interface name (e.g., \"Port-Channel1\")","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS MLAG interface (Port-Channel with MLAG ID)","private":true,"min_provider_version":"13.0.1","defaults":"name mlagId","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.ntp":{"id":"arista.eos.ntp","name":"arista.eos.ntp","fields":{"authKeys":{"name":"authKeys","type":"\u0019\u001barista.eos.ntpAuthKey","title":"NTP authentication keys and trusted-key state","min_provider_version":"13.1.9","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"authenticationEnabled":{"name":"authenticationEnabled","type":"\u0004","title":"Whether NTP authentication is globally enabled (`ntp authenticate`)","min_provider_version":"13.1.9","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"status":{"name":"status","type":"\u0007","is_mandatory":true,"title":"Status of NTP on the switch","min_provider_version":"13.1.9","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS NTP configuration and authentication state","desc":"NTP service status, whether `ntp authenticate` is globally enabled, and the configured NTP authentication keys, each carrying its key ID, hash algorithm, and trusted flag. This is what benchmarks check when they require cryptographic protection of time synchronization, so an unauthenticated or untrusted key set is a finding.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.ntpAuthKey":{"id":"arista.eos.ntpAuthKey","name":"arista.eos.ntpAuthKey","fields":{"hashAlgo":{"name":"hashAlgo","type":"\u0007","is_mandatory":true,"title":"Hash algorithm (md5, sha1, sha256, sha384, sha512). md5 is weak.","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"id":{"name":"id","type":"\u0005","is_mandatory":true,"title":"Key ID","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"trusted":{"name":"trusted","type":"\u0004","is_mandatory":true,"title":"Whether this key ID appears in `ntp trusted-key` and is therefore actually used for authenticating servers","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS NTP authentication key","private":true,"min_provider_version":"13.1.9","defaults":"id hashAlgo trusted","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.passwordPolicy":{"id":"arista.eos.passwordPolicy","name":"arista.eos.passwordPolicy","fields":{"allowNopasswordRemoteLogin":{"name":"allowNopasswordRemoteLogin","type":"\u0004","is_mandatory":true,"title":"Whether remote login is permitted for users with no password configured","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"lockoutDurationSeconds":{"name":"lockoutDurationSeconds","type":"\u0005","is_mandatory":true,"title":"How long an account stays locked, in seconds","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"lockoutFailure":{"name":"lockoutFailure","type":"\u0005","is_mandatory":true,"title":"Failures allowed before account lockout (0 = lockout not configured)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"lockoutWindowSeconds":{"name":"lockoutWindowSeconds","type":"\u0005","is_mandatory":true,"title":"Rolling window during which failures count, in seconds","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"logOnFailure":{"name":"logOnFailure","type":"\u0004","is_mandatory":true,"title":"Whether failed authentication events are logged","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"logOnSuccess":{"name":"logOnSuccess","type":"\u0004","is_mandatory":true,"title":"Whether successful authentication events are logged","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"maximumRepetitive":{"name":"maximumRepetitive","type":"\u0005","is_mandatory":true,"title":"Maximum allowed repetitive characters","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"maximumSequential":{"name":"maximumSequential","type":"\u0005","is_mandatory":true,"title":"Maximum allowed sequential characters","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"minimumDigits":{"name":"minimumDigits","type":"\u0005","is_mandatory":true,"title":"Minimum digit characters required","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"minimumLength":{"name":"minimumLength","type":"\u0005","is_mandatory":true,"title":"Minimum password length (0 = unset)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"minimumLowercase":{"name":"minimumLowercase","type":"\u0005","is_mandatory":true,"title":"Minimum lowercase characters required","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"minimumSpecial":{"name":"minimumSpecial","type":"\u0005","is_mandatory":true,"title":"Minimum special characters required","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"minimumUppercase":{"name":"minimumUppercase","type":"\u0005","is_mandatory":true,"title":"Minimum uppercase characters required","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"policyName":{"name":"policyName","type":"\u0007","is_mandatory":true,"title":"Configured `password policy \u003cname\u003e` (empty = no policy block)","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS password policy and account-lockout configuration","desc":"Account-lockout thresholds and password-complexity rules enforced for local authentication on the device. Covers the lockout trigger (failure count, observation window, lock