Kion Cloud Operations API

openapi: 3.1.0
info:
  title: Kion Cloud Operations API
  description: >-
    The Kion Public API provides programmatic access to manage cloud operations,
    governance, compliance, and financial management across AWS, Azure, GCP, and
    OCI. Kion is a self-hosted cloud operations platform that consolidates
    account provisioning, access management, compliance enforcement, and FinOps
    into a single interface. The API uses Bearer token authentication via Kion
    App API Keys and is accessible at the /api/v3/ path of your Kion instance.
  version: 3.10.0
  contact:
    name: Kion Support
    url: https://support.kion.io
  license:
    name: Proprietary
    url: https://kion.io/why-kion/pricing-and-licensing/
servers:
  - url: https://{kion-instance}/api/v3
    description: Kion Instance API Server
    variables:
      kion-instance:
        default: your-kion-instance.example.com
        description: Your Kion deployment hostname
security:
  - bearerAuth: []
tags:
  - name: Accounts
    description: Manage cloud accounts across AWS, Azure, GCP, and OCI
  - name: App Configuration
    description: Manage Kion application configuration settings
  - name: Azure ARM Templates
    description: Manage Azure ARM templates
  - name: Azure Policies
    description: Manage Azure policies
  - name: Azure Roles
    description: Manage Azure roles
  - name: Cloud Access Roles
    description: Manage cloud access roles for OU and project level access
  - name: Cloud Rules
    description: Manage cloud rules that enforce policies on cloud accounts
  - name: CloudFormation Templates
    description: Manage AWS CloudFormation templates
  - name: Compliance Checks
    description: Manage compliance checks for auditing cloud resources
  - name: Compliance Standards
    description: Manage compliance standards grouping multiple compliance checks
  - name: Custom Variables
    description: Manage custom variables and overrides
  - name: Enforcements
    description: Manage project enforcements
  - name: Funding Sources
    description: Manage funding sources for tracking and allocating cloud spend
  - name: GCP IAM Roles
    description: Manage GCP IAM roles
  - name: IAM Policies
    description: Manage AWS IAM policies
  - name: Identity Management
    description: Manage identity management systems (IDMS)
  - name: Labels
    description: Manage labels for organizing and categorizing resources
  - name: Organizational Units
    description: Manage organizational units (OUs) for hierarchical organization
  - name: Permission Mappings
    description: Manage permission mappings at global, OU, project, and funding source levels
  - name: Projects
    description: Manage projects which are the organizational unit for attaching cloud accounts
  - name: SAML Group Associations
    description: Manage SAML group associations for SSO integration
  - name: Service Control Policies
    description: Manage AWS service control policies
  - name: User Groups
    description: Manage user groups for role-based access control
  - name: Users
    description: Manage users within the Kion platform
  - name: Webhooks
    description: Manage webhooks for event notifications
paths:
  /account:
    get:
      operationId: listAccounts
      summary: Kion List accounts
      description: Returns a list of all cloud accounts managed by Kion.
      tags:
        - Accounts
      parameters:
        - $ref: '#/components/parameters/PageParam'
        - $ref: '#/components/parameters/PageSizeParam'
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                    example: 200
                  data:
                    type: array
                    items:
                      $ref: '#/components/schemas/Account'
        '401':
          $ref: '#/components/responses/Unauthorized'
    post:
      operationId: createAccount
      summary: Kion Create an account
      description: Creates a new cloud account in Kion.
      tags:
        - Accounts
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AccountCreate'
      responses:
        '201':
          description: Account created
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                    example: 201
                  data:
                    $ref: '#/components/schemas/Account'
        '401':
          $ref: '#/components/responses/Unauthorized'
  /account/{id}:
    get:
      operationId: getAccount
      summary: Kion Get an account
      description: Returns details for a specific cloud account.
      tags:
        - Accounts
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    $ref: '#/components/schemas/Account'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
    patch:
      operationId: updateAccount
      summary: Kion Update an account
      description: Updates an existing cloud account.
      tags:
        - Accounts
      parameters:
        - $ref: '#/components/parameters/IdParam'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AccountUpdate'
      responses:
        '200':
          description: Account updated
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    $ref: '#/components/schemas/Account'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
  /project:
    get:
      operationId: listProjects
      summary: Kion List projects
      description: Returns a list of all projects.
      tags:
        - Projects
      parameters:
        - $ref: '#/components/parameters/PageParam'
        - $ref: '#/components/parameters/PageSizeParam'
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    type: array
                    items:
                      $ref: '#/components/schemas/Project'
        '401':
          $ref: '#/components/responses/Unauthorized'
    post:
      operationId: createProject
      summary: Kion Create a project
      description: Creates a new project in Kion.
