appomni/vocabulary/appomni-vocabulary.yaml at main · api-evangelist/appomni · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
vocabulary: "1.0.0"

info:
  provider: AppOmni
  description: >-
    Vocabulary for the AppOmni SaaS security management platform, covering
    security event monitoring, threat detection, policy management, and
    compliance reporting for enterprise SaaS applications.
  created: "2026-04-19"
  modified: "2026-04-19"

operational:
  apis:
    - name: AppOmni API
      namespace: appomni
      version: "1.0.0"
      baseUrl: "https://api.appomni.com/v1"
      status: active

  resources:
    - name: events
      description: Security events detected in monitored SaaS applications
      api: AppOmni API
      actions:
        - list
        - get
    - name: policies
      description: Security policies for SaaS application monitoring
      api: AppOmni API
      actions:
        - list
        - create
        - get
        - update
    - name: compliance-reports
      description: Compliance reports for regulatory frameworks
      api: AppOmni API
      actions:
        - list
        - get

  actions:
    - name: list
      httpMethod: GET
      pattern: read
    - name: get
      httpMethod: GET
      pattern: read
    - name: create
      httpMethod: POST
      pattern: write
    - name: update
      httpMethod: PUT
      pattern: write

  schemas:
    core:
      - name: SecurityEvent
        description: A detected security event with severity and investigation status
      - name: Policy
        description: A security policy governing SaaS application behavior
      - name: ComplianceReport
        description: A generated compliance report for a regulatory framework

  parameters:
    identifiers:
      - name: eventId
        description: Unique security event identifier
      - name: policyId
        description: Unique security policy identifier
      - name: reportId
        description: Unique compliance report identifier
    filters:
      - name: severity
        description: Event severity level filter
      - name: application
        description: SaaS application name filter
      - name: status
        description: Event or policy status filter

  enums:
    eventSeverities:
      - critical
      - high
      - medium
      - low
      - info
    eventStatuses:
      - open
      - investigating
      - resolved
      - dismissed
    complianceFrameworks:
      - SOC2
      - ISO27001
      - HIPAA
      - GDPR
      - PCI-DSS

  authentication:
    schemes:
      - type: bearer
        description: Bearer token authentication for API access

capability:
  workflows:
    - name: SaaS Security Monitoring
      description: Continuous monitoring and investigation of SaaS security threats
      resources:
        - events
        - policies
  personas:
    - name: Security Analyst
      description: Investigates security events and threats in SaaS applications
    - name: Compliance Officer
      description: Generates and reviews compliance reports for regulatory frameworks
  domains:
    - name: Threat Detection
      description: Detecting and investigating security threats in SaaS applications
      resources:
        - events
    - name: Policy Management
      description: Managing security policies for SaaS application governance
      resources:
        - policies
    - name: Compliance
      description: Generating and managing compliance reports for regulatory needs
      resources:
        - compliance-reports

  namespaces: []
  binds: []