duration), whether users with no password may log in remotely, login-event logging, and the minimum-character and maximum-repetition rules from the `password policy` block. Audit these to confirm brute-force protection is enabled and complexity meets policy.","min_provider_version":"13.1.9","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.portSecurity":{"id":"arista.eos.portSecurity","name":"arista.eos.portSecurity","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether port-security is enabled on the interface","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"interface":{"name":"interface","type":"\u0007","is_mandatory":true,"title":"Parent interface name (e.g. \"Ethernet1\")","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"maximumMacAddresses":{"name":"maximumMacAddresses","type":"\u0005","is_mandatory":true,"title":"Maximum learned MAC addresses (0 = EOS default of 1)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"stickyLearning":{"name":"stickyLearning","type":"\u0004","is_mandatory":true,"title":"Whether sticky MAC learning is configured","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"violationAction":{"name":"violationAction","type":"\u0007","is_mandatory":true,"title":"Violation action: \"protect\", \"restrict\", or \"shutdown\" (empty = unset)","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS per-interface switchport port-security configuration","desc":"Port-security posture for switched interfaces, covering how many MAC addresses each port may learn, what the switch does when that limit is exceeded, and whether learned addresses are pinned into the running config. Auditing this confirms that access-facing ports restrict which end stations can connect, limiting MAC-flooding and rogue-device attacks. The `violationAction` field reports the enforcement mode (\"protect\", \"restrict\", or \"shutdown\"). There is one row per interface, identified by the interface field.","private":true,"min_provider_version":"13.1.9","defaults":"interface enabled violationAction","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.role":{"id":"arista.eos.role","name":"arista.eos.role","fields":{"default":{"name":"default","type":"\u0004","is_mandatory":true,"title":"Whether this is the default role","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of role","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"rules":{"name":"rules","type":"\u0019\n","is_mandatory":true,"title":"Command-authorization rules that restrict access to specified commands","desc":"Ordered list of rules evaluated for the role. Each entry has `cmdPermission` (whether commands matching the rule are permitted or denied), `cmdRegex` (the regular expression matched against command text), `sequenceNumber` (the rule's position in evaluation order), and `mode` (the CLI mode the rule applies to).","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS command-authorization role","desc":"Named role that restricts which CLI commands the users assigned to it may run, the building block of role-based access control on EOS. Each role carries an ordered list of permit and deny rules matched against command text (see `rules`), and `default` marks the role applied to users who have no role of their own. Auditing roles confirms that privileged commands are limited to the operators who should have them.","private":true,"min_provider_version":"9.0.0","defaults":"name default","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.route":{"id":"arista.eos.route","name":"arista.eos.route","fields":{"active":{"name":"active","type":"\u0004","title":"Whether the route is active","min_provider_version":"13.0.1","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"destination":{"name":"destination","type":"\u0007","is_mandatory":true,"title":"Route destination prefix (e.g., \"10.0.0.0/8\")","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"hardwareProgrammed":{"name":"hardwareProgrammed","type":"\u0004","is_mandatory":true,"title":"Whether the route is programmed in hardware","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"kernelProgrammed":{"name":"kernelProgrammed","type":"\u0004","is_mandatory":true,"title":"Whether the route is programmed in kernel","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"metric":{"name":"metric","type":"\u0005","is_mandatory":true,"title":"Route metric","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"nextHops":{"name":"nextHops","type":"\u0019\n","is_mandatory":true,"title":"Next hops for the route","desc":"One entry per available next hop. Each carries `interface` (the outgoing interface name, e.g. \"Ethernet1\") and `nexthopAddr` (the next-hop IP address). Either value can be an empty string when it does not apply to the route (for example a directly connected route has no next-hop address).","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"preference":{"name":"preference","type":"\u0005","is_mandatory":true,"title":"Administrative distance","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"routeAction":{"name":"routeAction","type":"\u0007","is_mandatory":true,"title":"Route action","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"routeType":{"name":"routeType","type":"\u0007","is_mandatory":true,"title":"Route type (connected, static, bgp, ospf, etc.)