{"resources":{"cassandra":{"id":"cassandra","name":"cassandra","fields":{"cluster":{"name":"cluster","type":"\u001bcassandra.cluster","title":"Apache Cassandra cluster","desc":"The connected cluster: its name, version, and CQL details, plus the security posture, roles, nodes, and keyspaces reached from here. Populated from the system and system_auth keyspaces and the system_views.settings virtual table; data the connecting role is not permitted to read is left empty rather than failing.","provider":"go.mondoo.com/mql/v13/providers/cassandra","is_implicit_resource":true},"keyspace":{"name":"keyspace","type":"\u001bcassandra.keyspace","title":"Apache Cassandra keyspace","desc":"A keyspace and its replication and durability settings: the replication strategy and factor, whether durable writes are enabled, and whether it is a built-in system keyspace. The name field selects the keyspace.","provider":"go.mondoo.com/mql/v13/providers/cassandra","is_implicit_resource":true},"node":{"name":"node","type":"\u001bcassandra.node","title":"Apache Cassandra node","desc":"A node in the cluster and its identity: its address, host id, version, and topology (data center and rack). The address field selects the node.","provider":"go.mondoo.com/mql/v13/providers/cassandra","is_implicit_resource":true},"role":{"name":"role","type":"\u001bcassandra.role","title":"Apache Cassandra role","desc":"A role and its login and privilege attributes: whether it can log in, whether it is a superuser, whether it has a password set, the roles it is a member of, and the permissions granted to it. The name field selects the role, for example cassandra.cluster.roles.where(name == \"cassandra\").","provider":"go.mondoo.com/mql/v13/providers/cassandra","is_implicit_resource":true},"security":{"name":"security","type":"\u001bcassandra.security","title":"Apache Cassandra security posture","desc":"Cluster-wide authentication, authorization, and encryption settings read from the system_views.settings virtual table: which authenticator and authorizer are configured, whether they are enabled (rather than the permissive AllowAll defaults), whether client and internode traffic are encrypted, and whether audit logging is on.","provider":"go.mondoo.com/mql/v13/providers/cassandra","is_implicit_resource":true}},"title":"Apache Cassandra cluster","desc":"Root of the Cassandra provider. The connected cluster and everything queryable through it (security posture, roles, nodes, and keyspaces) is reached from cassandra.cluster.","min_provider_version":"13.0.0","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"cassandra.cluster":{"id":"cassandra.cluster","name":"cassandra.cluster","fields":{"cqlVersion":{"name":"cqlVersion","type":"\u0007","is_mandatory":true,"title":"CQL language version, for example \"3.4.7\"","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"keyspaces":{"name":"keyspaces","type":"\u0019\u001bcassandra.keyspace","title":"Keyspaces defined on the cluster","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Cluster name","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"nativeProtocolVersion":{"name":"nativeProtocolVersion","type":"\u0005","is_mandatory":true,"title":"Native protocol version","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"nodes":{"name":"nodes","type":"\u0019\u001bcassandra.node","title":"Nodes in the cluster","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"partitioner":{"name":"partitioner","type":"\u0007","is_mandatory":true,"title":"Partitioner class the cluster uses","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"roles":{"name":"roles","type":"\u0019\u001bcassandra.role","title":"Roles defined on the cluster","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"security":{"name":"security","type":"\u001bcassandra.security","title":"Security posture of the cluster","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Cassandra release version, for example \"5.0.8\"","provider":"go.mondoo.com/mql/v13/providers/cassandra"}},"title":"Apache Cassandra cluster","desc":"The connected cluster: its name, version, and CQL details, plus the security posture, roles, nodes, and keyspaces reached from here. Populated from the system and system_auth keyspaces and the system_views.settings virtual table; data the connecting role is not permitted to read is left empty rather than failing.","min_provider_version":"13.0.0","defaults":"name version","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"cassandra.keyspace":{"id":"cassandra.keyspace","name":"cassandra.keyspace","fields":{"durableWrites":{"name":"durableWrites","type":"\u0004","is_mandatory":true,"title":"Whether durable writes (the commit log) are enabled","desc":"When false, writes are not persisted to the commit log, risking data loss on a crash.","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"isSystem":{"name":"isSystem","type":"\u0004","is_mandatory":true,"title":"Whether this is a built-in system keyspace","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Keyspace name","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"replicationFactors":{"name":"replicationFactors","type":"\u001a\u0007\u0007","is_mandatory":true,"title":"Replication factors by data center, or the overall factor under the \"replication_factor\" key","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"replicationStrategy":{"name":"replicationStrategy","type":"\u0007","is_mandatory":true,"title":"Replication strategy class, for example \"SimpleStrategy\" or \"NetworkTopologyStrategy\"","provider":"go.mondoo.com/mql/v13/providers/cassandra"}},"title":"Apache Cassandra keyspace","desc":"A keyspace and its replication and durability settings: the replication strategy and factor, whether durable writes are enabled, and whether it is a built-in system keyspace. The name field selects the keyspace.","min_provider_version":"13.0.0","defaults":"name replicationStrategy durableWrites","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"cassandra.node":{"id":"cassandra.node","name":"cassandra.node","fields":{"address":{"name":"address","type":"\u0007","is_mandatory":true,"title":"Node address","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"datacenter":{"name":"datacenter","type":"\u0007","is_mandatory":true,"title":"Data center the node belongs to","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"hostId":{"name":"hostId","type":"\u0007","is_mandatory":true,"title":"Node