      tags:
        - Projects
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ProjectCreate'
      responses:
        '201':
          description: Project created
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    $ref: '#/components/schemas/Project'
        '401':
          $ref: '#/components/responses/Unauthorized'
  /project/{id}:
    get:
      operationId: getProject
      summary: Kion Get a project
      description: Returns details for a specific project.
      tags:
        - Projects
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    $ref: '#/components/schemas/Project'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
    patch:
      operationId: updateProject
      summary: Kion Update a project
      description: Updates an existing project.
      tags:
        - Projects
      parameters:
        - $ref: '#/components/parameters/IdParam'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ProjectUpdate'
      responses:
        '200':
          description: Project updated
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
    delete:
      operationId: deleteProject
      summary: Kion Delete a project
      description: Deletes a project.
      tags:
        - Projects
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '204':
          description: Project deleted
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
  /project/{id}/note:
    get:
      operationId: listProjectNotes
      summary: Kion List project notes
      description: Returns notes for a specific project.
      tags:
        - Projects
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    type: array
                    items:
                      $ref: '#/components/schemas/ProjectNote'
        '401':
          $ref: '#/components/responses/Unauthorized'
    post:
      operationId: createProjectNote
      summary: Kion Create a project note
      description: Creates a note on a project.
      tags:
        - Projects
      parameters:
        - $ref: '#/components/parameters/IdParam'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ProjectNoteCreate'
      responses:
        '201':
          description: Note created
        '401':
          $ref: '#/components/responses/Unauthorized'
  /project/{id}/enforcement:
    get:
      operationId: listProjectEnforcements
      summary: Kion List project enforcements
      description: Returns enforcements for a specific project.
      tags:
        - Enforcements
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    type: array
                    items:
                      $ref: '#/components/schemas/ProjectEnforcement'
        '401':
          $ref: '#/components/responses/Unauthorized'
    post:
      operationId: createProjectEnforcement
      summary: Kion Create a project enforcement
      description: Creates an enforcement on a project.
      tags:
        - Enforcements
      parameters:
        - $ref: '#/components/parameters/IdParam'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ProjectEnforcementCreate'
      responses:
        '201':
          description: Enforcement created
        '401':
          $ref: '#/components/responses/Unauthorized'
  /project/{id}/cloud-access-role:
    get:
      operationId: listProjectCloudAccessRoles
      summary: Kion List project cloud access roles
      description: Returns cloud access roles for a specific project.
      tags:
        - Cloud Access Roles
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    type: array
                    items:
                      $ref: '#/components/schemas/CloudAccessRole'
        '401':
          $ref: '#/components/responses/Unauthorized'
    post:
      operationId: createProjectCloudAccessRole
      summary: Kion Create a project cloud access role
      description: Creates a cloud access role on a project.
      tags:
        - Cloud Access Roles
      parameters:
        - $ref: '#/components/parameters/IdParam'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CloudAccessRoleCreate'
      responses:
        '201':
          description: Cloud access role created
        '401':
          $ref: '#/components/responses/Unauthorized'
  /project/{id}/permission-mapping:
    get:
      operationId: listProjectPermissionMappings
      summary: Kion List project permission mappings
      description: Returns permission mappings for a specific project.
      tags:
        - Permission Mappings
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '200':
          description: Successful response
        '401':
          $ref: '#/components/responses/Unauthorized'
    post:
      operationId: createProjectPermissionMapping
      summary: Kion Create a project permission mapping
      description: Creates a permission mapping on a project.
      tags:
        - Permission Mappings
      parameters:
        - $ref: '#/components/parameters/IdParam'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PermissionMappingCreate'
      responses:
        '201':
          description: Permission mapping created
        '401':
          $ref: '#/components/responses/Unauthorized'
  /ou:
    get:
      operationId: listOUs
      summary: Kion List organizational units
      description: Returns a list of all organizational units.
      tags:
        - Organizational Units
      parameters:
        - $ref: '#/components/parameters/PageParam'
        - $ref: '#/components/parameters/PageSizeParam'
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    type: array
                    items:
                      $ref: '#/components/schemas/OU'
        '401':
          $ref: '#/components/responses/Unauthorized'
    post:
      operationId: createOU
      summary: Kion Create an organizational unit
      description: Creates a new organizational unit.
      tags:
        - Organizational Units
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OUCreate'
      responses:
        '201':
          description: OU created
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    $ref: '#/components/schemas/OU'
        '401':
          $ref: '#/components/responses/Unauthorized'
  /ou/{id}:
    get:
      operationId: getOU
      summary: Kion Get an organizational unit
      description: Returns details for a specific organizational unit.
      tags:
        - Organizational Units
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    $ref: '#/components/schemas/OU'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
    patch:
      operationId: updateOU
      summary: Kion Update an organizational unit
      description: Updates an existing organizational unit.
      tags:
        - Organizational Units
      parameters:
        - $ref: '#/components/parameters/IdParam'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OUUpdate'
      responses:
        '200':
          description: OU updated
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
    delete:
      operationId: deleteOU
      summary: Kion Delete an organizational unit
      description: Deletes an organizational unit.