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"vrf":{"name":"vrf","type":"\u0007","is_mandatory":true,"title":"VRF name","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS IP route","desc":"Single entry in the IP routing table, selected by its `destination` prefix (for example `arista.eos.routes.where(destination == \"10.0.0.0/8\")`): the VRF it belongs to, the source protocol (connected, static, BGP, OSPF, and so on), the administrative distance and metric, the hardware-programmed and kernel-programmed flags, the next-hop list, the route action, and an `active` flag indicating whether the route is currently in use for forwarding.","min_provider_version":"11.1.0","defaults":"destination","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.runningConfig":{"id":"arista.eos.runningConfig","name":"arista.eos.runningConfig","fields":{"content":{"name":"content","type":"\u0007","title":"EOS running-config","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"section":{"name":"section","type":"\u001barista.eos.runningConfig.section","title":"Section of the Arista EOS running-config","desc":"A single named section of the running-config, for when you need the raw text of one configuration block rather than the whole device. The `name` field selects the section as it appears in the running-config. For example `arista.eos.runningConfig.section(name: \"interface Ethernet1\")` or `... section(name: \"router bgp 65001\")`. The `content` field returns the raw text of that block.","provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true}},"title":"Arista EOS running-config (full device configuration)","desc":"Full running-configuration text as emitted by `show running-config`. `content` is the entire config as one string; use it for pattern matching or line-oriented audits, or as a fall-through when no more specific resource exists. To inspect a single block of the configuration use `arista.eos.runningConfig.section(name: \"\u003cheader\u003e\")`.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.runningConfig.section":{"id":"arista.eos.runningConfig.section","name":"arista.eos.runningConfig.section","fields":{"content":{"name":"content","type":"\u0007","title":"Section from EOS running-config","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Section name","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Section of the Arista EOS running-config","desc":"A single named section of the running-config, for when you need the raw text of one configuration block rather than the whole device. The `name` field selects the section as it appears in the running-config. For example `arista.eos.runningConfig.section(name: \"interface Ethernet1\")` or `... section(name: \"router bgp 65001\")`. The `content` field returns the raw text of that block.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.snmpCommunity":{"id":"arista.eos.snmpCommunity","name":"arista.eos.snmpCommunity","fields":{"access":{"name":"access","type":"\u0007","is_mandatory":true,"title":"Access mode: \"ro\" (read-only) or \"rw\" (read-write)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"acl":{"name":"acl","type":"\u0007","is_mandatory":true,"title":"Access-list name applied to this community","desc":"Empty = no ACL. When `ipv6` is true this is an IPv6 access-list; otherwise IPv4.","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"aclResource":{"name":"aclResource","type":"\u001barista.eos.acl","title":"Access-list that restricts this community, resolved to the `arista.eos.acl` named by `acl`","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"ipv6":{"name":"ipv6","type":"\u0004","is_mandatory":true,"title":"Whether the community line declares an IPv6 ACL","desc":"Set via the `ipv6` keyword in `snmp-server community \u003cname\u003e ro ipv6 \u003cacl6\u003e`.","min_provider_version":"13.1.10","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Community string (acts as a plaintext shared secret)","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS SNMPv1/v2c community string configuration","private":true,"min_provider_version":"13.1.9","defaults":"name access acl","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.snmpSetting":{"id":"arista.eos.snmpSetting","name":"arista.eos.snmpSetting","fields":{"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether SNMP logging is enabled","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"notifications":{"name":"notifications","type":"\u0019\n","title":"SNMP trap notification types and their enabled state","desc":"One entry per trap notification type. Each entry carries `name` (the notification name), `reason` (why it is or is not active), `enabled` (whether the device is configured to send this trap), and `component` (the subsystem the notification belongs to).","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS SNMP daemon configuration","desc":"SNMP daemon state on the switch, covering whether SNMP logging is enabled and which trap notifications the device is configured to send. For SNMPv1 / v2c community strings (a common hardening finding) see `arista.eos.snmpCommunities`.