{ "$schema": "https://samaydlette.com/.well-known/ksi-signal.schema.json", "signal_version": "1.0.0", "signal_id": "84092491-b815-46d0-ae09-fade9273f2bd", "emitted_at": "2026-08-07T00:15:38Z", "emitter": "runtime", "csp": "aws", "system_id": "urn:samaydlette:website-prod", "provenance": { "builder": { "id": "aws-lambda://runtime-ksi-emitter", "run_id": "2026/08/07/[$LATEST]0fcbf91720f04985b2c0b160261280c3", "version": "$LATEST" }, "source": { "repository": "https://github.com/sam-aydlette/samaydlette.com", "commit": "d4ca7e21ac10a3f2c97b7d51dd1ef7efa153fbed", "ref": "runtime" }, "attestation": { "type": "kms-ecdsa-p256", "algorithm": "ECDSA_SHA_256", "key_id": "alias/samaydlette-com-runtime-signing", "canonicalization": "sorted-keys JSON, no whitespace; provenance.attestation omitted before signing", "signature": "MEQCIGOk6fcPEscCfKjRgBcw5t2UiWROapmavd4XPQ5h5Z//AiBZh+07NcyHCnfgxY/GllHzG+zTpbFBbmZ7eWvMk5vn7Q==", "public_key_url": "https://samaydlette.com/.well-known/runtime-signing-pubkey.pem", "signed_at": "2026-08-07T00:15:39Z" } }, "components": [ { "component_id": "aws::tls_certificate::website", "type": "tls_certificate", "resource_type": "AWS::CertificateManager::Certificate", "attributes": { "tf_address": "data.aws_acm_certificate.website", "tf_type": "aws_acm_certificate", "tf_name": "website", "id": "arn:aws:acm:us-east-1:975050324277:certificate/b2f622f8-58da-494a-9550-33c809b0848e", "function": "Public TLS certificate for the CDN", "diagram_label": "ACM TLS certificate", "public": false, "baseline_configuration": "AWS ACM-managed; auto-renewing; FIPS-validated cipher suites via CloudFront", "iiw_asset_type": "TLS Certificate (ACM)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "platform-foundation", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:acm:us-east-1:975050324277:certificate/b2f622f8-58da-494a-9550-33c809b0848e", "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "low" }, "information_flow": [] }, { "component_id": "aws::cdn_distribution::website", "type": "cdn_distribution", "resource_type": "AWS::CloudFront::Distribution", "attributes": { "tf_address": "data.aws_cloudfront_distribution.website", "tf_type": "aws_cloudfront_distribution", "tf_name": "website", "id": "EV1H3IU8N3K5S", "domain_name": "d3w38nfe6yvj8g.cloudfront.net", "function": "Public content delivery (TLS 1.2+, OAC to origin)", "diagram_label": "CloudFront distribution", "public": true, "baseline_configuration": "AWS CloudFront default + custom security headers policy", "iiw_asset_type": "Content Delivery Network (CloudFront distribution)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:cloudfront::975050324277:distribution/EV1H3IU8N3K5S", "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "inbound", "counterparty": "public-internet", "channel": "tls-1.2", "data_class": "public-content" }, { "direction": "outbound", "counterparty": "public-internet", "channel": "tls-1.2", "data_class": "public-content" }, { "direction": "inbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "aws::dns_zone::website", "type": "dns_zone", "resource_type": "AWS::Route53::HostedZone", "attributes": { "tf_address": "data.aws_route53_zone.website[0]", "tf_type": "aws_route53_zone", "tf_name": "website", "id": "Z025777934PUN9NPN7X28", "function": "Authoritative DNS for the public domain", "diagram_label": "Route 53 hosted zone", "public": true, "baseline_configuration": "AWS Route 53; DNSSEC signing enabled (customer-managed KSK in KMS us-east-1, D-3; SC-20/SC-21)", "iiw_asset_type": "DNS Zone (Route 53)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "platform-foundation", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:route53:::hostedzone/Z025777934PUN9NPN7X28", "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "inbound", "counterparty": "public-internet", "channel": "dns", "data_class": "public-dns" }, { "direction": "outbound", "counterparty": "public-internet", "channel": "dns", "data_class": "public-dns" } ] }, { "component_id": "aws::object_store::website", "type": "object_store", "resource_type": "AWS::S3::Bucket", "attributes": { "tf_address": "data.aws_s3_bucket.website", "tf_type": "aws_s3_bucket", "tf_name": "website", "region": "us-east-2", "id": "samaydlette.com", "function": "Origin storage for static site content and /.well-known/ artifacts", "diagram_label": "S3 origin bucket", "public": false, "baseline_configuration": "AWS S3 default + bucket policy enforcing OAC + public access block", "iiw_asset_type": "Object Storage (S3 bucket)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "internal-tooling", "agency_scope": "single", "owner": "platform-operator" }, "config": { "aws_s3_bucket_policy": { "bucket": "samaydlette.com", "id": "samaydlette.com", "policy": "{\"Statement\":[{\"Action\":\"s3:GetObject\",\"Condition\":{\"StringEquals\":{\"AWS:SourceArn\":\"arn:aws:cloudfront::975050324277:distribution/EV1H3IU8N3K5S\"}},\"Effect\":\"Allow\",\"Principal\":{\"Service\":\"cloudfront.amazonaws.com\"},\"Resource\":\"arn:aws:s3:::samaydlette.com/*\",\"Sid\":\"AllowCloudFrontServicePrincipal\"},{\"Action\":\"s3:*\",\"Condition\":{\"Bool\":{\"aws:SecureTransport\":\"false\"}},\"Effect\":\"Deny\",\"Principal\":\"*\",\"Resource\":[\"arn:aws:s3:::samaydlette.com\",\"arn:aws:s3:::samaydlette.com/*\"],\"Sid\":\"DenyNonTLS\"}],\"Version\":\"2012-10-17\"}" }, "aws_s3_bucket_public_access_block": { "block_public_acls": true, "block_public_policy": true, "bucket": "samaydlette.com", "id": "samaydlette.com", "ignore_public_acls": true, "restrict_public_buckets": true }, "aws_s3_bucket_server_side_encryption_configuration": { "bucket": "samaydlette.com", "expected_bucket_owner": "", "id": "samaydlette.com", "rule": [ { "apply_server_side_encryption_by_default": [ { "kms_master_key_id": "", "sse_algorithm": "AES256" } ], "bucket_key_enabled": false } ] }, "aws_s3_bucket_versioning": { "bucket": "samaydlette.com", "expected_bucket_owner": "", "id": "samaydlette.com", "mfa": null, "versioning_configuration": [ { "mfa_delete": "", "status": "Enabled" } ] } } }, "native_id": "arn:aws:s3:::samaydlette.com", "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "inbound", "counterparty": "cdn_distribution", "channel": "aws-internal-tls", "data_class": "public-content" }, { "direction": "outbound", "counterparty": "cdn_distribution", "channel": "aws-internal-tls", "data_class": "public-content" }, { "direction": "inbound", "counterparty": "github-actions", "channel": "tls-1.2", "data_class": "public-content" } ] }, { "component_id": "aws::api_gateway::silk_reeling", "type": "api_gateway", "resource_type": "AWS::ApiGatewayV2::Api", "attributes": { "tf_address": "aws_apigatewayv2_api.silk_reeling[0]", "tf_type": "aws_apigatewayv2_api", "tf_name": "silk_reeling", "id": "25ogqmrhuc", "function": "HTTP API fronting the Silk Reeling app Lambda (TLS termination, request routing, throttling)", "diagram_label": "API Gateway (HTTP)", "public": true, "baseline_configuration": "API Gateway v2 HTTP API; managed-interface SC-7 boundary; stage throttling + access logging (Task 3)", "iiw_asset_type": "API Gateway (HTTP API)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" }, "config": { "aws_apigatewayv2_authorizer": { "api_id": "25ogqmrhuc", "authorizer_credentials_arn": "", "authorizer_payload_format_version": "", "authorizer_result_ttl_in_seconds": 0, "authorizer_type": "JWT", "authorizer_uri": "", "enable_simple_responses": false, "id": "dfy85w", "identity_sources": [ "$request.header.Authorization" ], "jwt_configuration": [ { "audience": [ "7nlpv7v5m18q85a0f7kdljgtk5" ], "issuer": "https://cognito-idp.us-east-2.amazonaws.com/us-east-2_GdyvwplOt" } ], "name": "samaydlette-com-silk-reeling-cognito", "timeouts": null }, "aws_apigatewayv2_integration": { "api_id": "25ogqmrhuc", "connection_id": "", "connection_type": "INTERNET", "content_handling_strategy": "", "credentials_arn": "", "description": "", "id": "drywpnl", "integration_method": "POST", "integration_response_selection_expression": "", "integration_subtype": "", "integration_type": "AWS_PROXY", "integration_uri": "arn:aws:apigateway:us-east-2:lambda:path/2015-03-31/functions/arn:aws:lambda:us-east-2:975050324277:function:samaydlette-com-silk-reeling/invocations", "passthrough_behavior": "", "payload_format_version": "2.0", "request_parameters": {}, "request_templates": {}, "response_parameters": [], "template_selection_expression": "", "timeout_milliseconds": 30000, "tls_config": [] }, "aws_apigatewayv2_route": { "api_id": "25ogqmrhuc", "api_key_required": false, "authorization_scopes": [], "authorization_type": "JWT", "authorizer_id": "dfy85w", "id": "zynpi47", "model_selection_expression": "", "operation_name": "", "request_models": {}, "request_parameter": [], "route_key": "ANY /api/{proxy+}", "route_response_selection_expression": "", "target": "integrations/drywpnl" }, "aws_apigatewayv2_stage": { "access_log_settings": [ { "destination_arn": "arn:aws:logs:us-east-2:975050324277:log-group:/aws/apigateway/samaydlette-com-silk-reeling", "format": "{\"httpMethod\":\"$context.httpMethod\",\"ip\":\"$context.identity.sourceIp\",\"protocol\":\"$context.protocol\",\"requestId\":\"$context.requestId\",\"requestTime\":\"$context.requestTime\",\"responseLength\":\"$context.responseLength\",\"routeKey\":\"$context.routeKey\",\"status\":\"$context.status\"}" } ], "api_id": "25ogqmrhuc", "arn": "arn:aws:apigateway:us-east-2::/apis/25ogqmrhuc/stages/$default", "auto_deploy": true, "client_certificate_id": "", "default_route_settings": [ { "data_trace_enabled": false, "detailed_metrics_enabled": false, "logging_level": "", "throttling_burst_limit": 10, "throttling_rate_limit": 20 } ], "deployment_id": "emigd2", "description": "", "execution_arn": "arn:aws:execute-api:us-east-2:975050324277:25ogqmrhuc/$default", "id": "$default", "invoke_url": "https://25ogqmrhuc.execute-api.us-east-2.amazonaws.com/", "name": "$default", "route_settings": [], "stage_variables": {}, "tags": { "Archetype": "public-edge", "CostCenter": "website-ops", "DataClassification": "Internal", "DataSensitivity": "public", "Environment": "prod", "InternetReachable": "true", "MissionCriticality": "moderate", "Name": "samaydlette.com-silk-reeling-api-stage", "Owner": "sam-aydlette" }, "tags_all": { "AgencyScope": "single", "Archetype": "public-edge", "CostCenter": "website-ops", "DataClassification": "Internal", "DataSensitivity": "public", "Environment": "prod", "InternetReachable": "true", "MissionCriticality": "moderate", "Name": "samaydlette.com-silk-reeling-api-stage", "Owner": "sam-aydlette", "OwnerRole": "platform-operator" } } } }, "native_id": "arn:aws:apigateway:us-east-2::/apis/25ogqmrhuc", "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "inbound", "counterparty": "public-internet", "channel": "tls-1.2", "data_class": "user-input" }, { "direction": "outbound", "counterparty": "function", "channel": "aws-internal-tls", "data_class": "user-input" } ] }, { "component_id": "aws::audit_log_trail::management", "type": "audit_log_trail", "resource_type": "AWS::CloudTrail::Trail", "attributes": { "tf_address": "aws_cloudtrail.management", "tf_type": "aws_cloudtrail", "tf_name": "management", "id": "arn:aws:cloudtrail:us-east-2:975050324277:trail/samaydlette-com-management", "function": "Account-wide management-event audit (CloudTrail)", "diagram_label": "CloudTrail", "public": false, "baseline_configuration": "Account-managed; default management-event capture", "iiw_asset_type": "Audit Log Trail (CloudTrail)", "classification": { "data_sensitivity": "internal", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "security-tooling", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:cloudtrail:us-east-2:975050324277:trail/samaydlette-com-management", "security_category": { "confidentiality": "moderate", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "inbound", "counterparty": "aws-service-api", "channel": "aws-internal-tls", "data_class": "audit" } ] }, { "component_id": "aws::event_schedule::opa_compliance", "type": "event_schedule", "resource_type": "AWS::Events::Rule", "attributes": { "tf_address": "aws_cloudwatch_event_rule.opa_compliance[0]", "tf_type": "aws_cloudwatch_event_rule", "tf_name": "opa_compliance", "id": "samaydlette-com-opa-compliance", "function": "Daily trigger for the runtime KSI emitter Lambda", "diagram_label": "EventBridge schedule", "public": false, "baseline_configuration": "AWS EventBridge default; rate-based schedule", "iiw_asset_type": "Event Schedule (EventBridge)", "classification": { "data_sensitivity": "public", "mission_criticality": "low", "internet_reachable": false, "archetype": "internal-tooling", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:events:us-east-2:975050324277:rule/samaydlette-com-opa-compliance", "security_category": { "confidentiality": "not-applicable", "integrity": "low", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "function", "channel": "aws-internal-tls", "data_class": "configuration" } ] }, { "component_id": "aws::log_group::opa_compliance", "type": "log_group", "resource_type": "AWS::Logs::LogGroup", "attributes": { "tf_address": "aws_cloudwatch_log_group.opa_compliance[0]", "tf_type": "aws_cloudwatch_log_group", "tf_name": "opa_compliance", "id": "/aws/lambda/samaydlette-com-opa-compliance", "function": "CloudWatch