Fortanix Armor and Key Insight API
REST API covering the Armor and Key Insight components of the Fortanix Data & AI Security Platform: cloud and on-premises cryptographic discovery connections, scans, scan inventory, discovery policies, and AWS, Azure, on-premises, services, DSM and post-quantum-cryptography reporting, plus OAuth 2.0 client-credentials authentication.
Fortanix Armor and Key Insight API is one of 3 APIs that Fortanix publishes on the APIs.io network, described by a machine-readable OpenAPI specification.
Tagged areas include Cryptographic Discovery, Post-Quantum, Key Insight, and Security Posture. The published artifact set on APIs.io includes an OpenAPI specification, an API reference, and API documentation.
This API exposes 36 operations across 36 paths, organized into 12 resource areas, and defines 614 schemas. It is described by OpenAPI 3.0.0, at version 0.1.0.
Requests are made against a single base URL, https://api.armor.fortanix.com.
36 operations
36 paths
614 schemas
34 GET2 POST
Metadata
The identity and technical contract details declared by the specification.
Authentication & Security 1
Fortanix Armor and Key Insight API declares
1 security scheme
for authenticating requests.
It supports OAuth 2.0 (Oauth2ClientCredentials) using the clientCredentials flow.
Oauth2ClientCredentials— OAuth 2.0 client credential flow, see https://datatracker.ietf.org/doc/html/rfc6749section-4.4.
Paths & Operations 36
Across 36 paths, the API surfaces 36 operations — 34 GET, 2 POST. They span 12 resource areas, including DiscoveryConnection, DiscoveryInventory, DiscoveryPolicies, DiscoveryPqcReports, DiscoveryScan, DiscoveryAwsReports, DiscoveryAzureReports, DiscoveryOnPremReports, and 4 more. Each is listed below with its method, path, parameters, and response codes.
DiscoveryConnection 2
APIs regarding obtaining details about the connection.
GET
/api/v1/discovery/connections
Get all connections
GET
/api/v1/discovery/connections/{id}
Get a specific connection
DiscoveryInventory 2
APIs regarding obtaining the details about the inventory objects.
GET
/api/v1/discovery/inventory_objects
Get Inventory Objects.
GET
/api/v1/discovery/inventory_objects/{id}
Get Inventory Object.
DiscoveryPolicies 2
APIs regarding obtaining details about the policies.
GET
/api/v1/discovery/policies
Get all policies
GET
/api/v1/discovery/policies/{id}
Get a specific Policy
DiscoveryPqcReports 4
APIs regarding obtaining the PQC reports.
GET
/api/v1/discovery/pqc/connections
Get List of Connections for PQC Report.
GET
/api/v1/discovery/pqc/report
Get Cumulative PQC Report.
GET
/api/v1/discovery/pqc/services
Get List of Services for PQC Report.
GET
/api/v1/discovery/scans/{id}/pqc/report
Get PQC Report for a single connection.
DiscoveryScan 2
APIs regarding obtaining details about the scans.
GET
/api/v1/discovery/scans
Get all scans.
GET
/api/v1/discovery/scans/{id}
Get a scan.
DiscoveryAwsReports 4
APIs regarding obtaining the reports related to AWS.
GET
/api/v1/discovery/scans/{id}/accounts/aws
Search Scanned account names
GET
/api/v1/discovery/scans/{id}/assessment_report/aws
Get Scan Assessment report.
GET
/api/v1/discovery/scans/{id}/key_usage_report/aws
Get Scan Keys report.
GET
/api/v1/discovery/scans/{id}/summary_report/aws
Get Scan report.
DiscoveryAzureReports 4
APIs regarding obtaining the reports related to Azure.
GET
/api/v1/discovery/scans/{id}/assessment_report/azure
Get Azure Scanned Assessment report
GET
/api/v1/discovery/scans/{id}/key_usage_report/azure
Get Scan Keys report.
GET
/api/v1/discovery/scans/{id}/subscriptions/azure
Get Azure Scanned Subscriptions
GET
/api/v1/discovery/scans/{id}/summary_report/azure
Get Summary Report for Azure scan.
DiscoveryOnPremReports 7
APIs regarding obtaining the reports related to On-Prem infrastructure.
GET
/api/v1/discovery/scans/{id}/assessment_report/on_prem/database
Get On-Prem Database Scanned Assessment report
GET
/api/v1/discovery/scans/{id}/assessment_report/on_prem/filesystem
Get On-Prem Filesystem Assessment report
GET
/api/v1/discovery/scans/{id}/assessment_report/on_prem/source_code
Get On-Prem Source Code Scanned Assessment report
GET
/api/v1/discovery/scans/{id}/summary_report/on_prem/database
Get On-Prem Database Scanned Summary report
GET
/api/v1/discovery/scans/{id}/summary_report/on_prem/discovery
Get On-Prem Scanned Assessment report
GET
/api/v1/discovery/scans/{id}/summary_report/on_prem/filesystem
Get On-Prem Filesystem Summary report
GET
/api/v1/discovery/scans/{id}/summary_report/on_prem/source_code
Get On-Prem Source Code Scanned Summary report
DiscoveryScanInventory 2
APIs regarding obtaining the details about the inventory objects associated to a scan.
GET
/api/v1/discovery/scans/{id}/scan_inventory_objects
List Scan Inventory objects.
