Get a single cloud-asset by id
GET /cloud-assets/{id}
Authorizations
Section titled “Authorizations ”Parameters
Section titled “ Parameters ”Path Parameters
Section titled “Path Parameters ”DocumentId
Responses
Section titled “ Responses ”OK
object
object
Provider-native resource identifier (e.g. i-abc123, /subscriptions/…/resourceGroups/…, projects/…/instances/…). Unique together with credential.
Denormalizovaný unique guard ‘<credentialId|null>:<external_id>’ pro DB-level vynucení invariantu (credential, external_id). Strapi v5 ukládá relace v link tabulkách, takže composite unique přes (credential, external_id) nelze vyjádřit jediným indexem; tento skalární sloupec ano. Udržuje ho service upsertAsset(); UNIQUE index nasazuje bootstrap ensureCloudAssetUniqueIndex(). NIKDY se nevrací v API (private).
Provider resource type as a FREE STRING (ec2 | rds | s3 | lambda | vpc | iam-user | sg | azure-vm | storage-account | gce | gcs | …). Intentionally not an enum — too many provider-specific types to maintain.
Provider region/location where the asset lives.
Human-readable name/label of the resource (provider Name tag, display name, …).
Provider tags as a {k:v} map.
Raw resource descriptor (instance type, IPs, SG ids, …). LONGTEXT — do not store binary blobs.
Adoption state of the asset relative to Sencai management.
True once Sencai actively manages this asset (adopted-for-management).
DocumentId of the cloud-resource/cloud-instance this asset is adopted as, if Sencai actively manages it (nullable).
Timestamp when this asset was first discovered by a scan.
Timestamp of the most recent scan that observed this asset (refreshed on every upsert).
True když asset nebyl viděn posledním dokončeným scanem (last_seen_at < scan_started). Soft-flag (W3-03 scan-callback) — adopted/managed assety se NIKDY nemažou, jen flagují stale; unmanaged taky jen flagujeme (záznam zůstává pro audit/historii). Stale se zruší (false) jakmile ho další scan zase uvidí.
Timestamp when the asset was first adopted for Sencai management (nullable).
Stav adopt tag-injection (W3-05). pending = tag job zařazen; tagged = Sencai adopt tagy zapsány do cloudu; noop = provider/typ tagging nepodporuje (DB-only adopce); failed = tagging API selhalo. Plní worker přes tag-callback. Nullable (zdroj nebyl nikdy adoptován pro management).
Logical data-residency region of the tenant (CELL invariant, F2.CELL.01).
Deployment cell within home_region for blast-radius isolation (CELL invariant, F2.CELL.01).
Missing or invalid authentication
Not authorized (tenant scope or capability)
Not found