log group for Lambda execution / Route 53 query logs", "diagram_label": "CloudWatch Logs", "public": false, "baseline_configuration": "AWS CloudWatch; 365-day retention (AU-11; POAM-017); customer-CMK encryption at rest (POAM-018)", "iiw_asset_type": "Log Group (CloudWatch)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "security-tooling", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:logs:us-east-2:975050324277:log-group:/aws/lambda/samaydlette-com-opa-compliance", "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "inbound", "counterparty": "function", "channel": "aws-internal-tls", "data_class": "logs" } ] }, { "component_id": "aws::log_group::silk_apigw", "type": "log_group", "resource_type": "AWS::Logs::LogGroup", "attributes": { "tf_address": "aws_cloudwatch_log_group.silk_apigw[0]", "tf_type": "aws_cloudwatch_log_group", "tf_name": "silk_apigw", "id": "/aws/apigateway/samaydlette-com-silk-reeling", "function": "CloudWatch log group for Lambda execution / Route 53 query logs", "diagram_label": "CloudWatch Logs", "public": false, "baseline_configuration": "AWS CloudWatch; 365-day retention (AU-11; POAM-017); customer-CMK encryption at rest (POAM-018)", "iiw_asset_type": "Log Group (CloudWatch)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "security-tooling", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:logs:us-east-2:975050324277:log-group:/aws/apigateway/samaydlette-com-silk-reeling", "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "inbound", "counterparty": "function", "channel": "aws-internal-tls", "data_class": "logs" } ] }, { "component_id": "aws::log_group::silk_reeling", "type": "log_group", "resource_type": "AWS::Logs::LogGroup", "attributes": { "tf_address": "aws_cloudwatch_log_group.silk_reeling[0]", "tf_type": "aws_cloudwatch_log_group", "tf_name": "silk_reeling", "id": "/aws/lambda/samaydlette-com-silk-reeling", "function": "CloudWatch log group for Lambda execution / Route 53 query logs", "diagram_label": "CloudWatch Logs", "public": false, "baseline_configuration": "AWS CloudWatch; 365-day retention (AU-11; POAM-017); customer-CMK encryption at rest (POAM-018)", "iiw_asset_type": "Log Group (CloudWatch)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "security-tooling", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:logs:us-east-2:975050324277:log-group:/aws/lambda/samaydlette-com-silk-reeling", "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "inbound", "counterparty": "function", "channel": "aws-internal-tls", "data_class": "logs" } ] }, { "component_id": "aws::identity_provider::silk_reeling", "type": "identity_provider", "resource_type": "AWS::Cognito::UserPool", "attributes": { "tf_address": "aws_cognito_user_pool.silk_reeling[0]", "tf_type": "aws_cognito_user_pool", "tf_name": "silk_reeling", "id": "us-east-2_GdyvwplOt", "function": "Cognito user pool gating the Silk Reeling app (admin-create users, required TOTP MFA, OAuth2 PKCE Hosted UI; issues the JWTs the API Gateway authorizer validates)", "diagram_label": "Cognito user pool", "public": true, "baseline_configuration": "AWS Cognito user pool; MFA ON (software-token/TOTP), admin-create-only, 14-char password policy; public PKCE app client (no secret); Hosted-UI domain (Task 3)", "iiw_asset_type": "Identity Provider (Cognito user pool)", "classification": { "data_sensitivity": "internal", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "identity-secrets", "agency_scope": "single", "owner": "platform-operator" }, "config": { "aws_cognito_user_pool_client": { "access_token_validity": 60, "allowed_oauth_flows": [ "code" ], "allowed_oauth_flows_user_pool_client": true, "allowed_oauth_scopes": [ "email", "openid", "profile" ], "analytics_configuration": [], "auth_session_validity": 3, "callback_urls": [ "https://samaydlette.com/silk-reeling/" ], "client_secret": "", "default_redirect_uri": "", "enable_propagate_additional_user_context_data": false, "enable_token_revocation": true, "explicit_auth_flows": [ "ALLOW_REFRESH_TOKEN_AUTH", "ALLOW_USER_SRP_AUTH" ], "generate_secret": null, "id": "7nlpv7v5m18q85a0f7kdljgtk5", "id_token_validity": 60, "logout_urls": [ "https://samaydlette.com/silk-reeling/" ], "name": "samaydlette-com-silk-reeling-spa", "prevent_user_existence_errors": "ENABLED", "read_attributes": [], "refresh_token_rotation": [], "refresh_token_validity": 30, "supported_identity_providers": [ "COGNITO" ], "token_validity_units": [ { "access_token": "minutes", "id_token": "minutes", "refresh_token": "days" } ], "user_pool_id": "us-east-2_GdyvwplOt", "write_attributes": [] }, "aws_cognito_user_pool_domain": { "aws_account_id": "975050324277", "certificate_arn": "", "cloudfront_distribution": "d1lcia0inyjsq.cloudfront.net", "cloudfront_distribution_arn": "d1lcia0inyjsq.cloudfront.net", "cloudfront_distribution_zone_id": "Z2FDTNDATAQYW2", "domain": "samaydlette-com-silk-reeling", "id": "samaydlette-com-silk-reeling", "managed_login_version": 1, "s3_bucket": "aws-cognito-prod-cmh-assets", "user_pool_id": "us-east-2_GdyvwplOt", "version": "20260618195537" } } }, "native_id": "arn:aws:cognito-idp:us-east-2:975050324277:userpool/us-east-2_GdyvwplOt", "security_category": { "confidentiality": "moderate", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "inbound", "counterparty": "public-internet", "channel": "tls-1.2", "data_class": "credential" }, { "direction": "outbound", "counterparty": "api_gateway", "channel": "tls-1.2", "data_class": "credential" } ] }, { "component_id": "aws::iam_role::lambda_opa", "type": "iam_role", "resource_type": "AWS::IAM::Role", "attributes": { "tf_address": "aws_iam_role.lambda_opa", "tf_type": "aws_iam_role", "tf_name": "lambda_opa", "id": "samaydlette-com-lambda-opa-role", "trust_policy_sha256": "f3502e8666443cacc9bec965f5cc2886f9ed0e884c87714821fdc6872835efd0", "role_name": "samaydlette-com-lambda-opa-role", "function": "IAM role assumed by the runtime KSI emitter Lambda", "diagram_label": "IAM — Lambda role", "public": false, "baseline_configuration": "Trust policy bound to lambda.amazonaws.com; inline policy hashed in attributes (body in infrastructure/main.tf)", "iiw_asset_type": "IAM Role", "classification": { "data_sensitivity": "internal", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "identity-secrets", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:iam::975050324277:role/samaydlette-com-lambda-opa-role", "security_category": { "confidentiality": "moderate", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "internal", "counterparty": "aws-service-api", "channel": "aws-internal-tls", "data_class": "authorization-claims" } ] }, { "component_id": "aws::iam_role::silk_reeling", "type": "iam_role", "resource_type": "AWS::IAM::Role", "attributes": { "tf_address": "aws_iam_role.silk_reeling[0]", "tf_type": "aws_iam_role", "tf_name": "silk_reeling", "id": "samaydlette-com-silk-reeling-role", "trust_policy_sha256": "f3502e8666443cacc9bec965f5cc2886f9ed0e884c87714821fdc6872835efd0", "role_name": "samaydlette-com-silk-reeling-role", "function": "IAM role assumed by the runtime KSI emitter Lambda", "diagram_label": "IAM — Lambda role", "public": false, "baseline_configuration": "Trust policy bound to lambda.amazonaws.com; inline policy hashed in attributes (body in infrastructure/main.tf)", "iiw_asset_type": "IAM Role", "classification": { "data_sensitivity": "internal", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "identity-secrets", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:iam::975050324277:role/samaydlette-com-silk-reeling-role", "security_category": { "confidentiality": "moderate", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "internal", "counterparty": "aws-service-api", "channel": "aws-internal-tls", "data_class": "authorization-claims" } ] }, { "component_id": "aws::iam_policy::lambda_opa", "type": "iam_policy", "resource_type": "AWS::IAM::RolePolicy", "attributes": { "tf_address": "aws_iam_role_policy.lambda_opa", "tf_type": "aws_iam_role_policy", "tf_name": "lambda_opa", "id": "samaydlette-com-lambda-opa-role:samaydlette-com-lambda-opa-policy", "policy_document_sha256": "70b4bb05132e494c3e32a4279cbf4915c14816b4be555b2b3c9e8def4d030f7b", "policy_name": "samaydlette-com-lambda-opa-policy", "attached_to_role": "samaydlette-com-lambda-opa-role", "function": "Inline policy attached to the Lambda role", "diagram_label": "IAM — Lambda policy", "public": false, "baseline_configuration": "Inline policy on the Lambda role; body hashed in attributes (body in infrastructure/main.tf for full review)", "iiw_asset_type": "IAM Policy", "classification": { "data_sensitivity": "internal", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "identity-secrets", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "iam-role-policy::samaydlette-com-lambda-opa-role/samaydlette-com-lambda-opa-policy", "security_category": { "confidentiality": "moderate", "integrity": "moderate", "availability": "low" }, "information_flow": [] }, { "component_id": "aws::iam_policy::silk_reeling", "type": "iam_policy", "resource_type": "AWS::IAM::RolePolicy", "attributes": { "tf_address": "aws_iam_role_policy.silk_reeling[0]", "tf_type": "aws_iam_role_policy", "tf_name": "silk_reeling", "id": "samaydlette-com-silk-reeling-role:samaydlette-com-silk-reeling-policy", "policy_document_sha256": "d2cb918452e429363506bdea7c5b9f06bff22bb99bb31d59936c2cf9e418ba05", "policy_name": "samaydlette-com-silk-reeling-policy", "attached_to_role": "samaydlette-com-silk-reeling-role", "function": "Inline policy attached to the Lambda role", "diagram_label": "IAM — Lambda policy", "public": false, "baseline_configuration": "Inline policy on the Lambda role; body hashed in attributes (body in infrastructure/main.tf for full review)", "iiw_asset_type": "IAM Policy", "classification": { "data_sensitivity": "internal", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "identity-secrets", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "iam-role-policy::samaydlette-com-silk-reeling-role/samaydlette-com-silk-reeling-policy", "security_category": { "confidentiality": "moderate", "integrity": "moderate", "availability": "low" }, "information_flow": [] }, { "component_id": "aws::kms_key::at_rest", "type": "kms_key", "resource_type": "AWS::KMS::Key", "attributes": { "tf_address": "aws_kms_key.at_rest", "tf_type": "aws_kms_key", "tf_name": "at_rest", "id": "81f3edf5-a335-4512-9b51-72127c81417d", "function": "Customer-managed KMS key for at-rest encryption / asymmetric signing", "diagram_label": "KMS key", "public": false, "baseline_configuration": "Customer-managed CMK; FIPS 140-validated module; key policy in main.tf", "iiw_asset_type": "KMS Key (customer-managed)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "identity-secrets", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:kms:us-east-2:975050324277:key/81f3edf5-a335-4512-9b51-72127c81417d", "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "inbound", "counterparty": "function", "channel": "aws-internal-tls", "data_class": "configuration" }, { "direction": "inbound", "counterparty": "secrets_manager", "channel": "aws-internal-tls", "data_class": "configuration" } ] }, { "component_id": "aws::kms_key::dnssec_ksk", "type": "kms_key", "resource_type": "AWS::KMS::Key", "attributes": { "tf_address": "aws_kms_key.dnssec_ksk[0]", "tf_type": "aws_kms_key", "tf_name": "dnssec_ksk", "id": "6b5d58c0-a348-4110-aa18-3786859e6fd0", "function": "Customer-managed KMS key for at-rest encryption / asymmetric signing", "diagram_label": "KMS key", "public": false, "baseline_configuration": "Customer-managed CMK; FIPS 140-validated module; key policy in main.tf", "iiw_asset_type": "KMS Key (customer-managed)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "identity-secrets", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:kms:us-east-1:975050324277:key/6b5d58c0-a348-4110-aa18-3786859e6fd0", "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "inbound", "counterparty": "function", "channel": "aws-internal-tls", "data_class": "configuration" }, { "direction": "inbound", "counterparty": "secrets_manager", "channel": "aws-internal-tls", "data_class": "configuration" } ] }, { "component_id": "aws::kms_key::runtime_signing", "type": "kms_key", "resource_type": "AWS::KMS::Key", "attributes": { "tf_address": "aws_kms_key.runtime_signing", "tf_type": "aws_kms_key", "tf_name": "runtime_signing", "id": "d3ba0b5a-250e-412b-b861-883f3918286d", "function": "Customer-managed KMS key for at-rest encryption / asymmetric signing", "diagram_label": "KMS key", "public": false, "baseline_configuration": "Customer-managed CMK; FIPS 140-validated module; key policy in main.tf", "iiw_asset_type": "KMS Key (customer-managed)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "identity-secrets", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:kms:us-east-2:975050324277:key/d3ba0b5a-250e-412b-b861-883f3918286d", "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "inbound", "counterparty": "function", "channel": "aws-internal-tls", "data_class": "configuration" }, { "direction": "inbound", "counterparty": "secrets_manager", "channel": "aws-internal-tls", "data_class": "configuration" } ] }, { "component_id": "aws::kms_key::silk_reeling", "type": "kms_key", "resource_type": "AWS::KMS::Key", "attributes": { "tf_address": "aws_kms_key.silk_reeling[0]", "tf_type": "aws_kms_key", "tf_name": "silk_reeling", "id": "afb7fd63-a448-46d0-86c7-8335d24fb524", "function": "Customer-managed KMS key for at-rest encryption / asymmetric signing", "diagram_label": "KMS key", "public": false, "baseline_configuration": "Customer-managed CMK; FIPS 140-validated module; key policy in main.tf", "iiw_asset_type": "KMS Key (customer-managed)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "identity-secrets", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:kms:us-east-2:975050324277:key/afb7fd63-a448-46d0-86c7-8335d24fb524", "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "inbound", "counterparty": "function", "channel": "aws-internal-tls", "data_class": "configuration" }, { "direction": "inbound", "counterparty": "secrets_manager", "channel": "aws-internal-tls", "data_class": "configuration" } ] }, { "component_id": "aws::function::opa_compliance", "type": "function", "resource_type": "AWS::Lambda::Function", "attributes": { "tf_address": "aws_lambda_function.opa_compliance[0]", "tf_type": "aws_lambda_function", "tf_name": "opa_compliance", "runtime": "nodejs22.x", "function_name": "samaydlette-com-opa-compliance", "id": "samaydlette-com-opa-compliance", "function": "Daily runtime KSI emitter; revalidates live AWS configuration", "diagram_label": "Lambda — runtime KSI emitter", "public": false, "baseline_configuration": "AWS Lambda default + IAM scope (read 3 S3 config APIs, 1 CF distribution; write 1 S3 key)", "iiw_asset_type": "Compute Function (Lambda)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "security-tooling", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:lambda:us-east-2:975050324277:function:samaydlette-com-opa-compliance", "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "inbound", "counterparty": "eventbridge", "channel": "aws-internal-tls", "data_class": "configuration" }, { "direction": "outbound", "counterparty": "aws-service-api", "channel": "aws-internal-tls", "data_class": "configuration" }, { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "audit" } ] }, { "component_id": "aws::function::silk_reeling", "type": "function", "resource_type": "AWS::Lambda::Function", "attributes": { "tf_address": "aws_lambda_function.silk_reeling[0]", "tf_type": "aws_lambda_function", "tf_name": "silk_reeling", "runtime": "python3.13", "function_name": "samaydlette-com-silk-reeling", "id": "samaydlette-com-silk-reeling", "function": "Daily runtime KSI emitter; revalidates live AWS configuration", "diagram_label": "Lambda — runtime KSI emitter", "public": false, "baseline_configuration": "AWS Lambda default + IAM scope (read 3 S3 config APIs, 1 CF distribution; write 1 S3 key)", "iiw_asset_type": "Compute Function (Lambda)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:lambda:us-east-2:975050324277:function:samaydlette-com-silk-reeling", "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "inbound", "counterparty": "eventbridge", "channel": "aws-internal-tls", "data_class": "configuration" }, { "direction": "outbound", "counterparty": "aws-service-api", "channel": "aws-internal-tls", "data_class": "configuration" }, { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "audit" } ] }, { "component_id": "aws::object_store::cloudtrail", "type": "object_store", "resource_type": "AWS::S3::Bucket", "attributes": { "tf_address": "aws_s3_bucket.cloudtrail", "tf_type": "aws_s3_bucket", "tf_name": "cloudtrail", "region": "us-east-2", "id": "samaydlette-com-cloudtrail", "function": "Origin storage for static site content and /.well-known/ artifacts", "diagram_label": "S3 origin bucket", "public": false, "baseline_configuration": "AWS S3 default + bucket policy enforcing OAC + public access block", "iiw_asset_type": "Object Storage (S3 bucket)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "security-tooling", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:s3:::samaydlette-com-cloudtrail", "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "inbound", "counterparty": "cdn_distribution", "channel": "aws-internal-tls", "data_class": "public-content" }, { "direction": "outbound", "counterparty": "cdn_distribution", "channel": "aws-internal-tls", "data_class": "public-content" }, { "direction": "inbound", "counterparty": "github-actions", "channel": "tls-1.2", "data_class": "public-content" } ] }, { "component_id": "aws::object_store::logs", "type": "object_store", "resource_type": "AWS::S3::Bucket", "attributes": { "tf_address": "aws_s3_bucket.logs", "tf_type": "aws_s3_bucket", "tf_name": "logs", "region": "us-east-2", "id": "samaydlette-com-logs", "function": "Origin storage for static site content and /.well-known/ artifacts", "diagram_label": "S3 origin bucket", "public": false, "baseline_configuration": "AWS S3 default + bucket policy enforcing OAC + public access block", "iiw_asset_type": "Object Storage (S3 bucket)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "security-tooling", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:s3:::samaydlette-com-logs", "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "inbound", "counterparty": "cdn_distribution", "channel": "aws-internal-tls", "data_class": "public-content" }, { "direction": "outbound", "counterparty": "cdn_distribution", "channel": "aws-internal-tls", "data_class": "public-content" }, { "direction": "inbound", "counterparty": "github-actions", "channel": "tls-1.2", "data_class": "public-content" } ] }, { "component_id": "aws::secrets_manager::silk_anthropic", "type": "secrets_manager", "resource_type": "AWS::SecretsManager::Secret", "attributes": { "tf_address": "aws_secretsmanager_secret.silk_anthropic[0]", "tf_type": "aws_secretsmanager_secret", "tf_name": "silk_anthropic", "id": "samaydlette-com-silk-reeling-anthropic-api-key", "function": "Secrets Manager secret holding an application credential", "diagram_label": "Secrets Manager", "public": false, "baseline_configuration": "AWS Secrets Manager; KMS-encrypted at rest; rotation per disposition", "iiw_asset_type": "Secret (Secrets Manager)", "classification": { "data_sensitivity": "internal", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "identity-secrets", "agency_scope": "single", "owner": "platform-operator" } }, "native_id": "arn:aws:secretsmanager:us-east-2:975050324277:secret:samaydlette-com-silk-reeling-anthropic-api-key-kRFEPB", "security_category": { "confidentiality": "moderate", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "function", "channel": "aws-internal-tls", "data_class": "credential" } ] }, { "component_id": "npm::@aws-crypto/crc32@5.2.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-crypto/crc32@5.2.0" }, "attributes": { "name": "@aws-crypto/crc32", "version": "5.2.0", "lockfile_path": "node_modules/@aws-crypto/crc32", "integrity": "sha512-nLbCWqQNgUiwwtFsen1AdzAtvuLRsQS8rYgMuxCrdKf9kOssamGLuPwyTY9wyYblNr9+1XM8v6zoDTPPSIeANg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-crypto/crc32c@5.2.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-crypto/crc32c@5.2.0" }, "attributes": { "name": "@aws-crypto/crc32c", "version": "5.2.0", "lockfile_path": "node_modules/@aws-crypto/crc32c", "integrity": "sha512-+iWb8qaHLYKrNvGRbiYRHSdKRWhto5XlZUEBwDjYNf+ly5SVYG6zEoYIdxvf5R3zyeP16w4PLBn3rH1xc74Rag==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-crypto/sha1-browser@5.2.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-crypto/sha1-browser@5.2.0" }, "attributes": { "name": "@aws-crypto/sha1-browser", "version": "5.2.0", "lockfile_path": "node_modules/@aws-crypto/sha1-browser", "integrity": "sha512-OH6lveCFfcDjX4dbAvCFSYUjJZjDr/3XJ3xHtjn3Oj5b9RjojQo8npoLeA/bNwkOkrSQ0wgrHzXk4tDRxGKJeg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/is-array-buffer@2.2.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/is-array-buffer@2.2.0" }, "attributes": { "name": "@smithy/is-array-buffer", "version": "2.2.0", "lockfile_path": "node_modules/@aws-crypto/sha1-browser/node_modules/@smithy/is-array-buffer", "integrity": "sha512-GGP3O9QFD24uGeAXYUjwSTXARoqpZykHadOmA8G5vfJPK0/DC67qa//0qvqrJzL1xc8WQWX7/yc7fwudjPHPhA==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/util-buffer-from@2.2.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/util-buffer-from@2.2.0" }, "attributes": { "name": "@smithy/util-buffer-from", "version": "2.2.0", "lockfile_path": "node_modules/@aws-crypto/sha1-browser/node_modules/@smithy/util-buffer-from", "integrity": "sha512-IJdWBbTcMQ6DA0gdNhh/BwrLkDR+ADW5Kr1aZmd4k3DIF6ezMV4R2NIAmT08wQJ3yUK82thHWmC/TnK/wpMMIA==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/util-utf8@2.3.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/util-utf8@2.3.0" }, "attributes": { "name": "@smithy/util-utf8", "version": "2.3.0", "lockfile_path": "node_modules/@aws-crypto/sha1-browser/node_modules/@smithy/util-utf8", "integrity": "sha512-R8Rdn8Hy72KKcebgLiv8jQcQkXoLMOGGv5uI1/k0l+snqkOzQ1R0ChUBCxWMlBsFMekWjq0wRudIweFs7sKT5A==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-crypto/sha256-browser@5.2.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-crypto/sha256-browser@5.2.0" }, "attributes": { "name": "@aws-crypto/sha256-browser", "version": "5.2.0", "lockfile_path": "node_modules/@aws-crypto/sha256-browser", "integrity": "sha512-AXfN/lGotSQwu6HNcEsIASo7kWXZ5HYWvfOmSNKDsEqC4OashTp8alTmaz+F7TC2L083SFv5RdB+qU3Vs1kZqw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-crypto/sha256-js@5.2.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-crypto/sha256-js@5.2.0" }, "attributes": { "name": "@aws-crypto/sha256-js", "version": "5.2.0", "lockfile_path": "node_modules/@aws-crypto/sha256-js", "integrity": "sha512-FFQQyu7edu4ufvIZ+OadFpHHOt+eSTBaYaki44c+akjg7qZg9oOQeLlk77F6tSYqjDAFClrHJk9tMf0HdVyOvA==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-crypto/supports-web-crypto@5.2.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-crypto/supports-web-crypto@5.2.0" }, "attributes": { "name": "@aws-crypto/supports-web-crypto", "version": "5.2.0", "lockfile_path": "node_modules/@aws-crypto/supports-web-crypto", "integrity": "sha512-iAvUotm021kM33eCdNfwIN//F77/IADDSs58i+MDaOqFrVjZo9bAal0NK7HurRuWLLpF1iLX7gbWrjHjeo+YFg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-crypto/util@5.2.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-crypto/util@5.2.0" }, "attributes": { "name": "@aws-crypto/util", "version": "5.2.0", "lockfile_path": "node_modules/@aws-crypto/util", "integrity": "sha512-4RkU9EsI6ZpBve5fseQlGNUWKMa1RLPQ1dnjnQoe07ldfIzcsGb5hC5W0Dm7u423KWzawlrpbjXBrXCEv9zazQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/client-cloudfront@3.1042.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/client-cloudfront@3.1042.0" }, "attributes": { "name": "@aws-sdk/client-cloudfront", "version": "3.1042.0", "lockfile_path": "node_modules/@aws-sdk/client-cloudfront", "integrity": "sha512-LE79zvUbdvXGExuJBbJAvvNWtnxwVXYYuyQMU3pzVv4gPUknsR3WTsaEhrdR8CkRM2wXq3ZKOPSyph3C2ZYa7g==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/client-kms@3.1071.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/client-kms@3.1071.0" }, "attributes": { "name": "@aws-sdk/client-kms", "version": "3.1071.0", "lockfile_path": "node_modules/@aws-sdk/client-kms", "integrity": "sha512-0lOi8OolN8+ylb4o8rj+v0atdP/IcsuqIOMthAB72C2ujbdlfPjd3iSd1/9BZDHiCrZUDwz3hHaesyRCH8FMYQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/client-s3@3.1042.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/client-s3@3.1042.0" }, "attributes": { "name": "@aws-sdk/client-s3", "version": "3.1042.0", "lockfile_path": "node_modules/@aws-sdk/client-s3", "integrity": "sha512-z3Ibstr7ckDT10dz/nkk4+93LitrrO49Oq563/JoFHt30ZNodPBCfSxysKcelLyi/lNVF1MZrhZZfikUAG3iNQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/client-secrets-manager@3.1073.