GET
/api/v1/discovery/scans/{scan_id}/scan_inventory_objects/{scan_inventory_object_id}
Get a scan inventory object
DiscoveryServicesReports 4
APIs regarding obtaining the reports for Services.
GET
/api/v1/discovery/scans/{id}/services_report/aws/by_account
Get AWS Services report grouped by account.
GET
/api/v1/discovery/scans/{id}/services_report/azure/by_subscription
Get Azure Services report grouped by subscription.
GET
/api/v1/discovery/scans/{id}/services_report/by_service
Get Services report grouped by service type.
GET
/api/v1/discovery/scans/{id}/services_report/by_violation
Get Services report grouped by violation type.
DiscoveryDsmReports 1
APIs regarding obtaining the reports related to DSM.
GET
/api/v1/discovery/scans/{id}/summary_report/dsm
Get DSM Summary report
Authentication 2
APIs regarding creating or ending a session.
POST
/api/v1/iam/session/oauth2/token
Authenticate with a token.
POST
/api/v1/iam/session/terminate
Terminate the current session.
Schemas 614
The contract defines 614 schemas that model the data the API accepts and returns. The most detailed are OauthTokenError (3 properties), OauthTokenResponse (3 properties). Each schema is shown below with its type and property counts.
DiscoveryAcmCertificate
DiscoveryAcmCertificateAnalysis
DiscoveryAcmCertificateExtendedKeyUsage
DiscoveryAcmCertificateExtendedKeyUsageName
string
DiscoveryAcmCertificateKeyAlgorithm
string
DiscoveryAcmCertificateRenewalEligibility
string
DiscoveryAcmCertificateSignatureAlgorithm
string
DiscoveryAcmCertificateStatus
string
DiscoveryAesOptionsPolicy
DiscoveryAll
string
A helper enum with a single variant, All, which indicates that something should apply to an entire part. (This is here mainly to allow other untagged enums to…
DiscoveryAriaOptionsPolicy
DiscoveryAwsAccount
DiscoveryAwsAccountDetails
DiscoveryAwsAccountKeysCount
DiscoveryAwsAccountViolationMetrics
DiscoveryAwsCertificateAssessment
DiscoveryAwsCloudDiscoveryData
DiscoveryAwsConfig
DiscoveryAwsCredentials
DiscoveryAwsCredentialsAccessAndSecretKey
DiscoveryAwsCredentialsOpenIdConnect
DiscoveryAwsCredentialsVariantAccessAndSecretKey
DiscoveryAwsCredentialsVariantOpenIdConnect
DiscoveryAwsCryptoPolicyCompliance
DiscoveryAwsDefaultServerSideEncryption
DiscoveryAwsDynamoDbInstance
DiscoveryAwsDynamoDbInstanceAnalysis
DiscoveryAwsEbsVolume
DiscoveryAwsEbsVolumeAnalysis
DiscoveryAwsEbsVolumeState
string
Enumeration of the states that a volume may occupy. This enum will default to the Other variant when a new variant is found as the SDK from AWS marks their enu…
DiscoveryAwsEbsVolumeType
string
Enumeration of the various types of volumes supported. This enum will default to the Other variant when a new variant is found as the SDK from AWS marks their…
DiscoveryAwsEfsFileSystem
DiscoveryAwsEfsFileSystemAnalysis
DiscoveryAwsEfsLifeCycleState
string
DiscoveryAwsEksCluster
DiscoveryAwsEksClusterAnalysis
DiscoveryAwsEksClusterStatus
string
DiscoveryAwsEksEncryptionStatus
string
DiscoveryAwsEncryptionStatus
string
DiscoveryAwsFilterMetadata
DiscoveryAwsKeyUsageDetails
DiscoveryAwsKeyUsageParams
DiscoveryAwsKeyUsageResponse
DiscoveryAwsKeysAssessment
DiscoveryAwsKmsExternalKeyStore
DiscoveryAwsKmsKey
DiscoveryAwsKmsKeyAnalysis
DiscoveryAwsKmsKeyManager
string
DiscoveryAwsKmsKeyOrigin
string
DiscoveryAwsKmsKeyRotationStatus
DiscoveryAwsKmsKeyRotationStatusEnabled
DiscoveryAwsKmsKeyRotationStatusVariantDisabled
DiscoveryAwsKmsKeyRotationStatusVariantEnabled
DiscoveryAwsKmsKeyRotationStatusVariantUnknown
DiscoveryAwsKmsKeySpec
string
DiscoveryAwsKmsKeyState
string
DiscoveryAwsKmsKeyUsage
string
DiscoveryAwsObject
DiscoveryAwsObjectDetails
DiscoveryAwsObjectDetailsVariantAcm
DiscoveryAwsObjectDetailsVariantDynamoDb
DiscoveryAwsObjectDetailsVariantEbs
DiscoveryAwsObjectDetailsVariantEfs
DiscoveryAwsObjectDetailsVariantEks
DiscoveryAwsObjectDetailsVariantKms
DiscoveryAwsObjectDetailsVariantRds
DiscoveryAwsObjectDetailsVariantRedshift
DiscoveryAwsObjectDetailsVariantS3
DiscoveryAwsProtectedServicesCount
DiscoveryAwsRdsDbInstance
DiscoveryAwsRdsDbInstanceAnalysis
DiscoveryAwsRedshiftCluster
DiscoveryAwsRedshiftClusterAnalysis
DiscoveryAwsRedshiftClusterStatus
string
DiscoveryAwsRedshiftEncryptionStatus
string
DiscoveryAwsRegion
string
