{"resources":{"opensearch":{"id":"opensearch","name":"opensearch","fields":{"cluster":{"name":"cluster","type":"\u001bopensearch.cluster","title":"OpenSearch cluster","desc":"The connected cluster: its name, version, health, and node counts, plus the security posture, internal users, roles, and role mappings reached from here. Populated from the cluster info, health, and security-plugin APIs; fields the connecting credential is not permitted to read are left null rather than failing.","provider":"go.mondoo.com/mql/v13/providers/opensearch","is_implicit_resource":true},"role":{"name":"role","type":"\u001bopensearch.role","title":"OpenSearch role","desc":"A role and the permissions it grants: cluster permissions and per-index permissions. Built-in roles such as all_access are marked with isReserved. The name field selects the role, for example opensearch.cluster.roles.where(name == \"all_access\").","provider":"go.mondoo.com/mql/v13/providers/opensearch","is_implicit_resource":true},"roleMapping":{"name":"roleMapping","type":"\u001bopensearch.roleMapping","title":"OpenSearch role mapping","desc":"A rule that assigns a role to users, backend roles, and hosts. The name field selects the mapping by its role name, for example opensearch.cluster.roleMappings.where(name == \"all_access\").","provider":"go.mondoo.com/mql/v13/providers/opensearch","is_implicit_resource":true},"security":{"name":"security","type":"\u001bopensearch.security","title":"OpenSearch security posture","desc":"Cluster-wide settings of the security plugin: whether anonymous access is allowed, whether audit logging is enabled, whether the cluster hides authorization failures, and which authentication realms are enabled. Read from the security-plugin configuration APIs.","provider":"go.mondoo.com/mql/v13/providers/opensearch","is_implicit_resource":true},"user":{"name":"user","type":"\u001bopensearch.user","title":"OpenSearch internal user","desc":"A user in the internal database, its assigned roles, and whether it is built-in. Backend roles come from an external identity source; security roles are assigned directly. The name field selects the user, for example opensearch.cluster.users.where(name == \"admin\").","provider":"go.mondoo.com/mql/v13/providers/opensearch","is_implicit_resource":true}},"title":"OpenSearch cluster","desc":"Root of the OpenSearch provider. The connected cluster and everything queryable through it (security posture, internal users, roles, and role mappings) is reached from opensearch.cluster.","min_provider_version":"13.0.0","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"opensearch.cluster":{"id":"opensearch.cluster","name":"opensearch.cluster","fields":{"dataNodeCount":{"name":"dataNodeCount","type":"\u0005","is_mandatory":true,"title":"Number of data nodes in the cluster","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"distribution":{"name":"distribution","type":"\u0007","is_mandatory":true,"title":"Product distribution serving the cluster, for example \"opensearch\"","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"healthStatus":{"name":"healthStatus","type":"\u0007","is_mandatory":true,"title":"Cluster health status: \"green\", \"yellow\", or \"red\"","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"luceneVersion":{"name":"luceneVersion","type":"\u0007","is_mandatory":true,"title":"Lucene version backing the cluster","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Cluster name","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"nodeCount":{"name":"nodeCount","type":"\u0005","is_mandatory":true,"title":"Total number of nodes in the cluster","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"roleMappings":{"name":"roleMappings","type":"\u0019\u001bopensearch.roleMapping","title":"Role mappings that assign roles to users and backend roles","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"roles":{"name":"roles","type":"\u0019\u001bopensearch.role","title":"Roles defined on the cluster","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"security":{"name":"security","type":"\u001bopensearch.security","title":"Security posture of the cluster","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"users":{"name":"users","type":"\u0019\u001bopensearch.user","title":"Internal-database users defined on the cluster","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"uuid":{"name":"uuid","type":"\u0007","is_mandatory":true,"title":"Cluster UUID","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"version":{"name":"version","type":"\u0007","is_mandatory":true,"title":"Server version, for example \"2.17.1\"","provider":"go.mondoo.com/mql/v13/providers/opensearch"}},"title":"OpenSearch cluster","desc":"The connected cluster: its name, version, health, and node counts, plus the security posture, internal users, roles, and role mappings reached from here. Populated from the cluster info, health, and security-plugin APIs; fields the connecting credential is not permitted to read are left null rather than failing.","min_provider_version":"13.0.0","defaults":"name version healthStatus","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"opensearch.role":{"id":"opensearch.role","name":"opensearch.role","fields":{"clusterPermissions":{"name":"clusterPermissions","type":"\u0019\u0007","is_mandatory":true,"title":"Cluster-level permissions granted, for example \"cluster_monitor\" or \"*\"","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Human-readable description, when set","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"indexPermission":{"name":"indexPermission","type":"\u001bopensearch.role.indexPermission","title":"OpenSearch index permission","desc":"A single per-index permission grant of a role: the index patterns it applies to, the actions granted, and whether field-level security or field masking narrows access. For example the action \"read\" on the index pattern \"logs-*\".","provider":"go.mondoo.com/mql/v13/providers/opensearch","is_implicit_resource":true},"indexPermissions":{"name":"indexPermissions","type":"\u0019\u001bopensearch.role.indexPermission","title":"Per-index permission grants","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"isHidden":{"name":"isHidden","type":"\u0004","is_mandatory":true,"title":"Whether the role is hidden from the security APIs","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"isReserved":{"name":"isReserved","type":"\u0004","is_mandatory":true,"title":"Whether this is a built-in, reserved role","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"isStatic":{"name":"isStatic","type":"\u0004","is_mandatory":true,"title":"Whether the role is defined statically in the security