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.spt":{"id":"arista.eos.spt","fields":{"mstInterface":{"name":"mstInterface","type":"\u001barista.eos.spt.mstInterface","title":"Arista EOS MST per-interface state","desc":"Spanning-tree state for one interface within one Multiple Spanning Tree (MST) instance, selected by interface `name` and `mstInstanceId`. Useful for confirming that a port carries the role and state expected by the spanning-tree design and for surfacing loop-prevention problems: the `inconsistentFeatures` map flags loop-guard, root-guard, MST/PVST-border, and bridge-assurance conditions that hold a port out of forwarding.","provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true}},"is_extension":true},"arista.eos.spt.mstInterface":{"id":"arista.eos.spt.mstInterface","name":"arista.eos.spt.mstInterface","fields":{"boundaryType":{"name":"boundaryType","type":"\u0007","is_mandatory":true,"title":"Interface boundary type","desc":"Deprecated, please use state. This field never carried a distinct boundary type: it returns the same value as state. It will be removed in a future major release once a real boundary source is wired up.","provider":"go.mondoo.com/cnquery/v9/providers/arista","maturity":"deprecated"},"cost":{"name":"cost","type":"\u0005","is_mandatory":true,"title":"Cost value for the interface","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"counters":{"name":"counters","type":"\n","title":"BPDU transaction counters for the interface","desc":"Keys `bpduSent`, `bpduReceived`, `bpduTaggedError`, `bpduOtherError`, and `bpduRateLimitCount`.","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"detail":{"name":"detail","type":"\n","is_mandatory":true,"title":"Designated root, bridge, and port for the interface","desc":"Keys `designatedRootAddress` and `designatedRootPriority` identify the designated root; `designatedBridgeAddress`, `designatedBridgePriority`, `designatedPortNumber`, and `designatedPortPriority` identify the designated bridge and port; `regionalRootAddress` and `regionalRootPriority` identify the MST regional root.","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"features":{"name":"features","type":"\n","title":"Spanning-tree feature configuration for the interface","desc":"Keys `linkType`, `bpduGuard`, and `BpduFilter`, each a map holding a `value` and a `default` boolean indicating whether the value is the interface default.","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"provider":"go.mondoo.com/cnquery/v9/providers/arista"},"inconsistentFeatures":{"name":"inconsistentFeatures","type":"\n","is_mandatory":true,"title":"Loop-prevention inconsistencies detected on the interface","desc":"Boolean flags for each guard that has put the port into an inconsistent (blocked) state: `loopGuard`, `rootGuard`, `mstPvstBorder`, and `bridgeAssurance`.","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"isEdgePort":{"name":"isEdgePort","type":"\u0004","is_mandatory":true,"title":"Whether the interface is an edge port","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"linkType":{"name":"linkType","type":"\u0007","is_mandatory":true,"title":"Link type","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"mstInstanceId":{"name":"mstInstanceId","type":"\u0007","is_mandatory":true,"title":"MST instance number","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of STP instance","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"portNumber":{"name":"portNumber","type":"\u0005","is_mandatory":true,"title":"Port Number","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"priority":{"name":"priority","type":"\u0005","is_mandatory":true,"title":"Interface priority","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"role":{"name":"role","type":"\u0007","is_mandatory":true,"title":"Port role","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Interface state","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS MST per-interface state","desc":"Spanning-tree state for one interface within one Multiple Spanning Tree (MST) instance, selected by interface `name` and `mstInstanceId`. Useful for confirming that a port carries the role and state expected by the spanning-tree design and for surfacing loop-prevention problems: the `inconsistentFeatures` map flags loop-guard, root-guard, MST/PVST-border, and bridge-assurance conditions that hold a port out of forwarding.","min_provider_version":"9.0.0","defaults":"name","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.sshSettings":{"id":"arista.eos.sshSettings","name":"arista.eos.sshSettings","fields":{"authenticationMode":{"name":"authenticationMode","type":"\u0007","is_mandatory":true,"title":"Authentication mode (e.g. \"keyboard-interactive\", \"password\")","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"ciphers":{"name":"ciphers","type":"\u0019\u0007","is_mandatory":true,"title":"Allowed cipher algorithms","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the SSH service is enabled (no shutdown)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"fipsRestrictions":{"name":"fipsRestrictions","type":"\u0004","is_mandatory":true,"title":"Whether `fips restrictions` is enabled on the SSH