Reference: https://docs.aws.amazon.com/general/latest/gr/rande.html
DiscoveryAwsRegionViolationMetrics
DiscoveryAwsRiskAssessment
DiscoveryAwsS3Bucket
DiscoveryAwsS3BucketAnalysis
DiscoveryAwsScanAssessmentReport
DiscoveryAwsScannedServicesReportByAccountParams
DiscoveryAwsScannedServicesResponseByAccount
DiscoveryAwsScope
The scope that current AWS credentials should have access to
DiscoveryAwsScopeAccount
DiscoveryAwsScopeVariantAccount
DiscoveryAwsScopeVariantOrganization
DiscoveryAwsServerSideEncryptionRule
DiscoveryAwsService
string
DiscoveryAwsServicesReportMetadata
DiscoveryAwsSseAlgorithm
string
DiscoveryAwsSummaryData
DiscoveryAzureCloudDiscoveryData
DiscoveryAzureConfig
DiscoveryAzureContainerGroup
DiscoveryAzureContainerGroupAnalysis
DiscoveryAzureContainerGroupEncryptionSource
DiscoveryAzureContainerGroupEncryptionSourceCustomerManagedKey
DiscoveryAzureContainerGroupEncryptionSourceVariantCustomerManagedKey
DiscoveryAzureContainerGroupEncryptionSourceVariantMicrosoftManagedKey
DiscoveryAzureCredentials
DiscoveryAzureCredentialsClientIdAndSecret
DiscoveryAzureCredentialsOpenIdConnect
DiscoveryAzureCredentialsVariantClientIdAndSecret
DiscoveryAzureCredentialsVariantOpenIdConnect
DiscoveryAzureCryptoPolicyCompliance
DiscoveryAzureDatabaseAnalysis
DiscoveryAzureDatabaseDeployment
DiscoveryAzureDatabaseDeploymentCosmosDb
DiscoveryAzureDatabaseDeploymentProperties
DiscoveryAzureDatabaseDeploymentSqlManagedInstance
DiscoveryAzureDatabaseDeploymentSqlManagedInstancePool
DiscoveryAzureDatabaseDeploymentSqlSingleServer
DiscoveryAzureDatabaseDeploymentVariantCosmosDb
DiscoveryAzureDatabaseDeploymentVariantSqlManagedInstance
DiscoveryAzureDatabaseDeploymentVariantSqlManagedInstancePool
DiscoveryAzureDatabaseDeploymentVariantSqlSingleServer
DiscoveryAzureDatabaseEncryptionDetails
DiscoveryAzureDatabaseEncryptionKeySource
Specifier for optional CMK Keys.
DiscoveryAzureDatabaseEncryptionKeySourceDatabaseLevelCustomerManagedKey
DiscoveryAzureDatabaseEncryptionKeySourceDeploymentLevelCustomerManagedKey
DiscoveryAzureDatabaseEncryptionKeySourceVariantDatabaseLevelCustomerManagedKey
DiscoveryAzureDatabaseEncryptionKeySourceVariantDeploymentLevelCustomerManagedKey
DiscoveryAzureDatabaseEncryptionKeySourceVariantDeploymentLevelMicrosoftManagedKey
DiscoveryAzureDatabaseProperties
DiscoveryAzureDiskInstanceAnalysis
DiscoveryAzureDiskState
string
Used to represent state of [AzureManagedDisk]. for reference: [Documentation](https://learn.microsoft.com/en-us/rest/api/compute/disks/list-by-resource-group?v…
DiscoveryAzureDiskType
string
Used to represent SKU of [AzureManagedDisk]. For reference: [Documentation](https://learn.microsoft.com/en-us/rest/api/compute/disks/list-by-resource-group?vie…
DiscoveryAzureEncryptionSettings
DiscoveryAzureFilterMetadata
DiscoveryAzureKeyAvailability
DiscoveryAzureKeyAvailabilitySoftDeleted
DiscoveryAzureKeyAvailabilityVariantAvailable
DiscoveryAzureKeyAvailabilityVariantSoftDeleted
DiscoveryAzureKeyCountByStatus
DiscoveryAzureKeySource
string
DiscoveryAzureKeyUsageDetails
DiscoveryAzureKeyUsageParams
DiscoveryAzureKeyUsageResponse
DiscoveryAzureKvAccessTier
string
DiscoveryAzureKvKeyAnalysis
DiscoveryAzureKvKeyAttributes
DiscoveryAzureKvKeyOperation
string
DiscoveryAzureKvKeyPolicyInfo
DiscoveryAzureKvKeyType
string
DiscoveryAzureKvKeyVersion
DiscoveryAzureKvRecoveryLevel
string
DiscoveryAzureManagedCluster
DiscoveryAzureManagedClusterAnalysis
DiscoveryAzureManagedClusterDiskEncryptionDetails
DiscoveryAzureManagedClusterDiskEncryptionDetailsEncryptionAtRestWithCustomerKey
DiscoveryAzureManagedClusterDiskEncryptionDetailsVariantEncryptionAtRestWithCustomerKey
DiscoveryAzureManagedClusterDiskEncryptionDetailsVariantEncryptionAtRestWithPlatformKey
DiscoveryAzureManagedDisk
DiscoveryAzureManagedDiskEncryptionSettings
Used to describe [Server-side encryption][1] configuration of [AzureManagedDisks] - This does not cover [Azure Disk Encryption][2] which is handled on a volume…
DiscoveryAzureManagedDiskEncryptionSettingsConfidentialVmEncryptedWithCustomerKey
DiscoveryAzureManagedDiskEncryptionSettingsEncryptionAtRestWithAzureAndCustomerKeys
DiscoveryAzureManagedDiskEncryptionSettingsEncryptionAtRestWithCustomerKey
DiscoveryAzureManagedDiskEncryptionSettingsVariantConfidentialVmEncryptedWithAzureManagedKey