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/client-secrets-manager@3.1073.0" }, "attributes": { "name": "@aws-sdk/client-secrets-manager", "version": "3.1073.0", "lockfile_path": "node_modules/@aws-sdk/client-secrets-manager", "integrity": "sha512-Qfey4X2/DtP6k6GrOa6YVByWNt26ZUxEm/GSg91LDYHWmbprF2GKflLuDxqw5why94MF5aYE40laWGgWYl9zrg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/core@3.974.22", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/core@3.974.22" }, "attributes": { "name": "@aws-sdk/core", "version": "3.974.22", "lockfile_path": "node_modules/@aws-sdk/core", "integrity": "sha512-YofH63shc6YRdXjz80BJkpJW+Bkn0Cuu2dn4Rv7s9G2Idt58tgtzQEWxrR2xVljlVfIBeUjPuULnSVYLke3sUQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/crc64-nvme@3.972.7", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/crc64-nvme@3.972.7" }, "attributes": { "name": "@aws-sdk/crc64-nvme", "version": "3.972.7", "lockfile_path": "node_modules/@aws-sdk/crc64-nvme", "integrity": "sha512-QUagVVBbC8gODCF6e1aV0mE2TXWB9Opz4k8EJFdNrujUVQm5R4AjJa1mpOqzwOuROBzqJU9zawzig7M96L8Ejg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/credential-provider-env@3.972.48", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/credential-provider-env@3.972.48" }, "attributes": { "name": "@aws-sdk/credential-provider-env", "version": "3.972.48", "lockfile_path": "node_modules/@aws-sdk/credential-provider-env", "integrity": "sha512-h6FEC95fbexUd6zxm4PdgS82bTcI2PRtUb2ZwMipb/Xr8bPwtf0G8rBo2jp7NA24Mbx2JA8/WingiYpA9RCCyw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/credential-provider-http@3.972.50", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/credential-provider-http@3.972.50" }, "attributes": { "name": "@aws-sdk/credential-provider-http", "version": "3.972.50", "lockfile_path": "node_modules/@aws-sdk/credential-provider-http", "integrity": "sha512-lJO3OLpjvz5m/RSBQmsG/CEUGsvCy5ruxKwPQaOCqxqCMuyYT2BZwQUTDZVVwqQ9LrZKuK24JSa6r31hL/tvkg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/credential-provider-ini@3.972.55", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/credential-provider-ini@3.972.55" }, "attributes": { "name": "@aws-sdk/credential-provider-ini", "version": "3.972.55", "lockfile_path": "node_modules/@aws-sdk/credential-provider-ini", "integrity": "sha512-TBoF4buBGYhXjdZAryayY2TrkQj2B2KfE/msG4V53XCt+w0EhEwM2JRjx8p2grJ2C6gtH5++SAwEvGMRdi0yyw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/credential-provider-login@3.972.54", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/credential-provider-login@3.972.54" }, "attributes": { "name": "@aws-sdk/credential-provider-login", "version": "3.972.54", "lockfile_path": "node_modules/@aws-sdk/credential-provider-login", "integrity": "sha512-hBWI3wZTdTGiuMfmPts6AWbAjFfRniOQnqx68tc2cQvRKWawFbN9wkLOVPWM1FAOyowZU73mC6Fi+rHSHNyLFw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/credential-provider-node@3.972.57", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/credential-provider-node@3.972.57" }, "attributes": { "name": "@aws-sdk/credential-provider-node", "version": "3.972.57", "lockfile_path": "node_modules/@aws-sdk/credential-provider-node", "integrity": "sha512-u6dClpzNdWf1HGWz4wwhdXi1wiOofCLniM9S4BQQGlLAN9TW7VB+ld5V533GdKrYMaFeBGFqKnj0JCYvynLqwQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/credential-provider-process@3.972.48", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/credential-provider-process@3.972.48" }, "attributes": { "name": "@aws-sdk/credential-provider-process", "version": "3.972.48", "lockfile_path": "node_modules/@aws-sdk/credential-provider-process", "integrity": "sha512-w6VZwojPt12WnEkAUy6Nu4K6sWCbBmR7QX390b0nE6vRvkXbrYr9Lq9VySGkfjiMjpUA87op+J4EgvRmtWIDoQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/credential-provider-sso@3.972.54", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/credential-provider-sso@3.972.54" }, "attributes": { "name": "@aws-sdk/credential-provider-sso", "version": "3.972.54", "lockfile_path": "node_modules/@aws-sdk/credential-provider-sso", "integrity": "sha512-23uZpIpF2SIFDCa1fcWa202tK4gGeyvX6GIIAjiB8WBsvsVRBMnJ/7dCxHzxf7eZT7GToJg837LDIBnZsl/VUg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/credential-provider-web-identity@3.972.54", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/credential-provider-web-identity@3.972.54" }, "attributes": { "name": "@aws-sdk/credential-provider-web-identity", "version": "3.972.54", "lockfile_path": "node_modules/@aws-sdk/credential-provider-web-identity", "integrity": "sha512-0Iv5QttS6wcATlodYKgvQj6B9Db51rx7NU9fqu0PoLeS4BIgdYMc/QK4smwLwpm5RFrs02V/eLyEFp3FklvlNQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/middleware-bucket-endpoint@3.972.10", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/middleware-bucket-endpoint@3.972.10" }, "attributes": { "name": "@aws-sdk/middleware-bucket-endpoint", "version": "3.972.10", "lockfile_path": "node_modules/@aws-sdk/middleware-bucket-endpoint", "integrity": "sha512-Vbc2frZH7wXlMNd+ZZSXUEs/l1Sv8Jj4zUnIfwrYF5lwaLdXHZ9xx4U3rjUcaye3HRhFVc+E5DbBxpRAbB16BA==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/middleware-expect-continue@3.972.10", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/middleware-expect-continue@3.972.10" }, "attributes": { "name": "@aws-sdk/middleware-expect-continue", "version": "3.972.10", "lockfile_path": "node_modules/@aws-sdk/middleware-expect-continue", "integrity": "sha512-2Yn0f1Qiq/DjxYR3wfI3LokXnjOhFM7Ssn4LTdFDIxRMCE6I32MAsVnhPX1cUZsuVA9tiZtwwhlSLAtFGxAZlQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/middleware-flexible-checksums@3.974.16", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/middleware-flexible-checksums@3.974.16" }, "attributes": { "name": "@aws-sdk/middleware-flexible-checksums", "version": "3.974.16", "lockfile_path": "node_modules/@aws-sdk/middleware-flexible-checksums", "integrity": "sha512-6ru8doI0/XzszqLIPXf0E/V7HhAw1Pu94010XCKYtBUfD0LxF0BuOzrUf8OQGR6j2o6wgKTHUniOmndQycHwCA==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/middleware-host-header@3.972.10", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/middleware-host-header@3.972.10" }, "attributes": { "name": "@aws-sdk/middleware-host-header", "version": "3.972.10", "lockfile_path": "node_modules/@aws-sdk/middleware-host-header", "integrity": "sha512-IJSsIMeVQ8MMCPbuh1AbltkFhLBLXn7aejzfX5YKT/VLDHn++Dcz8886tXckE+wQssyPUhaXrJhdakO2VilRhg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/middleware-location-constraint@3.972.10", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/middleware-location-constraint@3.972.10" }, "attributes": { "name": "@aws-sdk/middleware-location-constraint", "version": "3.972.10", "lockfile_path": "node_modules/@aws-sdk/middleware-location-constraint", "integrity": "sha512-rI3NZvJcEvjoD0+0PI0iUAwlPw2IlSlhyvgBK/3WkKJQE/YiKFedd9dMN2lVacdNxPNhxL/jzQaKQdrGtQagjQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/middleware-logger@3.972.10", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/middleware-logger@3.972.10" }, "attributes": { "name": "@aws-sdk/middleware-logger", "version": "3.972.10", "lockfile_path": "node_modules/@aws-sdk/middleware-logger", "integrity": "sha512-OOuGvvz1Dm20SjZo5oEBePFqxt5nf8AwkNDSyUHvD9/bfNASmstcYxFAHUowy4n6Io7mWUZ04JURZwSBvyQanQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/middleware-recursion-detection@3.972.11", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/middleware-recursion-detection@3.972.11" }, "attributes": { "name": "@aws-sdk/middleware-recursion-detection", "version": "3.972.11", "lockfile_path": "node_modules/@aws-sdk/middleware-recursion-detection", "integrity": "sha512-+zz6f79Kj9V5qFK2P+D8Ehjnw4AhphAlCAsPjUqEcInA9umtSSKMrHbSagEeOIsDNuvVrH98bjRHcyQukTrhaQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/middleware-sdk-s3@3.972.37", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/middleware-sdk-s3@3.972.37" }, "attributes": { "name": "@aws-sdk/middleware-sdk-s3", "version": "3.972.37", "lockfile_path": "node_modules/@aws-sdk/middleware-sdk-s3", "integrity": "sha512-Km7M+i8DrLArVzrid1gfxeGhYHBd3uxvE77g0s5a52zPSVosxzQBnJ0gwWb6NIp/DOk8gsBMhi7V+cpJG0ndTA==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/middleware-ssec@3.972.10", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/middleware-ssec@3.972.10" }, "attributes": { "name": "@aws-sdk/middleware-ssec", "version": "3.972.10", "lockfile_path": "node_modules/@aws-sdk/middleware-ssec", "integrity": "sha512-Gli9A0u8EVVb+5bFDGS/QbSVg28w/wpEidg1ggVcSj65BDTdGR6punsOcVjqdiu1i42WHWo51MCvARPIIz9juw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/middleware-user-agent@3.972.38", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/middleware-user-agent@3.972.38" }, "attributes": { "name": "@aws-sdk/middleware-user-agent", "version": "3.972.38", "lockfile_path": "node_modules/@aws-sdk/middleware-user-agent", "integrity": "sha512-iz+B29TXcAZsJpwB+AwG/TTGA5l/VnmMZ2UxtiySOZjI6gCdmviXPwdgzcmuazMy16rXoPY4mYCGe7zdNKfx5A==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/nested-clients@3.997.22", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/nested-clients@3.997.22" }, "attributes": { "name": "@aws-sdk/nested-clients", "version": "3.997.22", "lockfile_path": "node_modules/@aws-sdk/nested-clients", "integrity": "sha512-4IwtcYSxEIVw5hcp8ogq0CMbFNZFw7jJUetpfFUhFFeqsa1K8j2Ihg2hnxLyOp3stMZnXda6VzOmPi1AFZQXcg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/region-config-resolver@3.972.13", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/region-config-resolver@3.972.13" }, "attributes": { "name": "@aws-sdk/region-config-resolver", "version": "3.972.13", "lockfile_path": "node_modules/@aws-sdk/region-config-resolver", "integrity": "sha512-CvJ2ZIjK/jVD/lbOpowBVElJyC1YxLTIJ13yM0AEo0t2v7swOzGjSA6lJGH+DwZXQhcjUjoYwc8bVYCX5MDr1A==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/signature-v4-multi-region@3.996.35", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/signature-v4-multi-region@3.996.35" }, "attributes": { "name": "@aws-sdk/signature-v4-multi-region", "version": "3.996.35", "lockfile_path": "node_modules/@aws-sdk/signature-v4-multi-region", "integrity": "sha512-6L/VWs+Wch2stHemCGTmUNqKLMzURxQDK5boNG3Jn3kAOp71meDUuS5sbObpEvFxHDq0uWeSLFDNSYsjNt+Dlg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/token-providers@3.1071.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/token-providers@3.1071.0" }, "attributes": { "name": "@aws-sdk/token-providers", "version": "3.1071.0", "lockfile_path": "node_modules/@aws-sdk/token-providers", "integrity": "sha512-4LDW2Qob6LoLFuqYSYZq2AyTE9koSE9+i+n5UZcm10GpmQOK0zRD9L4uYlzItiTKksIWgC/qMFChAi3RvKYtMg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/types@3.973.13", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/types@3.973.13" }, "attributes": { "name": "@aws-sdk/types", "version": "3.973.13", "lockfile_path": "node_modules/@aws-sdk/types", "integrity": "sha512-pEHZqRkAlHfnfAU9tK+WpKv/gBNjGJrHMgA3A0iYRGyswBS2t0pfez+lWlwktb3Bqa0ovh7w/QJTFwp3fDxLNg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/util-arn-parser@3.972.3", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/util-arn-parser@3.972.3" }, "attributes": { "name": "@aws-sdk/util-arn-parser", "version": "3.972.3", "lockfile_path": "node_modules/@aws-sdk/util-arn-parser", "integrity": "sha512-HzSD8PMFrvgi2Kserxuff5VitNq2sgf3w9qxmskKDiDTThWfVteJxuCS9JXiPIPtmCrp+7N9asfIaVhBFORllA==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/util-endpoints@3.996.8", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/util-endpoints@3.996.8" }, "attributes": { "name": "@aws-sdk/util-endpoints", "version": "3.996.8", "lockfile_path": "node_modules/@aws-sdk/util-endpoints", "integrity": "sha512-oOZHcRDihk5iEe5V25NVWg45b3qEA8OpHWVdU/XQh8Zj4heVPAJqWvMphQnU7LkufmUo10EpvFPZuQMiFLJK3g==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/util-locate-window@3.965.5", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/util-locate-window@3.965.5" }, "attributes": { "name": "@aws-sdk/util-locate-window", "version": "3.965.5", "lockfile_path": "node_modules/@aws-sdk/util-locate-window", "integrity": "sha512-WhlJNNINQB+9qtLtZJcpQdgZw3SCDCpXdUJP7cToGwHbCWCnRckGlc6Bx/OhWwIYFNAn+FIydY8SZ0QmVu3xTQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/util-user-agent-browser@3.972.10", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/util-user-agent-browser@3.972.10" }, "attributes": { "name": "@aws-sdk/util-user-agent-browser", "version": "3.972.10", "lockfile_path": "node_modules/@aws-sdk/util-user-agent-browser", "integrity": "sha512-FAzqXvfEssGdSIz8ejatan0bOdx1qefBWKF/gWmVBXIP1HkS7v/wjjaqrAGGKvyihrXTXW00/2/1nTJtxpXz7g==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/util-user-agent-node@3.973.24", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/util-user-agent-node@3.973.24" }, "attributes": { "name": "@aws-sdk/util-user-agent-node", "version": "3.973.24", "lockfile_path": "node_modules/@aws-sdk/util-user-agent-node", "integrity": "sha512-ZWwlkjcIp7cEL8ZfTpTAPNkwx25p7xol0xlKoWVVf22+nsjwmLcHYtTPjIV1cSpmB/b6DaK4cb1fSkvCXHgRdw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws-sdk/xml-builder@3.972.30", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws-sdk/xml-builder@3.972.30" }, "attributes": { "name": "@aws-sdk/xml-builder", "version": "3.972.30", "lockfile_path": "node_modules/@aws-sdk/xml-builder", "integrity": "sha512-StElZPEoBquWwNqw1AcfpzEyZqJvFxouG+mpDNYlcH6ZOrqd2CuIryv+8LV8gNHZUOyKyJF3Dq9vxaXEmDR9TQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@aws/lambda-invoke-store@0.2.4", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40aws/lambda-invoke-store@0.2.4" }, "attributes": { "name": "@aws/lambda-invoke-store", "version": "0.2.4", "lockfile_path": "node_modules/@aws/lambda-invoke-store", "integrity": "sha512-iY8yvjE0y651BixKNPgmv1WrQc+GZ142sb0z4gYnChDDY2YqI4P/jsSopBWrKfAt7LOJAkOXt7rC/hms+WclQQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@nodable/entities@2.2.