service","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"hostkeyAlgorithms":{"name":"hostkeyAlgorithms","type":"\u0019\u0007","is_mandatory":true,"title":"Configured host key algorithms (raw lines after `hostkey`)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"idleTimeout":{"name":"idleTimeout","type":"\u0005","is_mandatory":true,"title":"Idle timeout in minutes (0 = no timeout)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"keyExchange":{"name":"keyExchange","type":"\u0019\u0007","is_mandatory":true,"title":"Allowed key-exchange algorithms","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"macs":{"name":"macs","type":"\u0019\u0007","is_mandatory":true,"title":"Allowed MAC algorithms","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"protocolVersion":{"name":"protocolVersion","type":"\u0007","is_mandatory":true,"title":"Configured SSH protocol version (typically \"2\")","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"serverPort":{"name":"serverPort","type":"\u0005","is_mandatory":true,"title":"TCP server port (default 22)","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS management SSH service configuration","desc":"Configuration of the on-device SSH management service, the primary remote-administration channel into the switch. Covers whether the service is enabled, the negotiated protocol version and idle timeout, the server port and authentication mode, and the negotiated cryptographic primitives (ciphers, key-exchange, MAC, and host-key algorithms), plus whether FIPS restrictions are enforced. This is the surface auditors compare against SSH hardening benchmarks for weak algorithms, missing idle timeouts, and non-standard ports.","min_provider_version":"13.1.9","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.stp":{"id":"arista.eos.stp","name":"arista.eos.stp","fields":{"mst":{"name":"mst","type":"\u001barista.eos.stp.mst","title":"Arista EOS MST (Multiple Spanning Tree) instance","desc":"Single Multiple Spanning Tree instance selected by instanceId, for example instanceId \"0\". Covers the STP protocol variant, the local bridge parameters, the elected root and regional-root bridges, and the interfaces participating in this instance, so you can verify the spanning-tree topology and root-bridge placement.","provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"mstInstances":{"name":"mstInstances","type":"\u0019\u001barista.eos.stp.mst","title":"Multiple Spanning Tree Protocol (MST) instances","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS Spanning Tree Protocol (STP) configuration","desc":"Spanning Tree Protocol state for the device, exposing each configured Multiple Spanning Tree (MST) instance through mstInstances. Use it to audit the STP topology: which bridge is elected root, which is the regional root, and how each interface participates in loop prevention.","min_provider_version":"9.0.0","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.stp.mst":{"id":"arista.eos.stp.mst","name":"arista.eos.stp.mst","fields":{"bridge":{"name":"bridge","type":"\n","is_mandatory":true,"title":"Local bridge parameters for this MST instance","desc":"Keys: priority, macAddress, systemIdExtension, and (for the default instance) forwardDelay, helloTime, maxAge.","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"instanceId":{"name":"instanceId","type":"\u0007","is_mandatory":true,"title":"MST instance number","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"interfaces":{"name":"interfaces","type":"\u0019\u001barista.eos.spt.mstInterface","is_mandatory":true,"title":"Interfaces on the specified MST instances","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"MST instance name","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"protocol":{"name":"protocol","type":"\u0007","is_mandatory":true,"title":"Spanning Tree Protocol variant for this MST instance","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"regionalRootBridge":{"name":"regionalRootBridge","type":"\n","is_mandatory":true,"title":"Regional root bridge for this MST region","desc":"Keys: priority, macAddress, systemIdExtension.","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"rootBridge":{"name":"rootBridge","type":"\n","is_mandatory":true,"title":"Elected root bridge for this MST instance","desc":"Keys: priority, macAddress, systemIdExtension.","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS MST (Multiple Spanning Tree) instance","desc":"Single Multiple Spanning Tree instance selected by instanceId, for example instanceId \"0\". Covers the STP protocol variant, the local bridge parameters, the elected root and regional-root bridges, and the interfaces participating in this instance, so you can verify the spanning-tree topology and root-bridge placement.","min_provider_version":"9.0.0","defaults":"instanceId name","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.switchport":{"id":"arista.eos.switchport","name":"arista.eos.switchport","fields":{"accessVlan":{"name":"accessVlan","type":"\u0007","is_mandatory":true,"title":"Access VLAN ID (for access mode)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"mode":{"name":"mode","type":"\u0007","is_mandatory":true,"title":"Switchport mode (access, trunk)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Interface