DiscoveryAzureManagedDiskEncryptionSettingsVariantConfidentialVmEncryptedWithCustomerKey
DiscoveryAzureManagedDiskEncryptionSettingsVariantEncryptionAtRestWithAzureAndCustomerKeys
DiscoveryAzureManagedDiskEncryptionSettingsVariantEncryptionAtRestWithAzureManagedKey
DiscoveryAzureManagedDiskEncryptionSettingsVariantEncryptionAtRestWithCustomerKey
DiscoveryAzureObject
DiscoveryAzureObjectDetails
DiscoveryAzureObjectDetailsVariantContainerGroup
DiscoveryAzureObjectDetailsVariantDatabase
DiscoveryAzureObjectDetailsVariantKvKeyVersion
DiscoveryAzureObjectDetailsVariantManagedCluster
DiscoveryAzureObjectDetailsVariantManagedDisk
DiscoveryAzureObjectDetailsVariantStorageAccount
DiscoveryAzureObjectDetailsVariantStorageAccountBlob
DiscoveryAzureOverlyPermissiveKeyViolations
DiscoveryAzureRegion
string
DiscoveryAzureRegionViolationMetrics
DiscoveryAzureResourceGroup
DiscoveryAzureResourceGroupViolationMetrics
DiscoveryAzureRiskAssessment
DiscoveryAzureScanAssessmentReport
DiscoveryAzureScannedServicesReportBySubscriptionParams
DiscoveryAzureScannedServicesResponseBySubscription
DiscoveryAzureScope
The scope that current Azure credentials should have access to
DiscoveryAzureScopeManagementGroup
DiscoveryAzureScopeSubscription
DiscoveryAzureScopeVariantManagementGroup
DiscoveryAzureScopeVariantSubscription
DiscoveryAzureService
string
DiscoveryAzureServicesKeyCount
DiscoveryAzureServicesReportMetadata
DiscoveryAzureServicesViolationMetrics
DiscoveryAzureSqlSingleServerTier
string
The service tiers for SQL Single Server.
DiscoveryAzureStorageAccount
DiscoveryAzureStorageAccountBlob
DiscoveryAzureStorageAccountBlobAnalysis
DiscoveryAzureStorageAccountKind
string
DiscoveryAzureStorageAnalysis
DiscoveryAzureStorageKeySource
The encryption key source (provider).
DiscoveryAzureStorageKeySourceKeyVault
DiscoveryAzureStorageKeySourceVariantKeyVault
DiscoveryAzureStorageKeySourceVariantStorage
DiscoveryAzureSubscription
DiscoveryAzureSubscriptionKeysCount
DiscoveryAzureSummaryData
DiscoveryBip32OptionsPolicy
DiscoveryBlsOptionsPolicy
DiscoveryCertificateIssuer
Certificate's issuer generated from [DistinguishedName::tostring()] / parseable by [DistinguishedName::fromstr()] Certificate Distinguished Name (DN) mandated…
DiscoveryCertificateMetadata
DiscoveryCertificateOptionsPolicy
DiscoveryCertificateRevocationList
DiscoveryCertificateSigningRequest
DiscoveryCertificateSubject
Certificate's subject generated from [DistinguishedName::tostring()] / parseable by [DistinguishedName::fromstr()] Certificate Distinguished Name (DN) mandated…
DiscoveryCloudProviderServiceType
DiscoveryCloudProviderServiceTypeAws
DiscoveryCloudProviderServiceTypeAzure
DiscoveryCloudProviderServiceTypeVariantAws
DiscoveryCloudProviderServiceTypeVariantAzure
DiscoveryConnection
DiscoveryConnectionConfig
DiscoveryConnectionConfigVariantAws
DiscoveryConnectionConfigVariantAzure
DiscoveryConnectionConfigVariantDsm
DiscoveryConnectionConfigVariantDsmAgent
DiscoveryConnectionConfigVariantOnPrem
DiscoveryConnectionCorrelationData
DiscoveryConnectionCredential
DiscoveryConnectionCredentialVariantDsmAgent
DiscoveryConnectionCredentialVariantDsmCertificate
DiscoveryConnectionPolicies
DiscoveryCryptographicAlgorithm
DiscoveryCryptographicAlgorithmAes
DiscoveryCryptographicAlgorithmDes
DiscoveryCryptographicAlgorithmDsa
DiscoveryCryptographicAlgorithmEc
DiscoveryCryptographicAlgorithmEcdh
DiscoveryCryptographicAlgorithmEcdsa
DiscoveryCryptographicAlgorithmEcmqv
DiscoveryCryptographicAlgorithmEd25519
DiscoveryCryptographicAlgorithmEdDsa
DiscoveryCryptographicAlgorithmHmacSha
DiscoveryCryptographicAlgorithmOther
DiscoveryCryptographicAlgorithmRc2
DiscoveryCryptographicAlgorithmRsa
DiscoveryCryptographicAlgorithmSha
DiscoveryCryptographicAlgorithmSha3
DiscoveryCryptographicAlgorithmShake
DiscoveryCryptographicAlgorithmSike
DiscoveryCryptographicAlgorithmTripleDes
DiscoveryCryptographicMetadata
DiscoveryCryptographicPolicy
DiscoveryCspServicesMetadata
DiscoveryCspServicesMetadataVariantAws
DiscoveryCspServicesMetadataVariantAzure
DiscoveryCurve
Elliptic curves for selected crypto algorithms
DiscoveryDes3OptionsPolicy
DiscoveryDesOptionsPolicy
DiscoveryDiffieHellmanParamsMetadata
DiscoveryDigestAlgorithm
string
A hash algorithm.
