InfraAssetsSecurityInfo
A single record containing an infrastructure asset group and its associated DFW firewall
rules and IDS rules per service category and service entity. Use the hierarchy field to
determine whether this record represents the global group or a hierarchy-scoped group.
{
"site_id": "string",
"service_category_id": "string",
"service_entity_id": "string",
"hierarchy": [
{
"scope": "Application",
"value": "E-Commerce Platform",
"level": 0
}
],
"segmentation_object": {
"id": "infra-001",
"display_name": "SSP_Infra_US-West_AZ1_Dev_NTP_Group",
"segmentation_type": "INFRASTRUCTURE_ASSET",
"status": "SUCCESS",
"infrastructure_asset_alerts": [],
"hierarchy": [
{
"scope": "Region",
"value": "US-West",
"level": 0
},
{
"scope": "Zone",
"value": "AZ1",
"level": 1
},
{
"scope": "Environment",
"value": "Dev",
"level": 2
}
],
"realization_groups": [
{
"display_name": "SSP_Infra_US-West_AZ1_Dev_NTP_Group",
"site_id": "a1b2c3d4-e5f6-7890-1234-567890abcdef",
"realization_id": "b9c0d1e2-f3a4-5678-9012-345678bcdefg",
"status": "SUCCESS",
"policy_path": "/infra/domains/default/groups/infra-001",
"tags": [
{
"scope": "Region",
"tag": "US"
},
{
"scope": "Zone",
"tag": "AZ1"
},
{
"scope": "Environment",
"tag": "Dev"
},
{
"scope": "sspinfra.service",
"tag": "NTP"
}
]
}
]
},
"security_policy_info": {
"dfw_rules": {
"dfw_policy_path": "/infra/domains/default/security-policies/dfw-policy-1",
"traffic_rules": [
{
"rule_id": 1,
"rule_path": "/infra/domains/default/security-policies/dfw-policy-1/rules/dfw-rule-1",
"rule_action": "ALLOW"
}
],
"lockdown_rules": [
{
"rule_id": 2,
"rule_path": "/infra/domains/default/security-policies/dfw-policy-1/rules/dfw-rule-2",
"rule_action": "DROP"
}
]
},
"ids_rules": {
"ids_policy_path": "/infra/domains/default/intrusion-service-policies/ids-policy-1",
"rules": [
{
"rule_id": 12345,
"rule_path": "/infra/domains/default/intrusion-service-policies/ids-policy-1/rules/ids-rule-1",
"action": "DETECT",
"ids_profiles": [
"ids-default"
]
}
]
}
}
}Unique identifier of the site this record belongs to.
Unique identifier of the infrastructure service category this record belongs to.
Use this value to call GET /service-categories/{id} for full category details.
Unique identifier of the infrastructure service entity this record belongs to.
The hierarchical position of this infrastructure asset group within the infrastructure hierarchy.
When null, this record represents the global (non-hierarchical) group for the category.
When populated, this record represents a hierarchy-scoped group (e.g., region > zone > env).
The NSX segmentation object (group) for this infrastructure asset group. Each record represents
one group; a category may have multiple records (one per hierarchical level plus a global
record). When hierarchy is null, this is the global group. When hierarchy is
populated, this is the hierarchy-scoped group.
Combined DFW and IDS policy information (traffic rules, lockdown rules, IDS rules) for this group.