github.com/CycloneDX/sbom-utility@v0.16.0/examples/cyclonedx/SaaSBOM/apigateway-microservices-datastores/bom.json (about)

     1  {
     2    "bomFormat": "CycloneDX",
     3    "specVersion": "1.4",
     4    "serialNumber": "urn:uuid:3e671687-395b-41f5-a30f-a58921a69b79",
     5    "version": 1,
     6    "metadata": {
     7      "timestamp": "2021-01-10T12:00:00Z",
     8      "component": {
     9        "bom-ref": "acme-application",
    10        "type": "application",
    11        "name": "Acme Cloud Example",
    12        "version": "2022-1"
    13      }
    14    },
    15    "services": [
    16      {
    17        "bom-ref": "api-gateway",
    18        "provider": {
    19          "name": "Acme Inc",
    20          "url": [ "https://example.com" ]
    21        },
    22        "group": "com.example",
    23        "name": "API Gateway",
    24        "version": "2022-1",
    25        "description": "Example API Gateway",
    26        "endpoints": [
    27          "https://example.com/",
    28          "https://example.com/app"
    29        ],
    30        "authenticated": false,
    31        "x-trust-boundary": true,
    32        "data": [
    33          {
    34            "classification": "PII",
    35            "flow": "bi-directional"
    36          },
    37          {
    38            "classification": "PIFI",
    39            "flow": "bi-directional"
    40          },
    41          {
    42            "classification": "Public",
    43            "flow": "bi-directional"
    44          }
    45        ],
    46        "externalReferences": [
    47          {
    48            "type": "documentation",
    49            "url": "http://example.com/app/swagger"
    50          }
    51        ],
    52        "services": [
    53          {
    54            "bom-ref": "ms-1.example.com",
    55            "provider": {
    56              "name": "Acme Inc",
    57              "url": [ "https://example.com" ]
    58            },
    59            "group": "com.example",
    60            "name": "Microservice 1",
    61            "version": "2022-1",
    62            "description": "Example Microservice",
    63            "endpoints": [
    64              "https://ms-1.example.com"
    65            ],
    66            "authenticated": true,
    67            "x-trust-boundary": false,
    68            "data": [
    69              {
    70                "classification": "PII",
    71                "flow": "bi-directional"
    72              }
    73            ],
    74            "externalReferences": [
    75              {
    76                "type": "documentation",
    77                "url": "https://ms-1.example.com/swagger"
    78              }
    79            ]
    80          },
    81          {
    82            "bom-ref": "ms-2.example.com",
    83            "provider": {
    84              "name": "Acme Inc",
    85              "url": [ "https://example.com" ]
    86            },
    87            "group": "com.example",
    88            "name": "Microservice 2",
    89            "version": "2022-1",
    90            "description": "Example Microservice",
    91            "endpoints": [
    92              "https://ms-2.example.com"
    93            ],
    94            "authenticated": true,
    95            "x-trust-boundary": false,
    96            "data": [
    97              {
    98                "classification": "PIFI",
    99                "flow": "bi-directional"
   100              }
   101            ],
   102            "externalReferences": [
   103              {
   104                "type": "documentation",
   105                "url": "https://ms-2.example.com/swagger"
   106              }
   107            ]
   108          },
   109          {
   110            "bom-ref": "ms-3.example.com",
   111            "provider": {
   112              "name": "Acme Inc",
   113              "url": [ "https://example.com" ]
   114            },
   115            "group": "com.example",
   116            "name": "Microservice 3",
   117            "version": "2022-1",
   118            "description": "Example Microservice",
   119            "endpoints": [
   120              "https://ms-3.example.com"
   121            ],
   122            "authenticated": true,
   123            "x-trust-boundary": false,
   124            "data": [
   125              {
   126                "classification": "Public",
   127                "flow": "bi-directional"
   128              }
   129            ],
   130            "externalReferences": [
   131              {
   132                "type": "documentation",
   133                "url": "https://ms-3.example.com/swagger"
   134              }
   135            ]
   136          },
   137          {
   138            "bom-ref": "ms-1-pgsql.example.com",
   139            "group": "org.postgresql",
   140            "name": "Postgres",
   141            "version": "14.1",
   142            "description": "Postgres database for Microservice #1",
   143            "endpoints": [
   144              "https://ms-1-pgsql.example.com:5432"
   145            ],
   146            "authenticated": true,
   147            "x-trust-boundary": false,
   148            "data": [
   149              {
   150                "classification": "PII",
   151                "flow": "bi-directional"
   152              }
   153            ]
   154          },
   155          {
   156            "bom-ref": "s3-example.amazon.com",
   157            "group": "com.amazon",
   158            "name": "S3",
   159            "description": "S3 bucket",
   160            "endpoints": [
   161              "https://s3-example.amazon.com"
   162            ],
   163            "authenticated": true,
   164            "x-trust-boundary": true,
   165            "data": [
   166              {
   167                "classification": "Public",
   168                "flow": "bi-directional"
   169              }
   170            ]
   171          }
   172        ]
   173      }
   174    ],
   175    "dependencies": [
   176      {
   177        "ref": "acme-application",
   178        "dependsOn": [ "api-gateway" ]
   179      },
   180      {
   181        "ref": "api-gateway",
   182        "dependsOn": [
   183          "ms-1.example.com",
   184          "ms-2.example.com",
   185          "ms-3.example.com"
   186        ]
   187      },
   188      {
   189        "ref": "ms-1.example.com",
   190        "dependsOn": [ "ms-1-pgsql.example.com" ]
   191      },
   192      {
   193        "ref": "ms-2.example.com",
   194        "dependsOn": [ ]
   195      },
   196      {
   197        "ref": "ms-3.example.com",
   198        "dependsOn": [ "s3-example.amazon.com" ]
   199      }
   200    ]
   201  }