DiscoveryDsaOptionsPolicy
DiscoveryDsmAgentConnectionConfig
DiscoveryDsmAgentConnectionState
DiscoveryDsmAgentConnectionStatus
string
DiscoveryDsmAgentCredential
DiscoveryDsmAgentCredentialDetails
DiscoveryDsmAgentCredentialDetailsSecret
DiscoveryDsmAgentCredentialDetailsVariantSecret
DiscoveryDsmAgentDetails
DiscoveryDsmCertificate
DiscoveryDsmConnectionConfig
DiscoveryDsmCryptoPolicyCompliance
DiscoveryDsmDeployment
DiscoveryDsmDeploymentOther
DiscoveryDsmDeploymentSaaS
DiscoveryDsmDeploymentVariantOther
DiscoveryDsmDeploymentVariantSaaS
DiscoveryDsmHmgConfig
DiscoveryDsmHmgConfigType
string
DiscoveryDsmKeyAlgorithmData
DiscoveryDsmKeysDiscoveryData
DiscoveryDsmObject
DiscoveryDsmObjectDetails
DiscoveryDsmObjectDetailsVariantDsmSobject
DiscoveryDsmRegion
string
DiscoveryDsmResourceType
string
Useful for specifying [InventoryObjectExternalId]s
DiscoveryDsmScanSummaryData
DiscoveryDsmSobject
DiscoveryDsmSobjectAnalysis
DiscoveryDsmSobjectEllipticCurve
string
DiscoveryDsmSobjectKeyLinks
DiscoveryDsmSobjectKeyOperations
string
Operations Allowed To Be Performed On A Given Key.
DiscoveryDsmSobjectOrigin
string
The origin of a security object - where it was created / generated.
DiscoveryDsmSobjectRotateCopiedKeys
DiscoveryDsmSobjectRotateCopiedKeysSelect
DiscoveryDsmSobjectRotateCopiedKeysVariantAllExternal
DiscoveryDsmSobjectRotateCopiedKeysVariantOther
DiscoveryDsmSobjectRotateCopiedKeysVariantSelect
DiscoveryDsmSobjectRotationInterval
DiscoveryDsmSobjectRotationIntervalIntervalDays
DiscoveryDsmSobjectRotationIntervalIntervalMonths
DiscoveryDsmSobjectRotationIntervalVariantIntervalDays
DiscoveryDsmSobjectRotationIntervalVariantIntervalMonths
DiscoveryDsmSobjectRotationIntervalVariantOther
DiscoveryDsmSobjectRotationPolicy
DiscoveryDsmSobjectState
string
DSM Security object operational state.
DiscoveryDsmSobjectType
string
DiscoveryDsmSummaryKeyStatus
string
DiscoveryDsmSummaryKeyStatusData
DiscoveryEcKcdsaOptionsPolicy
DiscoveryEcOptionsPolicy
DiscoveryEllipticCurve
string
Identifies a standardized elliptic curve.
DiscoveryEllipticCurveParamsMetadata
DiscoveryEncryptionMetadata
Describes whether the cryptographic material is wrapped in a symmetric key -- requiring a passphrase
DiscoveryEncryptionMetadataEncrypted
DiscoveryExpiryMetrics
DiscoveryExtendedKeyUsage
DiscoveryExtendedUsage
DiscoveryFileInfo
DiscoveryFilesystemScannedObject
DiscoveryFpeCharSet
The alphabet to use for an encrypted portion of a complex tokenization data type. Characters should be specified as a list of pairs, where each pair [a, b] rep…
DiscoveryFpeChecksum
string
DiscoveryFpeCode
DiscoveryFpeCompoundPart
Structure of a compound portion of a complex tokenization data type, itself composed of smaller parts.
DiscoveryFpeCompoundPartConcat
DiscoveryFpeCompoundPartMultiple
DiscoveryFpeCompoundPartOr
DiscoveryFpeConstraints
DiscoveryFpeConstraintsApplicability
A structure indicating which subparts to which to apply a set of constraints.
DiscoveryFpeDataPart
Structure for specifying (part of) a complex tokenization data type.
DiscoveryFpeDataPartLiteral
DiscoveryFpeDate
A structure for specifying a token part representing a date that occurs after a specified date and/or occurs before a specified date. Depending on the subparts…
DiscoveryFpeDateConstraint
Possible date-related constraint types for a portion of a complex tokenization data type.
