id: wallix_bastion
name: WALLIX Bastion
version: 1.0.0
description: "WALLIX Bastion (PAM REST API) — privileged access visibility: list devices, accounts and authorizations, and list/read sessions. API-key authentication; stdlib-only, no extra Python dependencies. (French vendor.)"
changelog: "1.0.0 — Initial release: list devices/accounts/authorizations, list/get sessions."
category: identity

# Per-instance configuration. Auth uses the 'X-Auth-User' and 'X-Auth-Key' headers.
config_schema:
  properties:
    base_url:
      type: string
      description: "Bastion URL (e.g. https://bastion.example.com)"
    api_user:
      type: string
      description: "API user name"
    api_key:
      type: string
      description: "API key"
      x-soar-sensitive: true
    insecure:
      type: boolean
      description: "Trust any TLS certificate (not secure)"
      default: false
  required:
    - base_url
    - api_user
    - api_key

commands:
  - id: list_devices
    name: wallix-list-devices
    description: "List devices."
    risk: read
    inputs_schema:
      properties:
        limit: { type: number, description: "Max devices (default 50)" }
      required: []
    outputs_schema: { properties: {} }
  - id: list_accounts
    name: wallix-list-accounts
    description: "List accounts."
    risk: read
    inputs_schema:
      properties:
        limit: { type: number, description: "Max accounts (default 50)" }
      required: []
    outputs_schema: { properties: {} }
  - id: list_authorizations
    name: wallix-list-authorizations
    description: "List authorizations."
    risk: read
    inputs_schema:
      properties: {}
      required: []
    outputs_schema: { properties: {} }
  - id: list_sessions
    name: wallix-list-sessions
    description: "List sessions (optionally filter by status)."
    risk: read
    inputs_schema:
      properties:
        status: { type: string, description: "Status filter (e.g. current, closed)" }
      required: []
    outputs_schema: { properties: {} }
  - id: get_session
    name: wallix-get-session
    description: "Get a single session by ID."
    risk: read
    inputs_schema:
      properties:
        session_id: { type: string, description: "Session ID" }
      required: [session_id]
    outputs_schema: { properties: {} }

  - id: test_connection
    name: wallix-test-connection
    description: "Verify connectivity and credentials (used by the Test button)."
    risk: read
    inputs_schema:
      properties: {}
      required: []
    outputs_schema: { properties: {} }