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40nodable/entities@2.2.0" }, "attributes": { "name": "@nodable/entities", "version": "2.2.0", "lockfile_path": "node_modules/@nodable/entities", "integrity": "sha512-9uGyhaQavEUMC8AIddIjau4NsnsXhou+j5sBAGojCM1oxmQpVKTWR/9JxABD6UAv12vpIms55fPZKFQEhG6uBg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@open-policy-agent/opa-wasm@1.10.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40open-policy-agent/opa-wasm@1.10.0" }, "attributes": { "name": "@open-policy-agent/opa-wasm", "version": "1.10.0", "lockfile_path": "node_modules/@open-policy-agent/opa-wasm", "integrity": "sha512-ymR/nFS3nO9o24j9xowGGQaf+Gmb813QcxUpVZkfRlJkawKWqSIllnEH15agyWjijmOIyhA+OBErenx6N3jphw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/chunked-blob-reader@5.2.2", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/chunked-blob-reader@5.2.2" }, "attributes": { "name": "@smithy/chunked-blob-reader", "version": "5.2.2", "lockfile_path": "node_modules/@smithy/chunked-blob-reader", "integrity": "sha512-St+kVicSyayWQca+I1rGitaOEH6uKgE8IUWoYnnEX26SWdWQcL6LvMSD19Lg+vYHKdT9B2Zuu7rd3i6Wnyb/iw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/chunked-blob-reader-native@4.2.3", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/chunked-blob-reader-native@4.2.3" }, "attributes": { "name": "@smithy/chunked-blob-reader-native", "version": "4.2.3", "lockfile_path": "node_modules/@smithy/chunked-blob-reader-native", "integrity": "sha512-jA5k5Udn7Y5717L86h4EIv06wIr3xn8GM1qHRi/Nf31annXcXHJjBKvgztnbn2TxH3xWrPBfgwHsOwZf0UmQWw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/config-resolver@4.4.17", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/config-resolver@4.4.17" }, "attributes": { "name": "@smithy/config-resolver", "version": "4.4.17", "lockfile_path": "node_modules/@smithy/config-resolver", "integrity": "sha512-TzDZcAnhTyAHbXVxWZo7/tEcrIeFq20IBk8So3OLOetWpR8EwY/yEqBMBFaJMeyEiREDq4NfEl+qO3OAUD+vbQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/core@3.25.1", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/core@3.25.1" }, "attributes": { "name": "@smithy/core", "version": "3.25.1", "lockfile_path": "node_modules/@smithy/core", "integrity": "sha512-zpDbpXBCBsxfLtG2GEUyfgvHvSFrw5CwDZSNzL0v52gx/c3oPlPbm+7W7num8xs6vyiUBn+bvYPHcQDOXZynCQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/credential-provider-imds@4.4.1", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/credential-provider-imds@4.4.1" }, "attributes": { "name": "@smithy/credential-provider-imds", "version": "4.4.1", "lockfile_path": "node_modules/@smithy/credential-provider-imds", "integrity": "sha512-TSAF5NHgxEsllbErYWbK8aLnl5L601NGc5VYJlSPsKnf3YlkhdoBN+geGcaU00oiw2OK3QO5LA3QNXiiWhCidQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/eventstream-codec@4.2.14", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/eventstream-codec@4.2.14" }, "attributes": { "name": "@smithy/eventstream-codec", "version": "4.2.14", "lockfile_path": "node_modules/@smithy/eventstream-codec", "integrity": "sha512-erZq0nOIpzfeZdCyzZjdJb4nVSKLUmSkaQUVkRGQTXs30gyUGeKnrYEg+Xe1W5gE3aReS7IgsvANwVPxSzY6Pw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/eventstream-serde-browser@4.2.14", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/eventstream-serde-browser@4.2.14" }, "attributes": { "name": "@smithy/eventstream-serde-browser", "version": "4.2.14", "lockfile_path": "node_modules/@smithy/eventstream-serde-browser", "integrity": "sha512-8IelTCtTctWRbb+0Dcy+C0aICh1qa0qWXqgjcXDmMuCvPJRnv26hiDZoAau2ILOniki65mCPKqOQs/BaWvO4CQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/eventstream-serde-config-resolver@4.3.14", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/eventstream-serde-config-resolver@4.3.14" }, "attributes": { "name": "@smithy/eventstream-serde-config-resolver", "version": "4.3.14", "lockfile_path": "node_modules/@smithy/eventstream-serde-config-resolver", "integrity": "sha512-sqHiHpYRYo3FJlaIxD1J8PhbcmJAm7IuM16mVnwSkCToD7g00IBZzKuiLNMGmftULmEUX6/UAz8/NN5uMP8bVA==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/eventstream-serde-node@4.2.14", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/eventstream-serde-node@4.2.14" }, "attributes": { "name": "@smithy/eventstream-serde-node", "version": "4.2.14", "lockfile_path": "node_modules/@smithy/eventstream-serde-node", "integrity": "sha512-Ht/8BuGlKfFTy0H3+8eEu0vdpwGztCnaLLXtpXNdQqiR7Hj4vFScU3T436vRAjATglOIPjJXronY+1WxxNLSiw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/eventstream-serde-universal@4.2.14", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/eventstream-serde-universal@4.2.14" }, "attributes": { "name": "@smithy/eventstream-serde-universal", "version": "4.2.14", "lockfile_path": "node_modules/@smithy/eventstream-serde-universal", "integrity": "sha512-lWyt4T2XQZUZgK3tQ3Wn0w3XBvZsK/vjTuJl6bXbnGZBHH0ZUSONTYiK9TgjTTzU54xQr3DRFwpjmhp0oLm3gg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/fetch-http-handler@5.5.1", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/fetch-http-handler@5.5.1" }, "attributes": { "name": "@smithy/fetch-http-handler", "version": "5.5.1", "lockfile_path": "node_modules/@smithy/fetch-http-handler", "integrity": "sha512-96JrD1q71anokymx9Iblb+zKmNQYNstlV/25A9ZYIJ2A0rp1r7/GZAIm0bDWSmVvz3DpNOCZuabzsiL+w0UHhw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/hash-blob-browser@4.2.15", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/hash-blob-browser@4.2.15" }, "attributes": { "name": "@smithy/hash-blob-browser", "version": "4.2.15", "lockfile_path": "node_modules/@smithy/hash-blob-browser", "integrity": "sha512-0PJ4Al3fg2nM4qKrAIxyNcApgqHAXcBkN8FeizOz69z0rb26uZ6lMESYtxegaTlXB5Hj84JfwMPavMrwDMjucA==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/hash-node@4.2.14", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/hash-node@4.2.14" }, "attributes": { "name": "@smithy/hash-node", "version": "4.2.14", "lockfile_path": "node_modules/@smithy/hash-node", "integrity": "sha512-8ZBDY2DD4wr+GGjTpPtiglEsqr0lUP+KHqgZcWczFf6qeZ/YRjMIOoQWVQlmwu7EtxKTd8YXD8lblmYcpBIA1g==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/hash-stream-node@4.2.14", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/hash-stream-node@4.2.14" }, "attributes": { "name": "@smithy/hash-stream-node", "version": "4.2.14", "lockfile_path": "node_modules/@smithy/hash-stream-node", "integrity": "sha512-tw4GANWkZPb6+BdD4Fgucqzey2+r73Z/GRo9zklsCdwrnxxumUV83ZIaBDdudV4Ylazw3EPTiJZhpX42105ruQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/invalid-dependency@4.2.14", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/invalid-dependency@4.2.14" }, "attributes": { "name": "@smithy/invalid-dependency", "version": "4.2.14", "lockfile_path": "node_modules/@smithy/invalid-dependency", "integrity": "sha512-c21qJiTSb25xvvOp+H2TNZzPCngrvl5vIPqPB8zQ/DmJF4QWXO19x1dWfMJZ6wZuuWUPPm0gV8C0cU3+ifcWuw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/is-array-buffer@4.2.2", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/is-array-buffer@4.2.2" }, "attributes": { "name": "@smithy/is-array-buffer", "version": "4.2.2", "lockfile_path": "node_modules/@smithy/is-array-buffer", "integrity": "sha512-n6rQ4N8Jj4YTQO3YFrlgZuwKodf4zUFs7EJIWH86pSCWBaAtAGBFfCM7Wx6D2bBJ2xqFNxGBSrUWswT3M0VJow==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/md5-js@4.2.14", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/md5-js@4.2.14" }, "attributes": { "name": "@smithy/md5-js", "version": "4.2.14", "lockfile_path": "node_modules/@smithy/md5-js", "integrity": "sha512-V2v0vx+h0iUSNG1Alt+GNBMSLGCrl9iVsdd+Ap67HPM9PN479x12V8LkuMoKImNZxn3MXeuyUjls+/7ZACZghA==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/middleware-content-length@4.2.14", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/middleware-content-length@4.2.14" }, "attributes": { "name": "@smithy/middleware-content-length", "version": "4.2.14", "lockfile_path": "node_modules/@smithy/middleware-content-length", "integrity": "sha512-xhHq7fX4/3lv5NHxLUk3OeEvl0xZ+Ek3qIbWaCL4f9JwgDZEclPBElljaZCAItdGPQl/kSM4LPMOpy1MYgprpw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/middleware-endpoint@4.4.32", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/middleware-endpoint@4.4.32" }, "attributes": { "name": "@smithy/middleware-endpoint", "version": "4.4.32", "lockfile_path": "node_modules/@smithy/middleware-endpoint", "integrity": "sha512-ZZkgyjnJppiZbIm6Qbx92pbXYi1uzenIvGhBSCDlc7NwuAkiqSgS75j1czAD25ZLs2FjMjYy1q7gyRVWG6JA0Q==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/middleware-retry@4.5.7", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/middleware-retry@4.5.7" }, "attributes": { "name": "@smithy/middleware-retry", "version": "4.5.7", "lockfile_path": "node_modules/@smithy/middleware-retry", "integrity": "sha512-bRt6ZImqVSeTk39Nm81K20ObIiAZ3WefY7G6+iz/0tZjs4dgRRjvRX2sgsH+zi6iDCRR/aQvQofLKxxz4rPBZg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/middleware-serde@4.2.20", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/middleware-serde@4.2.20" }, "attributes": { "name": "@smithy/middleware-serde", "version": "4.2.20", "lockfile_path": "node_modules/@smithy/middleware-serde", "integrity": "sha512-Lx9JMO9vArPtiChE3wbEZ5akMIDQpWQtlu90lhACQmNOXcGXRbaDywMHDzuDZ2OkZzP+9wQfZi3YJT9F67zTQQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/middleware-stack@4.2.14", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/middleware-stack@4.2.14" }, "attributes": { "name": "@smithy/middleware-stack", "version": "4.2.14", "lockfile_path": "node_modules/@smithy/middleware-stack", "integrity": "sha512-2dvkUKLuFdKsCRmOE4Mn63co0Djtsm+JMh0bYZQupN1pJwMeE8FmQmRLLzzEMN0dnNi7CDCYYH8F0EVwWiPBeA==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/node-config-provider@4.3.14", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/node-config-provider@4.3.14" }, "attributes": { "name": "@smithy/node-config-provider", "version": "4.3.14", "lockfile_path": "node_modules/@smithy/node-config-provider", "integrity": "sha512-S+gFjyo/weSVL0P1b9Ts8C/CwIfNCgUPikk3sl6QVsfE/uUuO+QsF+NsE/JkpvWqqyz1wg7HFdiaZuj5CoBMRg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/node-http-handler@4.8.1", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/node-http-handler@4.8.1" }, "attributes": { "name": "@smithy/node-http-handler", "version": "4.8.1", "lockfile_path": "node_modules/@smithy/node-http-handler", "integrity": "sha512-emtXvoky671puri18ETf64AFIQUGIEA093F2drXpBgB0OGnBLjcwNR3CA2mYu62IAqNsS56xa5lnTxAgPq7cjw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/property-provider@4.2.14", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/property-provider@4.2.14" }, "attributes": { "name": "@smithy/property-provider", "version": "4.2.14", "lockfile_path": "node_modules/@smithy/property-provider", "integrity": "sha512-WuM31CgfsnQ/10i7NYr0PyxqknD72Y5uMfUMVSniPjbEPceiTErb4eIqJQ+pdxNEAUEWrewrGjIRjVbVHsxZiQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/protocol-http@5.3.14", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/protocol-http@5.3.14" }, "attributes": { "name": "@smithy/protocol-http", "version": "5.3.14", "lockfile_path": "node_modules/@smithy/protocol-http", "integrity": "sha512-dN5F8kHx8RNU0r+pCwNmFZyz6ChjMkzShy/zup6MtkRmmix4vZzJdW+di7x//b1LiynIev88FM18ie+wwPcQtQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/querystring-parser@4.2.14", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/querystring-parser@4.2.14" }, "attributes": { "name": "@smithy/querystring-parser", "version": "4.2.14", "lockfile_path": "node_modules/@smithy/querystring-parser", "integrity": "sha512-hr+YyqBD23GVvRxGGrcc/oOeNlK3PzT5Fu4dzrDXxzS1LpFiuL2PQQqKPs87M79aW7ziMs+nvB3qdw77SqE7Lw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/service-error-classification@4.3.1", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/service-error-classification@4.3.1" }, "attributes": { "name": "@smithy/service-error-classification", "version": "4.3.1", "lockfile_path": "node_modules/@smithy/service-error-classification", "integrity": "sha512-aUQuDGh760ts/8MU+APjIZhlLPKhIIfqyzZaJikLEIMrdxFvxuLYD0WxWzaYWpmLbQlXDe9p7EWM3HsBe0K6Gw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/shared-ini-file-loader@4.4.9", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/shared-ini-file-loader@4.4.9" }, "attributes": { "name": "@smithy/shared-ini-file-loader", "version": "4.4.9", "lockfile_path": "node_modules/@smithy/shared-ini-file-loader", "integrity": "sha512-495/V2I15SHgedSJoDPD23JuSfKAp726ZI1V0wtjB07Wh7q/0tri/0e0DLefZCHgxZonrGKt/OCTpAtP1wE1kQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/signature-v4@5.5.1", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/signature-v4@5.5.1" }, "attributes": { "name": "@smithy/signature-v4", "version": "5.5.1", "lockfile_path": "node_modules/@smithy/signature-v4", "integrity": "sha512-X9rVls3En0z3NtrmguTmpRM0/NqtWUxBjal6fcAkwtsub+gOdLZ6kD+V7xhUgFMGdG14bHbZ7M5QjaRI1+DatQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/smithy-client@4.12.13", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/smithy-client@4.12.13" }, "attributes": { "name": "@smithy/smithy-client", "version": "4.12.13", "lockfile_path": "node_modules/@smithy/smithy-client", "integrity": "sha512-y/Pcj1V9+qG98gyu1gvftHB7rDpdh+7kIBIggs55yGm3JdtBV8GT8IFF3a1qxZ79QnaJHX9GXzvBG6tAd+czJA==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/types@4.15.