How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

CloudGuard Inventory - AWS IAM API

AWS IAM inventory - users, roles, policies, virtual MFA devices and credential objects CloudGuard fetches for identity posture analysis.

CloudGuard Inventory - AWS IAM API is one of 25 APIs that CloudGuard publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Inventory, IAM, and Identity. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, an API reference, and authentication docs.

This API exposes 11 operations across 11 paths, organized into 9 resource areas, and defines 23 schemas. It is described by OpenAPI 3.0.0, at version v2.

Requests are made against 2 base URLs: https://api.dome9.com/, https://api.{region}.dome9.com/.

11 operations 11 paths 23 schemas 11 GET

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.0.0
API Version
v2
Base URL
https://api.dome9.com
Authentication
HTTP Basic
Resource Areas
9

Authentication & Security 1

CloudGuard Inventory - AWS IAM API declares 1 security scheme for authenticating requests. It accepts HTTP basic authentication (basic). By default, every request must be authenticated.

Paths & Operations 11

Across 11 paths, the API surfaces 11 operations — 11 GET. They span 9 resource areas: Cloud Iam Account Summary, Cloud Iam Credential Report, Cloud Iam Group, Cloud Iam Password Policy, Cloud Iam Policy, Cloud Iam Role, Cloud Iam Server Certificate, Cloud Iam User, Cloud Iam Virtual Mfa Device. Each is listed below with its method, path, parameters, and response codes.

Cloud Iam Account Summary 1
GET
/v2/CloudIamAccountSummary
Get
CloudIamAccountSummary_Get_get_/v2/CloudIamAccountSummary → 200
Cloud Iam Credential Report 2
GET
/v2/CloudIamCredentialReport/user
Get User
CloudIamCredentialReport_GetUser_get_/v2/CloudIamCredentialReport/user 2 params → 200
GET
/v2/CloudIamCredentialReport
Get
CloudIamCredentialReport_Get_get_/v2/CloudIamCredentialReport → 200
Cloud Iam Group 1
GET
/v2/CloudIamGroup
Get
CloudIamGroup_Get_get_/v2/CloudIamGroup → 200
Cloud Iam Password Policy 1
GET
/v2/CloudIamPasswordPolicy
Get
CloudIamPasswordPolicy_Get_get_/v2/CloudIamPasswordPolicy → 200
Cloud Iam Policy 2
GET
/v2/CloudIamPolicy/defaults
Get Defaults
CloudIamPolicy_GetDefaultsAsync_get_/v2/CloudIamPolicy/defaults 1 param → 200
GET
/v2/CloudIamPolicy
Get
CloudIamPolicy_GetAsync_get_/v2/CloudIamPolicy 2 params → 200
Cloud Iam Role 1
GET
/v2/CloudIamRole
Get
CloudIamRole_Get_get_/v2/CloudIamRole 1 param → 200
Cloud Iam Server Certificate 1
GET
/v2/CloudIamServerCertificate
Get
CloudIamServerCertificate_Get_get_/v2/CloudIamServerCertificate → 200
Cloud Iam User 1
GET
/v2/CloudIamUser
Get
CloudIamUser_GetAsync_get_/v2/CloudIamUser → 200
Cloud Iam Virtual Mfa Device 1
GET
/v2/CloudIamVirtualMfaDevice
Get
CloudIamVirtualMfaDevice_Get_get_/v2/CloudIamVirtualMfaDevice → 200

Schemas 23

The contract defines 23 schemas that model the data the API accepts and returns. The most detailed are Dome9.Web.Api.Models.CloudIamRoleViewModel (15 properties), Dome9.Web.Api.Models.CloudIamPasswordPolicy (14 properties), Dome9.Web.Api.Models.CloudIamUserViewModel (14 properties), Dome9.Web.Api.CloudIamPolicyViewModel (14 properties). Each schema is shown below with its type and property counts.

Dome9.Web.Api.Models.CloudIamRoleViewModel
object
15 properties
Dome9.Web.Api.CloudIamRoles.AwsIamRoleLastUsedViewModel
object
2 properties
Dome9.Web.Api.CloudIamRoles.AwsIamRolePolicyViewModel
object
2 properties
Dome9.Web.Api.CloudIamRoles.CloudIamRoleInlinePolicyViewModel
object
2 properties
Dome9.Web.Api.Models.CloudIamRoleViewModel.PermissionsBoundary
object
2 properties
Dome9.Web.Api.CloudIamAccountSummary.CloudIamAccountSummaryViewModel
object
7 properties
Dome9.Web.Api.CloudIamCredentialReport.CloudIamCredentialReportUserViewModel
object
12 properties
Dome9.Web.Api.CloudIamCredentialReport.CloudIamCredentialReportUserAccessKeyViewModel
object
5 properties
Dome9.Web.Api.CloudIamCredentialReport.CloudIamCredentialReportUserCertificateViewModel
object
2 properties
Dome9.Web.Api.CloudIamCredentialReport.CloudIamCredentialReportViewModel
object
10 properties
Dome9.Web.Api.CloudIamGroups.CloudIamGroupViewModel
object
10 properties
Dome9.Web.Api.CloudIamGroupPolicy.AwsIamGroupPolicyViewModel
object
2 properties
Dome9.Web.Api.CloudIamGroups.CloudIamGroupInlinePolicyViewModel
object
2 properties
Dome9.Web.Api.Models.CloudIamPasswordPolicy
object
14 properties
Dome9.Web.Api.CloudIamPolicyViewModel
object
14 properties
Dome9.Web.Api.CloudIamPolicyVersionViewModel
object
4 properties
Dome9.Web.Api.CloudIamServerCertificate.CloudIamServerCertificateViewModel
object
6 properties
Dome9.Web.Api.Models.CloudIamUserViewModel
object
14 properties
Dome9.Web.Api.SubTypes.CloudIamUserAttachedManagedPolicyViewModel
object
2 properties
Dome9.Web.Api.SubTypes.CloudIamUserInlinePolicyViewModel
object
2 properties
Dome9.Web.Api.Models.CloudIamUserViewModel.PermissionsBoundary
object
2 properties
Dome9.Web.Api.Models.CloudIamUserViewModel.SSHPublicKeyMetaDataViewModel
object
4 properties
Dome9.Web.Api.CloudIamVirtualMfaDevices.CloudIamVirtualMfaDeviceViewModel
object
9 properties

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

cloudguard-inventory-aws-iam-openapi.yml Raw ↑

Other APIs CloudGuard publishes across the network.

CloudGuard Onboarding API
CloudGuard Posture Management API
CloudGuard Events API
CloudGuard Administration API
CloudGuard Risk Management API
CloudGuard Workload Protection (CWPP) API
CloudGuard Network Security API
CloudGuard Identity API
CloudGuard Intelligence API
CloudGuard Inventory API
CloudGuard Inventory - AWS Global API
CloudGuard Inventory - AWS Compute and Containers API
Where this information came from

This is an independent, third-party profile of CloudGuard Inventory - AWS IAM API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.