{"resources":{"clickhousecloud":{"id":"clickhousecloud","name":"clickhousecloud","fields":{"apiKey":{"name":"apiKey","type":"\u001bclickhousecloud.apiKey","title":"ClickHouse Cloud API key","desc":"An organization API key and its security attributes: its state, the roles it grants, and when it expires and was last used. The name field selects the key, for example clickhousecloud.organization.apiKeys.where(name == \"ci\"). Whether the key never expires is surfaced as neverExpires. The key secret is never returned by the API and is never exposed here.","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud","is_implicit_resource":true},"member":{"name":"member","type":"\u001bclickhousecloud.member","title":"ClickHouse Cloud organization member","desc":"A member of the organization and their role. The email field selects the member, for example clickhousecloud.organization.members.where(role == \"admin\"). Read from the organization members endpoint.","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud","is_implicit_resource":true},"organization":{"name":"organization","type":"\u001bclickhousecloud.organization","title":"ClickHouse Cloud organization","desc":"The connected ClickHouse Cloud organization: its name and the services, API keys, and members reached from here. Populated from the ClickHouse Cloud control-plane API; data the API key is not permitted to read is left empty rather than failing.","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud","is_implicit_resource":true},"service":{"name":"service","type":"\u001bclickhousecloud.service","title":"ClickHouse Cloud service","desc":"A ClickHouse Cloud service (a managed database deployment) and its security posture: cloud provider and region, running state, the IP allow-list and endpoints, encryption at rest, and private-connectivity settings. The name field selects the service, for example clickhousecloud.organization.services.where(name == \"prod\"). Whether the service is reachable from any IP is surfaced as openToAllIps.","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud","is_implicit_resource":true}},"title":"ClickHouse Cloud","desc":"Root of the ClickHouse Cloud provider. The connected organization and everything queryable through it (services, IP access lists, API keys, and members) is reached from clickhousecloud.organization.","min_provider_version":"13.0.0","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"clickhousecloud.apiKey":{"id":"clickhousecloud.apiKey","name":"clickhousecloud.apiKey","fields":{"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the key was created","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"expiresAt":{"name":"expiresAt","type":"\t","is_mandatory":true,"title":"Time the key expires, when set","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"API key ID","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"API key name","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"neverExpires":{"name":"neverExpires","type":"\u0004","is_mandatory":true,"title":"Whether the key never expires","desc":"True when no expiration time is set. A non-expiring key is a finding.","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"roles":{"name":"roles","type":"\u0019\u0007","is_mandatory":true,"title":"Roles granted to the key, for example \"Admin\" or \"Developer\"","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Key state, for example \"enabled\" or \"disabled\"","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"usedAt":{"name":"usedAt","type":"\t","is_mandatory":true,"title":"Time the key was last used, when known","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"}},"title":"ClickHouse Cloud API key","desc":"An organization API key and its security attributes: its state, the roles it grants, and when it expires and was last used. The name field selects the key, for example clickhousecloud.organization.apiKeys.where(name == \"ci\"). Whether the key never expires is surfaced as neverExpires. The key secret is never returned by the API and is never exposed here.","min_provider_version":"13.0.0","defaults":"name state","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"clickhousecloud.member":{"id":"clickhousecloud.member","name":"clickhousecloud.member","fields":{"email":{"name":"email","type":"\u0007","is_mandatory":true,"title":"Member email address","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Member name","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"role":{"name":"role","type":"\u0007","is_mandatory":true,"title":"Organization role, for example \"admin\" or \"developer\"","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"userId":{"name":"userId","type":"\u0007","is_mandatory":true,"title":"User ID of the member","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"}},"title":"ClickHouse Cloud organization member","desc":"A member of the organization and their role. The email field selects the member, for example clickhousecloud.organization.members.where(role == \"admin\"). Read from the organization members endpoint.","min_provider_version":"13.0.0","defaults":"email role","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"clickhousecloud.organization":{"id":"clickhousecloud.organization","name":"clickhousecloud.organization","fields":{"apiKeys":{"name":"apiKeys","type":"\u0019\u001bclickhousecloud.apiKey","title":"API keys defined on the organization","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"createdAt":{"name":"createdAt","type":"\t","is_mandatory":true,"title":"Time the organization was created","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Organization ID","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"members":{"name":"members","type":"\u0019\u001bclickhousecloud.member","title":"Members of the organization","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Organization name","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"services":{"name":"services","type":"\u0019\u001bclickhousecloud.service","title":"Services (database deployments) in the organization","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"}},"title":"ClickHouse Cloud organization","desc":"The connected ClickHouse Cloud organization: its name and the services, API keys, and members reached from here. Populated from the ClickHouse Cloud control-plane API; data the API key is not permitted to read is left empty rather than failing.","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"clickhousecloud.service":{"id":"clickhousecloud.service","name":"clickhousecloud.service","fields":{"cloudProvider":{"name":"cloudProvider","type":"\u0007","is_mandatory":true,"title":"Cloud provider hosting the service: \"aws\", \"gcp\", or \"azure\"","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"endpoint":{"name":"endpoint","type":"\u001bclickhousecloud.service.endpoint","title":"ClickHouse Cloud service endpoint","desc":"A connection endpoint the service exposes: its protocol, host, and port. Selected as a row of the service's endpoints.","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud","is_implicit_resource":true},"endpoints":{"name":"endpoints","type":"\u0019\u001bclickhousecloud.service.endpoint","is_mandatory":true,"title":"The service's connection endpoints","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"hasPrivateEndpoints":{"name":"hasPrivateEndpoints","type":"\u0004","is_mandatory":true,"title":"Whether the service has private endpoints attached","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"hasTransparentDataEncryption":{"name":"hasTransparentDataEncryption","type":"\u0004","is_mandatory":true,"title":"Whether encryption at rest with a customer-managed key is enabled","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"id":{"name":"id","type":"\u0007","is_mandatory":true,"title":"Service ID","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"idleScaling":{"name":"idleScaling","type":"\u0004","is_mandatory":true,"title":"Whether idle scaling (scale to zero when unused) is enabled","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"idleTimeoutMinutes":{"name":"idleTimeoutMinutes","type":"\u0005","is_mandatory":true,"title":"Minutes of inactivity before the service scales down","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"ipAccess":{"name":"ipAccess","type":"\u001bclickhousecloud.service.ipAccess","title":"ClickHouse Cloud IP allow-list entry","desc":"A single source range permitted to connect to a service, with its description. A source of \"0.0.0.0/0\" or \"::/0\" permits any address (see the service's openToAllIps). Selected as a row of the service's ipAccessList.","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud","is_implicit_resource":true},"ipAccessList":{"name":"ipAccessList","type":"\u0019\u001bclickhousecloud.service.ipAccess","is_mandatory":true,"title":"The IP allow-list controlling which sources may connect","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"isReadonly":{"name":"isReadonly","type":"\u0004","is_mandatory":true,"title":"Whether the service is read-only","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"maxReplicaMemoryGb":{"name":"maxReplicaMemoryGb","type":"\u0005","is_mandatory":true,"title":"Maximum replica memory in GB the service can scale up to","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"minReplicaMemoryGb":{"name":"minReplicaMemoryGb","type":"\u0005","is_mandatory":true,"title":"Minimum replica memory in GB the service can scale down to","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Service name","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"numReplicas":{"name":"numReplicas","type":"\u0005","is_mandatory":true,"title":"Number of replicas","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"openToAllIps":{"name":"openToAllIps","type":"\u0004","is_mandatory":true,"title":"Whether the service is reachable from any IP address","desc":"True when the IP allow-list contains an entry that permits all addresses (\"0.0.0.0/0\" or \"::/0\"), meaning the service is exposed to the whole internet. A CIS-style finding.","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"privateEndpointIds":{"name":"privateEndpointIds","type":"\u0019\u0007","is_mandatory":true,"title":"IDs of the private endpoints attached to the service","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"region":{"name":"region","type":"\u0007","is_mandatory":true,"title":"Region the service runs in","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"releaseChannel":{"name":"releaseChannel","type":"\u0007","is_mandatory":true,"title":"Release channel the service follows, for example \"default\" or \"fast\"","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"state":{"name":"state","type":"\u0007","is_mandatory":true,"title":"Service state, for example \"running\", \"idle\", \"stopped\", or \"provisioning\"","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"tier":{"name":"tier","type":"\u0007","is_mandatory":true,"title":"Service tier, for example \"development\" or \"production\" (empty on scale-tier organizations)","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"}},"title":"ClickHouse Cloud service","desc":"A ClickHouse Cloud service (a managed database deployment) and its security posture: cloud provider and region, running state, the IP allow-list and endpoints, encryption at rest, and private-connectivity settings. The name field selects the service, for example clickhousecloud.organization.services.where(name == \"prod\"). Whether the service is reachable from any IP is surfaced as openToAllIps.","min_provider_version":"13.0.0","defaults":"name state","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"clickhousecloud.service.endpoint":{"id":"clickhousecloud.service.endpoint","name":"clickhousecloud.service.endpoint","fields":{"host":{"name":"host","type":"\u0007","is_mandatory":true,"title":"Host name","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"port":{"name":"port","type":"\u0005","is_mandatory":true,"title":"Port number","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"protocol":{"name":"protocol","type":"\u0007","is_mandatory":true,"title":"Protocol, for example \"nativesecure\", \"https\", or \"mysql\"","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"}},"title":"ClickHouse Cloud service endpoint","desc":"A connection endpoint the service exposes: its protocol, host, and port. Selected as a row of the service's endpoints.","min_provider_version":"13.0.0","defaults":"protocol host","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"clickhousecloud.service.ipAccess":{"id":"clickhousecloud.service.ipAccess","name":"clickhousecloud.service.ipAccess","fields":{"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Human-readable description of the entry","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"},"source":{"name":"source","type":"\u0007","is_mandatory":true,"title":"Permitted source, a CIDR or IP, for example \"0.0.0.0/0\" or \"10.0.0.0/8\"","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"}},"title":"ClickHouse Cloud IP allow-list entry","desc":"A single source range permitted to connect to a service, with its description. A source of \"0.0.0.0/0\" or \"::/0\" permits any address (see the service's openToAllIps). Selected as a row of the service's ipAccessList.","min_provider_version":"13.0.0","defaults":"source description","provider":"go.mondoo.com/mql/v13/providers/clickhousecloud"}}}