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/types@4.15.0" }, "attributes": { "name": "@smithy/types", "version": "4.15.0", "lockfile_path": "node_modules/@smithy/types", "integrity": "sha512-Z5TAOxygoFvybJV3igo5SloFflSokHx2hu1eFA+DxDTcn+FtKxUSui+rbTRG1pAafMA888Z3MVvCWUuvCrTXjg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/url-parser@4.2.14", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/url-parser@4.2.14" }, "attributes": { "name": "@smithy/url-parser", "version": "4.2.14", "lockfile_path": "node_modules/@smithy/url-parser", "integrity": "sha512-p06BiBigJ8bTA3MgnOfCtDUWnAMY0YfedO/GRpmc7p+wg3KW8vbXy1xwSu5ASy0wV7rRYtlfZOIKH4XqfhjSQQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/util-base64@4.3.2", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/util-base64@4.3.2" }, "attributes": { "name": "@smithy/util-base64", "version": "4.3.2", "lockfile_path": "node_modules/@smithy/util-base64", "integrity": "sha512-XRH6b0H/5A3SgblmMa5ErXQ2XKhfbQB+Fm/oyLZ2O2kCUrwgg55bU0RekmzAhuwOjA9qdN5VU2BprOvGGUkOOQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/util-body-length-browser@4.2.2", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/util-body-length-browser@4.2.2" }, "attributes": { "name": "@smithy/util-body-length-browser", "version": "4.2.2", "lockfile_path": "node_modules/@smithy/util-body-length-browser", "integrity": "sha512-JKCrLNOup3OOgmzeaKQwi4ZCTWlYR5H4Gm1r2uTMVBXoemo1UEghk5vtMi1xSu2ymgKVGW631e2fp9/R610ZjQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/util-body-length-node@4.2.3", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/util-body-length-node@4.2.3" }, "attributes": { "name": "@smithy/util-body-length-node", "version": "4.2.3", "lockfile_path": "node_modules/@smithy/util-body-length-node", "integrity": "sha512-ZkJGvqBzMHVHE7r/hcuCxlTY8pQr1kMtdsVPs7ex4mMU+EAbcXppfo5NmyxMYi2XU49eqaz56j2gsk4dHHPG/g==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/util-buffer-from@4.2.2", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/util-buffer-from@4.2.2" }, "attributes": { "name": "@smithy/util-buffer-from", "version": "4.2.2", "lockfile_path": "node_modules/@smithy/util-buffer-from", "integrity": "sha512-FDXD7cvUoFWwN6vtQfEta540Y/YBe5JneK3SoZg9bThSoOAC/eGeYEua6RkBgKjGa/sz6Y+DuBZj3+YEY21y4Q==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/util-config-provider@4.2.2", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/util-config-provider@4.2.2" }, "attributes": { "name": "@smithy/util-config-provider", "version": "4.2.2", "lockfile_path": "node_modules/@smithy/util-config-provider", "integrity": "sha512-dWU03V3XUprJwaUIFVv4iOnS1FC9HnMHDfUrlNDSh4315v0cWyaIErP8KiqGVbf5z+JupoVpNM7ZB3jFiTejvQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/util-defaults-mode-browser@4.3.49", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/util-defaults-mode-browser@4.3.49" }, "attributes": { "name": "@smithy/util-defaults-mode-browser", "version": "4.3.49", "lockfile_path": "node_modules/@smithy/util-defaults-mode-browser", "integrity": "sha512-a5bNrdiONYB/qE2BuKegvUMd/+ZDwdg4vsNuuSzYE8qs2EYAdK9CynL+Rzn29PbPiUqoz/cbpRbcLzD5lEevHw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/util-defaults-mode-node@4.2.54", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/util-defaults-mode-node@4.2.54" }, "attributes": { "name": "@smithy/util-defaults-mode-node", "version": "4.2.54", "lockfile_path": "node_modules/@smithy/util-defaults-mode-node", "integrity": "sha512-g1cvrJvOnzeJgEdf7AE4luI7gp6L8weE0y9a9wQUSGtjb8QRHDbCJYuE4Sy0SD9N8RrnNPFsPltAz/OSoBR9Zw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/util-endpoints@3.4.2", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/util-endpoints@3.4.2" }, "attributes": { "name": "@smithy/util-endpoints", "version": "3.4.2", "lockfile_path": "node_modules/@smithy/util-endpoints", "integrity": "sha512-a55Tr+3OKld4TTtnT+RhKOQHyPxm3j/xL4OR83WBUhLJaKDS9dnJ7arRMOp3t31dcLhApwG9bgvrRXBHlLdIkg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/util-hex-encoding@4.2.2", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/util-hex-encoding@4.2.2" }, "attributes": { "name": "@smithy/util-hex-encoding", "version": "4.2.2", "lockfile_path": "node_modules/@smithy/util-hex-encoding", "integrity": "sha512-Qcz3W5vuHK4sLQdyT93k/rfrUwdJ8/HZ+nMUOyGdpeGA1Wxt65zYwi3oEl9kOM+RswvYq90fzkNDahPS8K0OIg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/util-middleware@4.2.14", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/util-middleware@4.2.14" }, "attributes": { "name": "@smithy/util-middleware", "version": "4.2.14", "lockfile_path": "node_modules/@smithy/util-middleware", "integrity": "sha512-1Su2vj9RYNDEv/V+2E+jXkkwGsgR7dc4sfHn9Z7ruzQHJIEni9zzw5CauvRXlFJfmgcqYP8fWa0dkh2Q2YaQyw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/util-retry@4.3.8", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/util-retry@4.3.8" }, "attributes": { "name": "@smithy/util-retry", "version": "4.3.8", "lockfile_path": "node_modules/@smithy/util-retry", "integrity": "sha512-LUIxbTBi+OpvXpg91poGA6BdyoleMDLnfXjVDqyi2RvZmTveY5loE/FgYUBCR5LU2BThW2SoZRh8dTIIy38IPw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/util-stream@4.5.25", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/util-stream@4.5.25" }, "attributes": { "name": "@smithy/util-stream", "version": "4.5.25", "lockfile_path": "node_modules/@smithy/util-stream", "integrity": "sha512-/PFpG4k8Ze8Ei+mMKj3oiPICYekthuzePZMgZbCqMiXIHHf4n2aZ4Ps0aSRShycFTGuj/J6XldmC0x0DwednIA==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/util-utf8@4.2.2", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/util-utf8@4.2.2" }, "attributes": { "name": "@smithy/util-utf8", "version": "4.2.2", "lockfile_path": "node_modules/@smithy/util-utf8", "integrity": "sha512-75MeYpjdWRe8M5E3AW0O4Cx3UadweS+cwdXjwYGBW5h/gxxnbeZ877sLPX/ZJA9GVTlL/qG0dXP29JWFCD1Ayw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/util-waiter@4.3.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/util-waiter@4.3.0" }, "attributes": { "name": "@smithy/util-waiter", "version": "4.3.0", "lockfile_path": "node_modules/@smithy/util-waiter", "integrity": "sha512-JyjYmLAfS+pdxF92o4yLgEoy0zhayKTw73FU1aofLWwLcJw7iSqIY2exGmMTrl/lmZugP5p/zxdFSippJDfKWA==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@smithy/uuid@1.1.2", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40smithy/uuid@1.1.2" }, "attributes": { "name": "@smithy/uuid", "version": "1.1.2", "lockfile_path": "node_modules/@smithy/uuid", "integrity": "sha512-O/IEdcCUKkubz60tFbGA7ceITTAJsty+lBjNoorP4Z6XRqaFb/OjQjZODophEcuq68nKm6/0r+6/lLQ+XVpk8g==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::anynum@1.0.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/anynum@1.0.0" }, "attributes": { "name": "anynum", "version": "1.0.0", "lockfile_path": "node_modules/anynum", "integrity": "sha512-xjR9/zBVnUOP6ztMIIgShjsxui80nQUQH+5xJnvrYLs+90bF25/KJqaAi8mk+B4RDtX1Nspi6fmp4YTEts8SfA==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::bowser@2.14.1", "type": "npm_package", "global_id": { "purl": "pkg:npm/bowser@2.14.1" }, "attributes": { "name": "bowser", "version": "2.14.1", "lockfile_path": "node_modules/bowser", "integrity": "sha512-tzPjzCxygAKWFOJP011oxFHs57HzIhOEracIgAePE4pqB3LikALKnSzUyU4MGs9/iCEUuHlAJTjTc5M+u7YEGg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::fast-xml-builder@1.2.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/fast-xml-builder@1.2.0" }, "attributes": { "name": "fast-xml-builder", "version": "1.2.0", "lockfile_path": "node_modules/fast-xml-builder", "integrity": "sha512-00aAWieqff+ZJhsXA4g1g7M8k+7AYoMUUHF+/zFb5U6Uv/P0Vl4QZo84/IcufzYalLuEj9928bXN9PbbFzMF0Q==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::fast-xml-parser@5.7.3", "type": "npm_package", "global_id": { "purl": "pkg:npm/fast-xml-parser@5.7.3" }, "attributes": { "name": "fast-xml-parser", "version": "5.7.3", "lockfile_path": "node_modules/fast-xml-parser", "integrity": "sha512-C0AaNuC+mscy6vrAQKAc/rMq+zAPHodfHGZu4sGVehvAQt/JLG1O5zEcYcXSY5zSqr4YVgxsB+pHXTq0i7eDlg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::path-expression-matcher@1.5.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/path-expression-matcher@1.5.0" }, "attributes": { "name": "path-expression-matcher", "version": "1.5.0", "lockfile_path": "node_modules/path-expression-matcher", "integrity": "sha512-cbrerZV+6rvdQrrD+iGMcZFEiiSrbv9Tfdkvnusy6y0x0GKBXREFg/Y65GhIfm0tnLntThhzCnfKwp1WRjeCyQ==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::sprintf-js@1.1.3", "type": "npm_package", "global_id": { "purl": "pkg:npm/sprintf-js@1.1.3" }, "attributes": { "name": "sprintf-js", "version": "1.1.3", "lockfile_path": "node_modules/sprintf-js", "integrity": "sha512-Oo+0REFV59/rz3gfJNKQiBlwfHaSESl1pcGyABQsnnIfWOFt6JNj5gCog2U6MLZ//IGYD+nA8nI+mTShREReaA==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::strnum@2.4.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/strnum@2.4.0" }, "attributes": { "name": "strnum", "version": "2.4.0", "lockfile_path": "node_modules/strnum", "integrity": "sha512-sHrVyWWdq28RbhjuJdZsA1SnGRJV6NiXbk6AXBxDOsgAcA+lmpUZCYjOdLBxkXMwis6RRe7dlZt4VlIWFVzkmg==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::tslib@2.8.1", "type": "npm_package", "global_id": { "purl": "pkg:npm/tslib@2.8.1" }, "attributes": { "name": "tslib", "version": "2.8.1", "lockfile_path": "node_modules/tslib", "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::xml-naming@0.1.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/xml-naming@0.1.0" }, "attributes": { "name": "xml-naming", "version": "0.1.0", "lockfile_path": "node_modules/xml-naming", "integrity": "sha512-k8KO9hrMyNk6tUWqUfkTEZbezRRpONVOzUTnc97VnCvyj6Tf9lyUR9EDAIeiVLv56jsMcoXEwjW8Kv5yPY52lw==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::yaml@1.10.3", "type": "npm_package", "global_id": { "purl": "pkg:npm/yaml@1.10.3" }, "attributes": { "name": "yaml", "version": "1.10.3", "lockfile_path": "node_modules/yaml", "integrity": "sha512-vIYeF1u3CjlhAFekPPAk2h/Kv4T3mAkMox5OymRiJQB0spDP10LHvt+K7G9Ny6NuuMAb25/6n1qyUjAcGNf/AA==", "function": "Runtime dependency of the compliance/KSI Lambda (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "iiw_asset_type": "Software Package (npm)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::annotated-doc@0.0.5", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/annotated-doc@0.0.5" }, "attributes": { "name": "annotated-doc", "version": "0.0.5", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::annotated-types@0.8.0", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/annotated-types@0.8.0" }, "attributes": { "name": "annotated-types", "version": "0.8.0", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::anthropic@0.120.2", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/anthropic@0.120.2" }, "attributes": { "name": "anthropic", "version": "0.120.2", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::anyio@4.14.2", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/anyio@4.14.2" }, "attributes": { "name": "anyio", "version": "4.14.2", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::certifi@2026.7.22", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/certifi@2026.7.22" }, "attributes": { "name": "certifi", "version": "2026.7.22", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::cffi@2.1.1", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/cffi@2.1.1" }, "attributes": { "name": "cffi", "version": "2.1.1", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::cryptography@50.0.0", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/cryptography@50.0.0" }, "attributes": { "name": "cryptography", "version": "50.0.0", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::distro@1.9.0", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/distro@1.9.0" }, "attributes": { "name": "distro", "version": "1.9.0", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::docstring-parser@0.18.0", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/docstring-parser@0.18.0" }, "attributes": { "name": "docstring-parser", "version": "0.18.0", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::fastapi@0.141.1", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/fastapi@0.141.1" }, "attributes": { "name": "fastapi", "version": "0.141.1", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