name","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"trunkAllowedVlans":{"name":"trunkAllowedVlans","type":"\u0007","is_mandatory":true,"title":"Allowed VLANs on trunk (e.g., \"1-4094\", \"100,200,300\")","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"trunkGroups":{"name":"trunkGroups","type":"\u0019\u0007","is_mandatory":true,"title":"Trunk groups","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"trunkNativeVlan":{"name":"trunkNativeVlan","type":"\u0007","is_mandatory":true,"title":"Native VLAN ID (for trunk mode)","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS Layer-2 switchport configuration","desc":"Layer-2 switchport state for one interface, selected by `name` (for example `arista.eos.switchports.where(name == \"Ethernet1\")`). Reports the switchport `mode` (access or trunk), the access VLAN, the trunk native VLAN, the allowed-VLAN list, and any trunk groups, so you can flag misconfigured trunks or unexpected access-VLAN assignments.","min_provider_version":"11.1.0","defaults":"name mode","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.telnetService":{"id":"arista.eos.telnetService","name":"arista.eos.telnetService","fields":{"configured":{"name":"configured","type":"\u0004","is_mandatory":true,"title":"Whether a `management telnet` block exists in the running-config","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"enabled":{"name":"enabled","type":"\u0004","is_mandatory":true,"title":"Whether the telnet service is enabled (configured AND not shutdown)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"idleTimeout":{"name":"idleTimeout","type":"\u0005","is_mandatory":true,"title":"Idle timeout in minutes (0 = no timeout)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"ipAccessGroup":{"name":"ipAccessGroup","type":"\u0007","is_mandatory":true,"title":"Access-list name restricting connections (empty = no ACL)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"perHostLimit":{"name":"perHostLimit","type":"\u0005","is_mandatory":true,"title":"Maximum concurrent sessions per host","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"sessionLimit":{"name":"sessionLimit","type":"\u0005","is_mandatory":true,"title":"Maximum concurrent sessions","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS management telnet service","desc":"State of the `management telnet` service, covering whether the block exists and is actually enabled, the idle timeout, session limits (global and per-host), and any access-list restricting connections. Telnet is a plaintext protocol, so benchmarks generally require it to be disabled.","min_provider_version":"13.1.9","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.user":{"id":"arista.eos.user","name":"arista.eos.user","fields":{"format":{"name":"format","type":"\u0007","is_mandatory":true,"title":"Specifies how the secret is encoded","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"locked":{"name":"locked","type":"\u0004","title":"Whether the account can no longer authenticate","desc":"Computed as true when the account has no password (nopassword) and no configured SSH key, so no credential exists to log in with.","min_provider_version":"13.0.1","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"The name of the user","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"nopassword":{"name":"nopassword","type":"\u0007","is_mandatory":true,"title":"Set to \"nopassword\" when the account has no password configured, empty otherwise","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"privilege":{"name":"privilege","type":"\u0007","is_mandatory":true,"title":"EOS privilege level, from 0 (most restricted) to 15 (full administrative access)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"role":{"name":"role","type":"\u0007","is_mandatory":true,"title":"User's assigned role","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"secret":{"name":"secret","type":"\u0007","is_mandatory":true,"title":"The secret (password) assigned to this user","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"sshkey":{"name":"sshkey","type":"\u0007","is_mandatory":true,"title":"User's sshkey","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS local user account","desc":"Local user account defined by a `username` line in the running-config: login name, EOS privilege level, assigned role, password state, secret encoding, and any configured SSH key. Audits use these accounts to find privilege-15 users, accounts with no password, weak secret encodings, and stale credentials. The `locked` predicate reports accounts that can no longer authenticate.","min_provider_version":"9.0.0","defaults":"name privilege","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.vlan":{"id":"arista.eos.vlan","name":"arista.eos.vlan","fields":{"dynamic":{"name":"dynamic","type":"\u0004","is_mandatory":true,"title":"Whether this is a dynamic VLAN","min_provider_version":"13.0.1","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"VLAN ID","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"interfaces":{"name":"interfaces","type":"\u0019\u0007","title":"Interfaces assigned to this VLAN","min_provider_version":"13.0.1","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"VLAN