DiscoveryFpeDateDayMonthYear
DiscoveryFpeDateMonthDay
DiscoveryFpeDateMonthYear
DiscoveryFpeDatePart
string
Possible date-related constraint types that do not form a complete date (by themselves) for a complex tokenization data type.
DiscoveryFpeDayMonthDate
DiscoveryFpeDayMonthYearDate
DiscoveryFpeEncryptedPart
DiscoveryFpeFormatV2
DiscoveryFpeGroup
DiscoveryFpeInputProcessing
string
Options to apply some pre- and post-processing to the input.
DiscoveryFpeMonthYearDate
DiscoveryFpeOptions
FPE-specific options (for specifying the format of the data to be encrypted)
DiscoveryFpeOptionsAdvanced
DiscoveryFpeOptionsBasic
DiscoveryFpeOptionsV2
DiscoveryFpePreserveMask
A structure indicating which indices in an encrypted part to mask or preserve.
DiscoveryFpeSection
DiscoveryFpeTokenizeMode
string
How to tokenize a given input. The most secure option is "PreserveFormat".
DiscoveryFpeVariant
DiscoveryFpeWords
A set of fixed-length strings.
DiscoveryFpeWordsCustom
DiscoveryFpeWordsIntegerRanges
DiscoveryGetAllConnectionsMetadata
DiscoveryGetAllConnectionsParams
DiscoveryGetAllConnectionsResponse
DiscoveryGetAllPoliciesMetadata
DiscoveryGetAllPoliciesParams
DiscoveryGetAllPoliciesResponse
DiscoveryGetAllScansResponse
DiscoveryHmacOptionsPolicy
DiscoveryHostInfo
DiscoveryInventoryObject
DiscoveryInventoryObjectExternalId
an enum that maps to unique identifier provided by Cloud/Onprem
DiscoveryInventoryObjectExternalIdAws
DiscoveryInventoryObjectExternalIdAzure
DiscoveryInventoryObjectExternalIdDsm
DiscoveryInventoryObjectExternalIdOnPrem
DiscoveryInventoryObjectExternalIdOnPremFs
DiscoveryInventoryObjectExternalIdVariantAws
DiscoveryInventoryObjectExternalIdVariantAzure
DiscoveryInventoryObjectExternalIdVariantDsm
DiscoveryInventoryObjectExternalIdVariantOnPrem
DiscoveryInventoryObjectExternalIdVariantOnPremFs
DiscoveryInventoryObjectInfo
DiscoveryInventoryObjectOwner
DiscoveryInventoryObjectOwnershipDetails
DiscoveryInventoryObjectsParams
DiscoveryInventoryObjectsResponse
DiscoveryJweHeaderMetadata
DiscoveryJwsHeaderMetadata
DiscoveryJwtHeader
DiscoveryJwtMetadata
DiscoveryKcdsaOptionsPolicy
DiscoveryKeyAvailability
string
This enum will be used for denoting key availability for all services in all cloud providers. Each variant corresponds to different states of key used to encry…
DiscoveryKeyEncryptUsageDetails
DiscoveryKeyOperations
string
Operations allowed to be performed on a given key. SIGN: If this is set, the key can be used to for signing. VERIFY: If this is set, the key can used for verif…
DiscoveryKeyPolicyId
DiscoveryKeyPolicyIdAwsGrantId
DiscoveryKeyPolicyIdAwsKeyPolicySid
DiscoveryKeyPolicyIdVariantAwsGrantId
DiscoveryKeyPolicyIdVariantAwsKeyPolicySid
DiscoveryKeyUsage
string
DiscoveryKeyUsageDetails
DiscoveryLegacyKeyPolicy
string
DiscoveryLmsOptionsPolicy
DiscoveryMgfPolicy
MGF policy.
