Skip to main content
PATCH
Update an information asset

Authorizations

X-API-Key
string
header
required

API key for authentication

Path Parameters

id
string
required

Asset ID

Example:

"ast_abc123def456"

Body

application/json
name
string

Asset name

Example:

"Production PostgreSQL (AWS RDS)"

description
string | null

What the asset is and how it is used

Example:

"Primary application database holding patient records"

type
enum<string>

Kind of asset

Available options:
vendor,
cloud_resource,
internal_system,
workforce_devices,
data_flow,
physical_media,
other
Example:

"cloud_resource"

status
enum<string>
default:active

Lifecycle status; retired assets drop out of the assessment

Available options:
active,
retired
location
string | null

Where the asset lives

Example:

"AWS us-east-1"

ephiCreated
boolean

ePHI is created at this asset

ephiReceived
boolean

ePHI is received by this asset

ephiMaintained
boolean

ePHI is stored or maintained at this asset

ephiTransmitted
boolean

ePHI is transmitted through this asset

dataDescription
string | null

What ePHI the asset holds or moves

Example:

"Patient demographics, lab results"

vendorId
string | null

Vendor this asset represents, if any

Example:

"vnd_abc123def456"

integrationConnectionId
string | null

Integration connection this asset was discovered through, if any

Example:

"icn_abc123def456"

ownerId
string | null

Member ID of the asset owner

Example:

"mem_abc123def456"

sourceKey
string | null

Stable suggestion key ("vendor:vnd_x"). Creating with a key that already exists updates that asset instead of duplicating it.

Example:

"vendor:vnd_abc123def456"

riskIds
string[]

Risk IDs that apply to this asset. Replaces the full set.

Example:

Response

200