::h11@0.16.0", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/h11@0.16.0" }, "attributes": { "name": "h11", "version": "0.16.0", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::httpcore@1.0.9", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/httpcore@1.0.9" }, "attributes": { "name": "httpcore", "version": "1.0.9", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::httpx@0.28.1", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/httpx@0.28.1" }, "attributes": { "name": "httpx", "version": "0.28.1", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::idna@3.18", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/idna@3.18" }, "attributes": { "name": "idna", "version": "3.18", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::jiter@0.16.0", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/jiter@0.16.0" }, "attributes": { "name": "jiter", "version": "0.16.0", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::mangum@0.21.0", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/mangum@0.21.0" }, "attributes": { "name": "mangum", "version": "0.21.0", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::numpy@2.2.6", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/numpy@2.2.6" }, "attributes": { "name": "numpy", "version": "2.2.6", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::pycparser@3.0", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/pycparser@3.0" }, "attributes": { "name": "pycparser", "version": "3.0", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::pydantic@2.13.4", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/pydantic@2.13.4" }, "attributes": { "name": "pydantic", "version": "2.13.4", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::pydantic-core@2.46.4", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/pydantic-core@2.46.4" }, "attributes": { "name": "pydantic-core", "version": "2.46.4", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::pyjwt@2.13.0", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/pyjwt@2.13.0" }, "attributes": { "name": "pyjwt", "version": "2.13.0", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::python-dotenv@1.2.2", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/python-dotenv@1.2.2" }, "attributes": { "name": "python-dotenv", "version": "1.2.2", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::python-multipart@0.0.32", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/python-multipart@0.0.32" }, "attributes": { "name": "python-multipart", "version": "0.0.32", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::sniffio@1.3.1", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/sniffio@1.3.1" }, "attributes": { "name": "sniffio", "version": "1.3.1", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::starlette@1.4.1", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/starlette@1.4.1" }, "attributes": { "name": "starlette", "version": "1.4.1", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::typing-extensions@4.16.0", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/typing-extensions@4.16.0" }, "attributes": { "name": "typing-extensions", "version": "4.16.0", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "pypi::typing-inspection@0.4.2", "type": "pypi_package", "global_id": { "purl": "pkg:pypi/typing-inspection@0.4.2" }, "attributes": { "name": "typing-inspection", "version": "0.4.2", "ecosystem": "pypi", "sbom_source": "sbom-python.json", "iiw_asset_type": "Software Package (PyPI)", "function": "Dependency of the Silk Reeling application Lambda (PyPI)", "diagram_label": "Open-source Python dependency of the Silk Reeling app", "public": false, "baseline_configuration": "lockfile integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::@mediapipe/tasks-vision@0.10.34", "type": "npm_package", "global_id": { "purl": "pkg:npm/%40mediapipe/tasks-vision@0.10.34" }, "attributes": { "name": "@mediapipe/tasks-vision", "version": "0.10.34", "ecosystem": "npm", "sbom_source": "sbom-js.json", "iiw_asset_type": "Software Package (npm)", "function": "Dependency of the Silk Reeling single-page application (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::chan-si-jing-frontend@0.1.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/chan-si-jing-frontend@0.1.0" }, "attributes": { "name": "chan-si-jing-frontend", "version": "0.1.0", "ecosystem": "npm", "sbom_source": "sbom-js.json", "iiw_asset_type": "Software Package (npm)", "function": "Dependency of the Silk Reeling single-page application (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::js-tokens@4.0.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/js-tokens@4.0.0" }, "attributes": { "name": "js-tokens", "version": "4.0.0", "ecosystem": "npm", "sbom_source": "sbom-js.json", "iiw_asset_type": "Software Package (npm)", "function": "Dependency of the Silk Reeling single-page application (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::loose-envify@1.4.0", "type": "npm_package", "global_id": { "purl": "pkg:npm/loose-envify@1.4.0" }, "attributes": { "name": "loose-envify", "version": "1.4.0", "ecosystem": "npm", "sbom_source": "sbom-js.json", "iiw_asset_type": "Software Package (npm)", "function": "Dependency of the Silk Reeling single-page application (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::react@18.3.1", "type": "npm_package", "global_id": { "purl": "pkg:npm/react@18.3.1" }, "attributes": { "name": "react", "version": "18.3.1", "ecosystem": "npm", "sbom_source": "sbom-js.json", "iiw_asset_type": "Software Package (npm)", "function": "Dependency of the Silk Reeling single-page application (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::react-dom@18.3.1", "type": "npm_package", "global_id": { "purl": "pkg:npm/react-dom@18.3.1" }, "attributes": { "name": "react-dom", "version": "18.3.1", "ecosystem": "npm", "sbom_source": "sbom-js.json", "iiw_asset_type": "Software Package (npm)", "function": "Dependency of the Silk Reeling single-page application (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "npm::scheduler@0.23.2", "type": "npm_package", "global_id": { "purl": "pkg:npm/scheduler@0.23.2" }, "attributes": { "name": "scheduler", "version": "0.23.2", "ecosystem": "npm", "sbom_source": "sbom-js.json", "iiw_asset_type": "Software Package (npm)", "function": "Dependency of the Silk Reeling single-page application (npm)", "diagram_label": "Open-source policy and signing tooling running inside CI", "public": false, "baseline_configuration": "package-lock.json integrity hash; Dependabot-monitored", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "app-tier", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "not-applicable", "integrity": "moderate", "availability": "not-applicable" }, "information_flow": [] }, { "component_id": "html::404.html", "type": "html_artifact", "global_id": { "sha256": "de9239cc33abd5ec6e6466891bdd4b1754d16fc69ee6dffa5900accdedead023" }, "attributes": { "path": "404.html", "size_bytes": 4817, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::index.html", "type": "html_artifact", "global_id": { "sha256": "4e92e27e7347bb466286f1dd606115bcbe70158f6d4247c4eba529d56374a215" }, "attributes": { "path": "index.html", "size_bytes": 12249, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/about.html", "type": "html_artifact", "global_id": { "sha256": "7f53bb5047b7c58f0b3d5c0fc69da8691679531dfa475c80109dbfda8787c2b0" }, "attributes": { "path": "pages/about.html", "size_bytes": 5661, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/activities.html", "type": "html_artifact", "global_id": { "sha256": "0d3ec20b77f6f175759244fe4e74650471e6c43f87af7077548574760778bd9c" }, "attributes": { "path": "pages/activities.html", "size_bytes": 12627, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-1.html", "type": "html_artifact", "global_id": { "sha256": "f8c757640ca0815b00ca3f92aaae24ba48f02f4ee228619a3842e711c163eab9" }, "attributes": { "path": "pages/article-1.html", "size_bytes": 14561, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-10.html", "type": "html_artifact", "global_id": { "sha256": "8ee3d226a001451dd64fdd3682cbf68e984086a00501bd6f9a757cdb71bb58f0" }, "attributes": { "path": "pages/article-10.html", "size_bytes": 18227, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-11.html", "type": "html_artifact", "global_id": { "sha256": "a6dcbe6be4553b82794c98467a088b720d9df300b15a352ec781ab09b5624961" }, "attributes": { "path": "pages/article-11.html", "size_bytes": 11896, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-12.html", "type": "html_artifact", "global_id": { "sha256": "e2c964360e79ee3dcb2fa8aa14d162fafc0339988f149905f70a6a2acf32a50c" }, "attributes": { "path": "pages/article-12.html", "size_bytes": 8174, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-13.html", "type": "html_artifact", "global_id": { "sha256": "fbabf3ae47fa66c27ba396978b1a94f9fecd2f4318951e85e511fe74d65811ae" }, "attributes": { "path": "pages/article-13.html", "size_bytes": 17883, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-14.html", "type": "html_artifact", "global_id": { "sha256": "8aecdd6f8062ee5d4e10f42a9d98c71802f1c16cba94c43d7af405d068aa98b0" }, "attributes": { "path": "pages/article-14.html", "size_bytes": 17528, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-15.html", "type": "html_artifact", "global_id": { "sha256": "27e14931b907a40e82327a93ddde3aac35ce88f8185d3fa33892aa8e2798bd17" }, "attributes": { "path": "pages/article-15.html", "size_bytes": 10841, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-16.html", "type": "html_artifact", "global_id": { "sha256": "c9ec3fcbd9b1df78da7403c7ead1bbf40e7114499914e590ae1ca31bc2cbb3b1" }, "attributes": { "path": "pages/article-16.html", "size_bytes": 7992, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-17.html", "type": "html_artifact", "global_id": { "sha256": "d0a45cbb288d898189689aefc712851ca6564cd9c3d32cf7bf2427db6d424bad" }, "attributes": { "path": "pages/article-17.html", "size_bytes": 28166, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-18.html", "type": "html_artifact", "global_id": { "sha256": "697e0e64d9341889d30df960a31a60d4c582ffdda28e83f3076c16a8f525db52" }, "attributes": { "path": "pages/article-18.html", "size_bytes": 20655, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-19.html", "type": "html_artifact", "global_id": { "sha256": "88d8708c8551672ae4f840231c9d5836b568d8111d8aa7d40b2b02ac392647b1" }, "attributes": { "path": "pages/article-19.html", "size_bytes": 12351, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-2.html", "type": "html_artifact", "global_id": { "sha256": "510a907c6148afcd258d14caa48e803cde965d23024e3a6afe0473d2aec601ea" }, "attributes": { "path": "pages/article-2.html", "size_bytes": 20182, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-20.html", "type": "html_artifact", "global_id": { "sha256": "30289061e8938b9f979e3aad5a76f4909247678ec93ee48f93b3ac6f3ad0f9b2" }, "attributes": { "path": "pages/article-20.html", "size_bytes": 17454, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-21.html", "type": "html_artifact", "global_id": { "sha256": "e81a7c4da0ca9691a6f304d018d833096c5e186d9029183f05144bd714d563bf" }, "attributes": { "path": "pages/article-21.html", "size_bytes": 14325, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-22.html", "type": "html_artifact", "global_id": { "sha256": "a9aca6a1efbb8646280d254b83d6aa68b46b48e694d597635b423328bd77b62d" }, "attributes": { "path": "pages/article-22.html", "size_bytes": 21590, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-23.html", "type": "html_artifact", "global_id": { "sha256": "464092adc6b1ce7479187eef8dc936d36b39c742b40e57835be434626e148f85" }, "attributes": { "path": "pages/article-23.html", "size_bytes": 29884, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-24.html", "type": "html_artifact", "global_id": { "sha256": "850fa12ec9c43b31bb6b6db34c9b054d08d0776733da2086d14c589d5ac5625e" }, "attributes": { "path": "pages/article-24.html", "size_bytes": 7683, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-25.html", "type": "html_artifact", "global_id": { "sha256": "e672ea97e7abea8294518029a6e5af3ed74029dfe2c60b6e9439ec2a68cf534f" }, "attributes": { "path": "pages/article-25.html", "size_bytes": 11766, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-26.html", "type": "html_artifact", "global_id": { "sha256": "266a60624da17b40ddd6dc65a8a6ddfdeef070226855795b465e46c6d2cfe669" }, "attributes": { "path": "pages/article-26.html", "size_bytes": 11934, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-27.html", "type": "html_artifact", "global_id": { "sha256": "9d8999ff3edaf32c4a5146b9ce00409366631e91c0c09f8d8c3933bf4fe97467" }, "attributes": { "path": "pages/article-27.html", "size_bytes": 16670, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-28.html", "type": "html_artifact", "global_id": { "sha256": "4e3db5ed537a672f8ce986d6fb5a4ff4c9e369e87b861b3d9320de5c2252e4a8" }, "attributes": { "path": "pages/article-28.html", "size_bytes": 