name","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"VLAN state (active, suspend)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"trunkGroups":{"name":"trunkGroups","type":"\u0019\u0007","is_mandatory":true,"title":"Trunk groups associated with the VLAN","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS VLAN","desc":"Layer 2 broadcast domain configured on the switch, selected by its numeric `id` (for example `arista.eos.vlan(id: \"10\")`). Covers the VLAN name, its administrative state (active or suspend), the trunk groups it belongs to, whether it was learned dynamically, and the interfaces assigned to it, so you can audit segmentation and confirm that only expected VLANs and ports are in use.","min_provider_version":"11.1.0","defaults":"id name","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.vrrp":{"id":"arista.eos.vrrp","name":"arista.eos.vrrp","fields":{"group":{"name":"group","type":"\u001barista.eos.vrrp.group","title":"Arista EOS VRRP group","desc":"Single VRRP group, keyed by `interface`/`groupId` (a `Vlan100` SVI typically hosts group `1`). `priority` plus `preempt` determine which device becomes master, `state` reports the current FSM state (master / backup / initial), and `virtualIps` is the list of gateway addresses the group advertises. `virtualMac` is the synthetic MAC the group answers ARP for.","is_private":true,"provider":"go.mondoo.com/cnquery/v9/providers/arista","is_implicit_resource":true},"groups":{"name":"groups","type":"\u0019\u001barista.eos.vrrp.group","title":"VRRP groups configured on this device","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS VRRP (Virtual Router Redundancy Protocol) configuration","desc":"VRRP first-hop redundancy state on the device. `groups` lists every VRRP instance configured (each with its `interface`, `groupId`, `priority`, `preempt` behavior, `state` of master / backup / initial, the `virtualIps` it advertises, and the `virtualMac`). Query this to audit gateway redundancy, for example asserting that every L3 subnet has a VRRP group, that priorities are split between the pair of switches, or that preempt is enabled.","min_provider_version":"13.2.7","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"arista.eos.vrrp.group":{"id":"arista.eos.vrrp.group","name":"arista.eos.vrrp.group","fields":{"advertisementInterval":{"name":"advertisementInterval","type":"\u0006","is_mandatory":true,"title":"Advertisement interval in seconds (typically 1.0)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"groupId":{"name":"groupId","type":"\u0005","is_mandatory":true,"title":"VRRP group ID (1-255)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"interface":{"name":"interface","type":"\u0007","is_mandatory":true,"title":"Parent interface (the SVI or routed port the group runs on)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"preempt":{"name":"preempt","type":"\u0004","is_mandatory":true,"title":"Whether preemption is enabled","desc":"When true, a higher-priority device that comes online will take over from a lower-priority current master.","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"preemptDelay":{"name":"preemptDelay","type":"\u0005","is_mandatory":true,"title":"Preempt delay in seconds (time the new master waits before taking over)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"primaryIp":{"name":"primaryIp","type":"\u0007","is_mandatory":true,"title":"Primary (source) IP address used in VRRP advertisements","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"priority":{"name":"priority","type":"\u0005","is_mandatory":true,"title":"Configured priority (1-254; higher wins, 255 reserved for IP owner)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"skewTime":{"name":"skewTime","type":"\u0006","is_mandatory":true,"title":"Skew time in seconds (priority-derived component of the master-down interval)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Current FSM state","desc":"One of `master`, `backup`, or `initial`.","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"version":{"name":"version","type":"\u0005","is_mandatory":true,"title":"VRRP protocol version (2 for IPv4, 3 for IPv4/IPv6)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"virtualIps":{"name":"virtualIps","type":"\u0019\u0007","is_mandatory":true,"title":"Virtual IP addresses the group advertises (the gateways clients use)","provider":"go.mondoo.com/cnquery/v9/providers/arista"},"virtualMac":{"name":"virtualMac","type":"\u0007","is_mandatory":true,"title":"Synthetic virtual MAC address the group answers ARP for","provider":"go.mondoo.com/cnquery/v9/providers/arista"}},"title":"Arista EOS VRRP group","desc":"Single VRRP group, keyed by `interface`/`groupId` (a `Vlan100` SVI typically hosts group `1`). `priority` plus `preempt` determine which device becomes master, `state` reports the current FSM state (master / backup / initial), and `virtualIps` is the list of gateway addresses the group advertises. `virtualMac` is the synthetic MAC the group answers ARP for.","private":true,"min_provider_version":"13.2.7","defaults":"interface groupId state priority","provider":"go.mondoo.com/cnquery/v9/providers/arista"}}}