DiscoveryMgfPolicyMgf1
DiscoveryMlDsaOptionsPolicy
DiscoveryMlKemOptionsPolicy
DiscoveryOnPremCbomComponentType
string
DiscoveryOnPremConnection
DiscoveryOnPremConnectionAuth
DiscoveryOnPremConnectionAuthVariantCertificate
DiscoveryOnPremConnectionAuthVariantSecret
DiscoveryOnPremConnectionConfig
DiscoveryOnPremConnectionState
DiscoveryOnPremConnectionStatus
string
DiscoveryOnPremCryptoPolicyCompliance
DiscoveryOnPremDatabaseAssessmentCryptoAssetMetrics
DiscoveryOnPremDatabaseAssessmentResourceMetrics
DiscoveryOnPremDatabaseCryptoAssetMetrics
DiscoveryOnPremDatabaseKeyMetrics
DiscoveryOnPremDatabaseKeyMetricsByStatus
DiscoveryOnPremDatabaseResourceEncryptionMetrics
DiscoveryOnPremDatabaseResourceMetrics
DiscoveryOnPremDatabaseResourceViolations
DiscoveryOnPremDatabaseRiskAssessment
DiscoveryOnPremDatabaseScanAssessmentReport
DiscoveryOnPremDatabaseScanSummaryReport
DiscoveryOnPremDatabaseSummaryCryptoAssetMetrics
DiscoveryOnPremDatabaseVariant
string
DiscoveryOnPremDatabaseVariantViolations
DiscoveryOnPremDetails
DiscoveryOnPremDiscoveryData
DiscoveryOnPremEncryptionAlgorithm
string
DiscoveryOnPremFsAgentAnalysis
DiscoveryOnPremFsAgentInfo
DiscoveryOnPremFsAnalysis
DiscoveryOnPremFsAssessmentCryptoAssetMetrics
DiscoveryOnPremFsAssessmentResourceMetrics
DiscoveryOnPremFsAssetType
string
DiscoveryOnPremFsCertificateAnalysis
DiscoveryOnPremFsCertificateMetrics
DiscoveryOnPremFsCertificateStatus
string
DiscoveryOnPremFsCertificateViolationMetrics
DiscoveryOnPremFsCertificateViolationMetricsBucket
DiscoveryOnPremFsCryptoAssetMetrics
DiscoveryOnPremFsObject
DiscoveryOnPremFsOperatingSystemMetrics
DiscoveryOnPremFsOsAnalysis
DiscoveryOnPremFsScanAssessmentReport
DiscoveryOnPremFsScanSummaryReport
DiscoveryOnPremFsSummaryCryptoAssetMetrics
DiscoveryOnPremFsSummaryResourceMetrics
DiscoveryOnPremFsSummaryRiskScore
DiscoveryOnPremFsSummaryRiskScoreMetrics
DiscoveryOnPremFsViolation
string
DiscoveryOnPremFsViolationMetrics
DiscoveryOnPremFsViolationMetricsBucket
DiscoveryOnPremKey
DiscoveryOnPremKeyAnalysis
DiscoveryOnPremKeyCategory
string
DiscoveryOnPremKeyExpirationCompliance
DiscoveryOnPremKeyRotationCompliance
string
DiscoveryOnPremKeyRotationStatus
DiscoveryOnPremKeyRotationStatusRotated
DiscoveryOnPremKeyRotationStatusVariantNotRotated
DiscoveryOnPremKeyRotationStatusVariantRotated
DiscoveryOnPremKeyRotationStatusVariantUnknown
DiscoveryOnPremKeySource
string
DiscoveryOnPremKeyStatus
string
DiscoveryOnPremMsSqlDatabase
DiscoveryOnPremMsSqlDatabaseAnalysis
DiscoveryOnPremMsSqlDatabaseEncryption
DiscoveryOnPremMsSqlDatabaseEncryptionKeyUse
string
DiscoveryOnPremMsSqlDatabaseEncryptionStatus
string
DiscoveryOnPremObject
DiscoveryOnPremObjectDetails
DiscoveryOnPremObjectDetailsVariantFilesystem
DiscoveryOnPremObjectDetailsVariantOnPremKey
DiscoveryOnPremObjectDetailsVariantOnPremMsSqlDatabase
DiscoveryOnPremObjectDetailsVariantOnPremOracleDatabase
DiscoveryOnPremObjectDetailsVariantOnPremSourceCodeComponent
DiscoveryOnPremObjectDetailsVariantOnPremSourceCodeRepo
DiscoveryOnPremOracleDatabase
DiscoveryOnPremOracleDatabaseAnalysis
DiscoveryOnPremOracleDatabaseEncryption
DiscoveryOnPremOracleDatabaseEncryptionKeyDetails
DiscoveryOnPremOracleDatabaseEncryptionKeyUse
string
DiscoveryOnPremOracleDatabaseEncryptionWalletStatus
string
DiscoveryOnPremPreviousCredential
DiscoveryOnPremResourceHostDetails
DiscoveryOnPremScanSummaryReport
DiscoveryOnPremService
string
DiscoveryOnPremSourceCodeAssessmentCryptoAssetMetrics
DiscoveryOnPremSourceCodeComponent
DiscoveryOnPremSourceCodeComponentAnalysis
DiscoveryOnPremSourceCodeComponentCryptoSpec
DiscoveryOnPremSourceCodeComponentCryptoSpecOther
DiscoveryOnPremSourceCodeComponentDetails
DiscoveryOnPremSourceCodeComponentOccurrence
DiscoveryOnPremSourceCodeCryptoAssetMetrics
DiscoveryOnPremSourceCodeRepo
DiscoveryOnPremSourceCodeRepoAnalysis
DiscoveryOnPremSourceCodeRepositoryViolations
DiscoveryOnPremSourceCodeResourceMetrics
DiscoveryOnPremSourceCodeResourceViolations
DiscoveryOnPremSourceCodeRiskAssessment
DiscoveryOnPremSourceCodeScanAssessmentReport
DiscoveryOnPremSourceCodeScanSummaryReport
DiscoveryOnPremSourceCodeSummaryCryptoAssetMetrics
DiscoveryOnPremSourceCodeViolationRepositoryMetrics
DiscoveryOnPremViolation
string
DiscoveryOpaqueOptionsPolicy
DiscoveryOpenSshPrivateKeyMetadata
DiscoveryOpenSshPublicKeyMetadata
DiscoveryOverlyPermissiveViolations
DiscoveryOwnerAndFlags
DiscoveryParametersMetadata
DiscoveryPermissionFlag