17296, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-3.html", "type": "html_artifact", "global_id": { "sha256": "5252942ded17c80874a9dbf778e43d0c557db90e9fa7300c4915e8ec2a7918f2" }, "attributes": { "path": "pages/article-3.html", "size_bytes": 19462, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-4.html", "type": "html_artifact", "global_id": { "sha256": "b38e666a53a178360358b22e27ed0b71a13902e02688b473d429674495c8225a" }, "attributes": { "path": "pages/article-4.html", "size_bytes": 13543, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-5.html", "type": "html_artifact", "global_id": { "sha256": "fb23ddd3f14f350c8baa2e298a8c3475fb219553657ee460d0441642da741dd8" }, "attributes": { "path": "pages/article-5.html", "size_bytes": 19163, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-6.html", "type": "html_artifact", "global_id": { "sha256": "da595f6454e37513318e58ca7eb0b07caaa9faaea3546961a00dba6ee8da7edd" }, "attributes": { "path": "pages/article-6.html", "size_bytes": 17662, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-7.html", "type": "html_artifact", "global_id": { "sha256": "5a229a1e39867866da4f0d1d60ff3614ee968fc855092337388f329a6d93e9b6" }, "attributes": { "path": "pages/article-7.html", "size_bytes": 19306, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-8.html", "type": "html_artifact", "global_id": { "sha256": "c8be2b6a10a657999338e3a4731afd9788bdb1ad45dc4f415d9d2ad8e9eb225a" }, "attributes": { "path": "pages/article-8.html", "size_bytes": 24044, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/article-9.html", "type": "html_artifact", "global_id": { "sha256": "2254b78c0e70feecdd98c7500bea3c12667f1b6a345d75216aacefe8a04f9fba" }, "attributes": { "path": "pages/article-9.html", "size_bytes": 15516, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/articles.html", "type": "html_artifact", "global_id": { "sha256": "febd1e776b8c4456445e1d3275a03936ffdadb53fd5c95bcc57c91779d4e1da1" }, "attributes": { "path": "pages/articles.html", "size_bytes": 28207, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/books.html", "type": "html_artifact", "global_id": { "sha256": "dd1c8e2a91ec77ccfbdf7e5181f5703cfb034358d2fefa75b0408b98514e1ad1" }, "attributes": { "path": "pages/books.html", "size_bytes": 6333, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/contact.html", "type": "html_artifact", "global_id": { "sha256": "90ca1c85e3c513b4b4f5a9162be9a5bf8dd9ca97d038c1b1c7b82a46ee90ae7e" }, "attributes": { "path": "pages/contact.html", "size_bytes": 5512, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/projects.html", "type": "html_artifact", "global_id": { "sha256": "89ba908c408ff70784610ecae14257ab251200fe83a011be6f5177eb699dcf13" }, "attributes": { "path": "pages/projects.html", "size_bytes": 8506, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/success.html", "type": "html_artifact", "global_id": { "sha256": "7749edaf2b98b2932b332e9a323977b3b78f04ed1a0d42f75c4a67acb6541c46" }, "attributes": { "path": "pages/success.html", "size_bytes": 4071, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::pages/support.html", "type": "html_artifact", "global_id": { "sha256": "ea4929d6ecf2758294377aebfc2f670d5d7f8020e74e662ef24e1eae143eb3db" }, "attributes": { "path": "pages/support.html", "size_bytes": 5429, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::research/authorization-boundary.html", "type": "html_artifact", "global_id": { "sha256": "3b889c87c25ed525bdd1514be4267412d0a350d71860a2a3c30ceed34c6dbec9" }, "attributes": { "path": "research/authorization-boundary.html", "size_bytes": 18013, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::research/the-plumbing.html", "type": "html_artifact", "global_id": { "sha256": "dd491d87115ad7e646e8fd96db4ef003d05f2d28370b91c5844967ce7f96cad8" }, "attributes": { "path": "research/the-plumbing.html", "size_bytes": 31948, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::research/tuning-the-eigenvalue.html", "type": "html_artifact", "global_id": { "sha256": "9e9e7c4ebc3165439dcdd09edd73a5961860bbdc76847bb089feaa187ab7d9ad" }, "attributes": { "path": "research/tuning-the-eigenvalue.html", "size_bytes": 176854, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::silk-reeling-mirror.html", "type": "html_artifact", "global_id": { "sha256": "82ad3dafd953bfeef8de3b5ba4f0dd4998d50cf603d0df5616cde27146e140b2" }, "attributes": { "path": "silk-reeling-mirror.html", "size_bytes": 10414, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "html::viewer.html", "type": "html_artifact", "global_id": { "sha256": "0167c05a0268941907d7ea92644b76975c67b8850acde1de502f8aa2ad8541f5" }, "attributes": { "path": "viewer.html", "size_bytes": 15966, "function": "Public site content", "diagram_label": "S3 origin bucket (content)", "public": true, "baseline_configuration": "Static HTML served via CloudFront; SHA-256 content-addressed in canonical inventory", "iiw_asset_type": "Static Content Artifact", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": true, "archetype": "public-edge", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [ { "direction": "outbound", "counterparty": "object_store", "channel": "aws-internal-tls", "data_class": "public-content" } ] }, { "component_id": "ext::sigstore-fulcio", "type": "external_service", "native_id": "https://fulcio.sigstore.dev", "attributes": { "name": "Sigstore Fulcio", "purpose": "Issues short-lived X.509 signing certificates per CI run", "cia_impact": "signing-chain integrity", "verification_mechanism": "OIDC token bound to GitHub Actions workflow identity", "fedramp_status": "external; no separate FedRAMP authorization", "function": "External service in boundary per ROT #2 (affects CIA without separate FedRAMP ATO)", "diagram_label": "External service", "public": true, "baseline_configuration": "Public service; configuration governed by upstream provider; verification mechanism noted in attributes", "iiw_asset_type": "External Service (no FedRAMP ATO)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "internal-tooling", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [] }, { "component_id": "ext::sigstore-rekor", "type": "external_service", "native_id": "https://rekor.sigstore.dev", "attributes": { "name": "Sigstore Rekor", "purpose": "Append-only public transparency log of every signature", "cia_impact": "signing-chain integrity", "verification_mechanism": "Inclusion proof checked by cosign verify-blob", "fedramp_status": "external; no separate FedRAMP authorization", "function": "External service in boundary per ROT #2 (affects CIA without separate FedRAMP ATO)", "diagram_label": "External service", "public": true, "baseline_configuration": "Public service; configuration governed by upstream provider; verification mechanism noted in attributes", "iiw_asset_type": "External Service (no FedRAMP ATO)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "internal-tooling", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [] }, { "component_id": "ext::github-oidc", "type": "external_service", "native_id": "https://token.actions.githubusercontent.com", "attributes": { "name": "GitHub Actions OIDC token issuer", "purpose": "Issues per-workflow-run identity tokens consumed by Fulcio and AWS", "cia_impact": "identity / authentication", "verification_mechanism": "JWT signature verification against the issuer's public JWKS", "fedramp_status": "external; no separate FedRAMP authorization", "function": "External service in boundary per ROT #2 (affects CIA without separate FedRAMP ATO)", "diagram_label": "External service", "public": true, "baseline_configuration": "Public service; configuration governed by upstream provider; verification mechanism noted in attributes", "iiw_asset_type": "External Service (no FedRAMP ATO)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "internal-tooling", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [] }, { "component_id": "ext::github-repo", "type": "external_service", "native_id": "https://github.com/sam-aydlette/samaydlette.com", "attributes": { "name": "GitHub repository + Actions", "purpose": "Source of record; CI/CD orchestrator", "cia_impact": "deploy-chain integrity", "verification_mechanism": "Branch protection on main, OPA gate, SCN tag validator, secret scanning with push protection", "fedramp_status": "external; no separate FedRAMP authorization", "function": "External service in boundary per ROT #2 (affects CIA without separate FedRAMP ATO)", "diagram_label": "External service", "public": true, "baseline_configuration": "Public service; configuration governed by upstream provider; verification mechanism noted in attributes", "iiw_asset_type": "External Service (no FedRAMP ATO)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "internal-tooling", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [] }, { "component_id": "ext::duo-mfa", "type": "external_service", "native_id": "duo:operator-mfa", "attributes": { "name": "Duo (operator MFA)", "purpose": "Multi-factor authentication for AWS root and the GitHub account", "cia_impact": "privileged-account authentication", "verification_mechanism": "Operator-side configuration; tenant identifier intentionally not published in this inventory.", "fedramp_status": "external; no separate FedRAMP authorization", "function": "External service in boundary per ROT #2 (affects CIA without separate FedRAMP ATO)", "diagram_label": "External service", "public": true, "baseline_configuration": "Public service; configuration governed by upstream provider; verification mechanism noted in attributes", "iiw_asset_type": "External Service (no FedRAMP ATO)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "internal-tooling", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [] }, { "component_id": "ext::github-advisory-db", "type": "external_service", "native_id": "https://github.com/advisories", "attributes": { "name": "GitHub Advisory Database", "purpose": "Upstream vulnerability data for Dependabot", "cia_impact": "VDR ingest accuracy", "verification_mechanism": "Public service; corroborated against CISA KEV", "fedramp_status": "external; no separate FedRAMP authorization", "function": "External service in boundary per ROT #2 (affects CIA without separate FedRAMP ATO)", "diagram_label": "External service", "public": true, "baseline_configuration": "Public service; configuration governed by upstream provider; verification mechanism noted in attributes", "iiw_asset_type": "External Service (no FedRAMP ATO)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "internal-tooling", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [] }, { "component_id": "ext::cisa-kev", "type": "external_service", "native_id": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "attributes": { "name": "CISA Known Exploited Vulnerabilities catalog", "purpose": "Authoritative list of CVEs known to be actively exploited", "cia_impact": "VDR ingest accuracy", "verification_mechanism": "U.S. federal government source", "fedramp_status": "external; U.S. federal government source", "function": "External service in boundary per ROT #2 (affects CIA without separate FedRAMP ATO)", "diagram_label": "External service", "public": true, "baseline_configuration": "Public service; configuration governed by upstream provider; verification mechanism noted in attributes", "iiw_asset_type": "External Service (no FedRAMP ATO)", "classification": { "data_sensitivity": "public", "mission_criticality": "moderate", "internet_reachable": false, "archetype": "internal-tooling", "agency_scope": "single", "owner": "platform-operator" } }, "security_category": { "confidentiality": "low", "integrity": "moderate", "availability": "low" }, "information_flow": [] } ], "validations": [ { "validation_id": "r-0000", "policy": { "id": "terraform.compliance", "version": "wasm-c03f05d1cf3e" }, "result": "pass", "component_refs": [ "aws::object_store::website" ], "violations": [] }, { "validation_id": "r-0001", "policy": { "id": "terraform.compliance", "version": "wasm-c03f05d1cf3e" }, "result": "pass", "component_refs": [ "aws::object_store::cloudtrail" ], "violations": [] }, { "validation_id": "r-0002", "policy": { "id": "terraform.compliance", "version": "wasm-c03f05d1cf3e" }, "result": "pass", "component_refs": [ "aws::object_store::logs" ], "violations": [] }, { "validation_id": "r-0003", "policy": { "id": "terraform.compliance", "version": "wasm-c03f05d1cf3e" }, "result": "pass", "component_refs": [ "aws::cdn_distribution::website" ], "violations": [] }, { "validation_id": "r-0004", "policy": { "id": "secret.rotation.sc-12", "version": "cadence-395d" }, "result": "pass", "component_refs": [ "aws::secrets_manager::silk_anthropic" ], "violations": [] } ], "divergence": { "status": "converged", "compared_against": { "signal_id": "e471f9b8-f547-4807-95ad-e3f6d6a1bad9", "emitted_at": "2026-08-07T00:12:51Z", "commit": "d4ca7e21ac10a3f2c97b7d51dd1ef7efa153fbed" }, "ksis_compared": 46, "regressions": [], "unassessed": [], "unattributed_failures": 0 } }