plugin","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Role name","provider":"go.mondoo.com/mql/v13/providers/opensearch"}},"title":"OpenSearch role","desc":"A role and the permissions it grants: cluster permissions and per-index permissions. Built-in roles such as all_access are marked with isReserved. The name field selects the role, for example opensearch.cluster.roles.where(name == \"all_access\").","min_provider_version":"13.0.0","defaults":"name isReserved","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"opensearch.role.indexPermission":{"id":"opensearch.role.indexPermission","name":"opensearch.role.indexPermission","fields":{"allowedActions":{"name":"allowedActions","type":"\u0019\u0007","is_mandatory":true,"title":"Actions granted on the matching indices, for example \"read\" or \"*\"","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"hasFieldLevelSecurity":{"name":"hasFieldLevelSecurity","type":"\u0004","is_mandatory":true,"title":"Whether field-level security restricts which fields are readable","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"hasFieldMasking":{"name":"hasFieldMasking","type":"\u0004","is_mandatory":true,"title":"Whether field masking anonymizes field values","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"indexPatterns":{"name":"indexPatterns","type":"\u0019\u0007","is_mandatory":true,"title":"Index name patterns the grant applies to","provider":"go.mondoo.com/mql/v13/providers/opensearch"}},"title":"OpenSearch index permission","desc":"A single per-index permission grant of a role: the index patterns it applies to, the actions granted, and whether field-level security or field masking narrows access. For example the action \"read\" on the index pattern \"logs-*\".","min_provider_version":"13.0.0","defaults":"indexPatterns allowedActions","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"opensearch.roleMapping":{"id":"opensearch.roleMapping","name":"opensearch.roleMapping","fields":{"backendRoles":{"name":"backendRoles","type":"\u0019\u0007","is_mandatory":true,"title":"Backend roles the role is mapped to","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Human-readable description, when set","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"hosts":{"name":"hosts","type":"\u0019\u0007","is_mandatory":true,"title":"Hosts the role is mapped to","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"isHidden":{"name":"isHidden","type":"\u0004","is_mandatory":true,"title":"Whether the mapping is hidden from the security APIs","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"isReserved":{"name":"isReserved","type":"\u0004","is_mandatory":true,"title":"Whether this is a built-in, reserved mapping","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"Name of the mapped role","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"users":{"name":"users","type":"\u0019\u0007","is_mandatory":true,"title":"Users the role is mapped to","provider":"go.mondoo.com/mql/v13/providers/opensearch"}},"title":"OpenSearch role mapping","desc":"A rule that assigns a role to users, backend roles, and hosts. The name field selects the mapping by its role name, for example opensearch.cluster.roleMappings.where(name == \"all_access\").","min_provider_version":"13.0.0","defaults":"name","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"opensearch.security":{"id":"opensearch.security","name":"opensearch.security","fields":{"anonymousAccessEnabled":{"name":"anonymousAccessEnabled","type":"\u0004","is_mandatory":true,"title":"Whether anonymous access is enabled","desc":"When true, unauthenticated requests are served as an anonymous user.","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"auditLoggingEnabled":{"name":"auditLoggingEnabled","type":"\u0004","is_mandatory":true,"title":"Whether audit logging is enabled","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"doNotFailOnForbidden":{"name":"doNotFailOnForbidden","type":"\u0004","is_mandatory":true,"title":"Whether authorization failures are hidden","desc":"When true (do_not_fail_on_forbidden), the cluster returns a filtered result instead of a 403 on a forbidden request, hiding authorization errors from clients.","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"enabledAuthRealms":{"name":"enabledAuthRealms","type":"\u0019\u0007","is_mandatory":true,"title":"Names of the enabled authentication realms, for example \"basic_internal_auth_domain\"","provider":"go.mondoo.com/mql/v13/providers/opensearch"}},"title":"OpenSearch security posture","desc":"Cluster-wide settings of the security plugin: whether anonymous access is allowed, whether audit logging is enabled, whether the cluster hides authorization failures, and which authentication realms are enabled. Read from the security-plugin configuration APIs.","min_provider_version":"13.0.0","defaults":"anonymousAccessEnabled auditLoggingEnabled","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"opensearch.user":{"id":"opensearch.user","name":"opensearch.user","fields":{"backendRoles":{"name":"backendRoles","type":"\u0019\u0007","is_mandatory":true,"title":"Backend roles mapped from an external identity source","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"description":{"name":"description","type":"\u0007","is_mandatory":true,"title":"Human-readable description, when set","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"isHidden":{"name":"isHidden","type":"\u0004","is_mandatory":true,"title":"Whether the user is hidden from the security APIs","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"isReserved":{"name":"isReserved","type":"\u0004","is_mandatory":true,"title":"Whether this is a built-in, reserved user","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"isStatic":{"name":"isStatic","type":"\u0004","is_mandatory":true,"title":"Whether the user is defined statically in the security plugin","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"name":{"name":"name","type":"\u0007","is_mandatory":true,"title":"User name","provider":"go.mondoo.com/mql/v13/providers/opensearch"},"securityRoles":{"name":"securityRoles","type":"\u0019\u0007","is_mandatory":true,"title":"Security roles assigned directly to the user","provider":"go.mondoo.com/mql/v13/providers/opensearch"}},"title":"OpenSearch internal user","desc":"A user in the internal database, its assigned roles, and whether it is built-in. Backend roles come from an external identity source; security roles are assigned directly. The name field selects the user, for example opensearch.cluster.users.where(name == \"admin\").","min_provider_version":"13.0.0","defaults":"name isReserved","provider":"go.mondoo.com/mql/v13/providers/opensearch"}}}