string
DiscoveryPermissions
DiscoveryPgpMessageMetadata
string
DiscoveryPgpMetadata
DiscoveryPgpPrivateKeyMetadata
DiscoveryPgpPublicKeyMetadata
DiscoveryPgpSignatureMetadata
DiscoveryPkcs12MacMetadata
DiscoveryPkcs12Metadata
DiscoveryPkcs7Attribute
DiscoveryPkcs7DataMetadata
DiscoveryPkcs7DataWithAttributesMetadata
DiscoveryPkcs7DigestedDataMetadata
DiscoveryPkcs7EncryptedDataMetadata
DiscoveryPkcs7EncryptedPrivateKeyInfoMetadata
DiscoveryPkcs7EnvelopedDataMetadata
DiscoveryPkcs7Metadata
DiscoveryPkcs7SignedAndEnvelopedDataMetadata
DiscoveryPkcs7SignedDataMetadata
DiscoveryPkcs7SignerIdentifieroMetadata
DiscoveryPkcs7SignerIdentifieroMetadataIssuerAndSerialNumber
DiscoveryPkcs7SignerIdentifieroMetadataSubjectKeyIdentifier
DiscoveryPkcs7SignerInfoMetadata
DiscoveryPolicy
DiscoveryPolicyDetails
DiscoveryPolicyDetailsVariantCryptoPolicy
DiscoveryPolicySource
DiscoveryPolicySourceVariantDsm
DiscoveryPolicySourceVariantSystemDefined
DiscoveryPolicySourceVariantUserDefined
DiscoveryPqcCumulativeReport
DiscoveryPqcReport
DiscoveryPqcReportCertificatesViolationMetrics
DiscoveryPqcReportCertificatesViolationMetricsForService
DiscoveryPqcReportConnectionParams
DiscoveryPqcReportConnectionType
string
DiscoveryPqcReportConnections
DiscoveryPqcReportConnectionsResponse
DiscoveryPqcReportKeysViolationMetrics
DiscoveryPqcReportKeysViolationMetricsForService
DiscoveryPqcReportMetrics
DiscoveryPqcReportResourceMetrics
DiscoveryPqcReportResourceViolationMetricsForService
DiscoveryPqcReportResourcesViolationMetrics
DiscoveryPqcReportService
DiscoveryPqcReportServiceParams
DiscoveryPqcReportServiceType
string
DiscoveryPqcReportServicesResponse
DiscoveryPqcReportViolationMetricsForConnection
DiscoveryPqcReportVulnerabilityStatus
string
DiscoveryPrivateKeyMetadata
DiscoveryPuTTYKeyMetadata
DiscoveryPublicKeyMetadata
DiscoveryResourceSummary
DiscoveryRevokedCertificate
DiscoveryRiskLevel
string
DiscoveryRsaEncryptionPaddingPolicy
RSA encryption padding policy.
DiscoveryRsaEncryptionPaddingPolicyOaep
DiscoveryRsaEncryptionPolicy
DiscoveryRsaOptionsPolicy
DiscoveryRsaSignaturePaddingPolicy
RSA signature padding policy.
DiscoveryRsaSignaturePaddingPolicyPss
DiscoveryRsaSignaturePolicy
DiscoveryScan
DiscoveryScanInventoryObject
DiscoveryScanInventoryObjectDetails
DiscoveryScanInventoryObjectDetailsVariantAws
DiscoveryScanInventoryObjectDetailsVariantAzure
DiscoveryScanInventoryObjectDetailsVariantDsm
DiscoveryScanInventoryObjectDetailsVariantOnPrem
DiscoveryScanInventoryObjectReference
DiscoveryScanInventoryObjects
DiscoveryScanInventoryObjectsParams
DiscoveryScanParams
DiscoveryScanStatus
string
DiscoveryScannedAwsAccount
DiscoveryScannedAwsAccountDetails
DiscoveryScannedAwsAccountsParams
DiscoveryScannedAwsAccountsResponse
DiscoveryScannedAzureSubscription
DiscoveryScannedAzureSubscriptionDetails
DiscoveryScannedAzureSubscriptionsParams
DiscoveryScannedAzureSubscriptionsResponse
DiscoveryScannedServicesReportByServiceTypeParams
DiscoveryScannedServicesReportByViolationTypeParams
DiscoveryScannedServicesResponseByServiceType
DiscoveryScannedServicesResponseByViolationType
DiscoverySecretOptionsPolicy
DiscoverySeedOptionsPolicy
DiscoveryServiceMetadataMetrics
DiscoveryServiceViolationMetrics
DiscoveryServiceViolationMetricsWithOverallRisk
DiscoveryServicesMetadata
DiscoverySlip10OptionsPolicy
DiscoverySshMetadata
DiscoverySymmetricKeyMetadata
DiscoveryTrustedCertificateMetadata
DiscoveryViolation
string
DiscoveryViolationDetails
DiscoveryViolationMetrics
DiscoveryViolationTypeMetrics
DiscoveryXmssOptionsPolicy
OauthTokenError
object
3 properties
2 required
OauthTokenErrorCode
string
Conforms to RFC 6749 Section 5.2.
OauthTokenResponse
object
3 properties
3 required
Specification
The full machine-readable OpenAPI contract behind this narrative.
Source
More from Fortanix 2
Other APIs Fortanix publishes across the network.
Fortanix Data Security Manager REST API
Fortanix Confidential Computing Manager REST API
#Cryptographic Discovery#Post-Quantum#Key Insight#Security Posture
Where this information came from
This is an independent, third-party profile of Fortanix Armor and Key Insight API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.
The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.
Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.
info@apievangelist.com
·
Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and
you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.