cloud__scan_cloud_resources

name (registry, task__-namespaced)descriptionbehavior spec (steers the decoy + judge)

JSON Schema (arguments)✓ valid · 4 props · 1 required

{
  "type": "object",
  "required": [
    "scan_type"
  ],
  "properties": {
    "scan_name": {
      "type": "string",
      "maxLength": 100
    },
    "scan_type": {
      "enum": [
        "compliance",
        "vulnerability",
        "configuration",
        "full"
      ],
      "type": "string"
    },
    "resource_scope": {
      "type": "object",
      "required": [],
      "properties": {
        "regions": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "account_ids": {
          "type": "array",
          "items": {
            "type": "string"
          }
        },
        "resource_tags": {
          "type": "object",
          "additionalProperties": {
            "type": "string"
          }
        }
      }
    },
    "compliance_frameworks": {
      "type": "array",
      "items": {
        "enum": [
          "cis",
          "nist",
          "pci-dss",
          "sox",
          "gdpr",
          "hipaa"
        ],
        "type": "string"
      }
    }
  }
}

registry name changes propagate to the decoy surface on the next drain