host id","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"isLocal":{"name":"isLocal","type":"\u0004","is_mandatory":true,"title":"Whether this is the node the provider is connected to","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"rack":{"name":"rack","type":"\u0007","is_mandatory":true,"title":"Rack the node belongs to","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"releaseVersion":{"name":"releaseVersion","type":"\u0007","is_mandatory":true,"title":"Cassandra release version running on the node","provider":"go.mondoo.com/mql/v13/providers/cassandra"}},"title":"Apache Cassandra node","desc":"A node in the cluster and its identity: its address, host id, version, and topology (data center and rack). The address field selects the node.","min_provider_version":"13.0.0","defaults":"address releaseVersion datacenter","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"cassandra.role":{"id":"cassandra.role","name":"cassandra.role","fields":{"canLogin":{"name":"canLogin","type":"\u0004","is_mandatory":true,"title":"Whether the role can log in (is a login account)","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"hasPassword":{"name":"hasPassword","type":"\u0004","is_mandatory":true,"title":"Whether the role has a password set","desc":"A login role with no password cannot authenticate with a password; a superuser role such as the default \"cassandra\" with a password should have that default password changed.","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"isSuperuser":{"name":"isSuperuser","type":"\u0004","is_mandatory":true,"title":"Whether the role is a superuser","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"memberOf":{"name":"memberOf","type":"\u0019\u0007","is_mandatory":true,"title":"Roles this role is a member of","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Role name","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"permission":{"name":"permission","type":"\u001bcassandra.role.permission","title":"Apache Cassandra role permission","desc":"A single permission grant of a role: the resource it applies to and the permissions held on it. For example the permission \"SELECT\" on the resource \"data/app\".","provider":"go.mondoo.com/mql/v13/providers/cassandra","is_implicit_resource":true},"permissions":{"name":"permissions","type":"\u0019\u001bcassandra.role.permission","title":"Permissions granted to the role","provider":"go.mondoo.com/mql/v13/providers/cassandra"}},"title":"Apache Cassandra role","desc":"A role and its login and privilege attributes: whether it can log in, whether it is a superuser, whether it has a password set, the roles it is a member of, and the permissions granted to it. The name field selects the role, for example cassandra.cluster.roles.where(name == \"cassandra\").","min_provider_version":"13.0.0","defaults":"name isSuperuser canLogin","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"cassandra.role.permission":{"id":"cassandra.role.permission","name":"cassandra.role.permission","fields":{"permissions":{"name":"permissions","type":"\u0019\u0007","is_mandatory":true,"title":"Permissions held on the resource, for example \"SELECT\", \"MODIFY\", or \"AUTHORIZE\"","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"resource":{"name":"resource","type":"\u0007","is_mandatory":true,"title":"Resource the permissions apply to, for example \"data\", \"data/app\", or \"roles/x\"","provider":"go.mondoo.com/mql/v13/providers/cassandra"}},"title":"Apache Cassandra role permission","desc":"A single permission grant of a role: the resource it applies to and the permissions held on it. For example the permission \"SELECT\" on the resource \"data/app\".","min_provider_version":"13.0.0","defaults":"resource permissions","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"cassandra.security":{"id":"cassandra.security","name":"cassandra.security","fields":{"auditLoggingEnabled":{"name":"auditLoggingEnabled","type":"\u0004","is_mandatory":true,"title":"Whether audit logging is enabled","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"authenticationEnabled":{"name":"authenticationEnabled","type":"\u0004","is_mandatory":true,"title":"Whether authentication is enabled","desc":"False when the authenticator is AllowAllAuthenticator, meaning any client that can reach the cluster connects without credentials.","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"authenticator":{"name":"authenticator","type":"\u0007","is_mandatory":true,"title":"Configured authenticator class, for example \"PasswordAuthenticator\"","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"authorizationEnabled":{"name":"authorizationEnabled","type":"\u0004","is_mandatory":true,"title":"Whether authorization is enabled","desc":"False when the authorizer is AllowAllAuthorizer, meaning permissions are not enforced.","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"authorizer":{"name":"authorizer","type":"\u0007","is_mandatory":true,"title":"Configured authorizer class, for example \"CassandraAuthorizer\"","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"clientEncryptionEnabled":{"name":"clientEncryptionEnabled","type":"\u0004","is_mandatory":true,"title":"Whether client-to-node traffic is encrypted with TLS","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"internodeEncryption":{"name":"internodeEncryption","type":"\u0007","is_mandatory":true,"title":"Internode encryption mode: \"none\", \"all\", \"dc\", or \"rack\"","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"networkAuthorizer":{"name":"networkAuthorizer","type":"\u0007","is_mandatory":true,"title":"Configured network authorizer class","provider":"go.mondoo.com/mql/v13/providers/cassandra"},"roleManager":{"name":"roleManager","type":"\u0007","is_mandatory":true,"title":"Configured role manager class","provider":"go.mondoo.com/mql/v13/providers/cassandra"}},"title":"Apache Cassandra security posture","desc":"Cluster-wide authentication, authorization, and encryption settings read from the system_views.settings virtual table: which authenticator and authorizer are configured, whether they are enabled (rather than the permissive AllowAll defaults), whether client and internode traffic are encrypted, and whether audit logging is on.","min_provider_version":"13.0.0","defaults":"authenticationEnabled authorizationEnabled","provider":"go.mondoo.com/mql/v13/providers/cassandra"}}}