      tags:
        - Organizational Units
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '204':
          description: OU deleted
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
  /ou/{id}/cloud-access-role:
    get:
      operationId: listOUCloudAccessRoles
      summary: Kion List OU cloud access roles
      description: Returns cloud access roles for a specific OU.
      tags:
        - Cloud Access Roles
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '200':
          description: Successful response
        '401':
          $ref: '#/components/responses/Unauthorized'
    post:
      operationId: createOUCloudAccessRole
      summary: Kion Create an OU cloud access role
      description: Creates a cloud access role on an OU.
      tags:
        - Cloud Access Roles
      parameters:
        - $ref: '#/components/parameters/IdParam'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CloudAccessRoleCreate'
      responses:
        '201':
          description: Cloud access role created
        '401':
          $ref: '#/components/responses/Unauthorized'
  /ou/{id}/permission-mapping:
    get:
      operationId: listOUPermissionMappings
      summary: Kion List OU permission mappings
      description: Returns permission mappings for a specific OU.
      tags:
        - Permission Mappings
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '200':
          description: Successful response
        '401':
          $ref: '#/components/responses/Unauthorized'
    post:
      operationId: createOUPermissionMapping
      summary: Kion Create an OU permission mapping
      description: Creates a permission mapping on an OU.
      tags:
        - Permission Mappings
      parameters:
        - $ref: '#/components/parameters/IdParam'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/PermissionMappingCreate'
      responses:
        '201':
          description: Permission mapping created
        '401':
          $ref: '#/components/responses/Unauthorized'
  /cloud-rule:
    get:
      operationId: listCloudRules
      summary: Kion List cloud rules
      description: Returns a list of all cloud rules.
      tags:
        - Cloud Rules
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    type: array
                    items:
                      $ref: '#/components/schemas/CloudRule'
        '401':
          $ref: '#/components/responses/Unauthorized'
    post:
      operationId: createCloudRule
      summary: Kion Create a cloud rule
      description: Creates a new cloud rule.
      tags:
        - Cloud Rules
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CloudRuleCreate'
      responses:
        '201':
          description: Cloud rule created
        '401':
          $ref: '#/components/responses/Unauthorized'
  /cloud-rule/{id}:
    get:
      operationId: getCloudRule
      summary: Kion Get a cloud rule
      description: Returns details for a specific cloud rule.
      tags:
        - Cloud Rules
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    $ref: '#/components/schemas/CloudRule'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
    patch:
      operationId: updateCloudRule
      summary: Kion Update a cloud rule
      description: Updates an existing cloud rule.
      tags:
        - Cloud Rules
      parameters:
        - $ref: '#/components/parameters/IdParam'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CloudRuleUpdate'
      responses:
        '200':
          description: Cloud rule updated
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
    delete:
      operationId: deleteCloudRule
      summary: Kion Delete a cloud rule
      description: Deletes a cloud rule.
      tags:
        - Cloud Rules
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '204':
          description: Cloud rule deleted
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
  /compliance-check:
    get:
      operationId: listComplianceChecks
      summary: Kion List compliance checks
      description: Returns a list of all compliance checks.
      tags:
        - Compliance Checks
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    type: array
                    items:
                      $ref: '#/components/schemas/ComplianceCheck'
        '401':
          $ref: '#/components/responses/Unauthorized'
    post:
      operationId: createComplianceCheck
      summary: Kion Create a compliance check
      description: Creates a new compliance check.
      tags:
        - Compliance Checks
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ComplianceCheckCreate'
      responses:
        '201':
          description: Compliance check created
        '401':
          $ref: '#/components/responses/Unauthorized'
  /compliance-check/{id}:
    get:
      operationId: getComplianceCheck
      summary: Kion Get a compliance check
      description: Returns details for a specific compliance check.
      tags:
        - Compliance Checks
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    $ref: '#/components/schemas/ComplianceCheck'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
    patch:
      operationId: updateComplianceCheck
      summary: Kion Update a compliance check
      description: Updates an existing compliance check.
      tags:
        - Compliance Checks
      parameters:
        - $ref: '#/components/parameters/IdParam'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ComplianceCheckUpdate'
      responses:
        '200':
          description: Compliance check updated
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
    delete:
      operationId: deleteComplianceCheck
      summary: Kion Delete a compliance check
      description: Deletes a compliance check.
      tags:
        - Compliance Checks
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '204':
          description: Compliance check deleted
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
  /compliance-standard:
    get:
      operationId: listComplianceStandards
      summary: Kion List compliance standards
      description: Returns a list of all compliance standards.
      tags:
        - Compliance Standards
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    type: array
                    items:
                      $ref: '#/components/schemas/ComplianceStandard'
        '401':
          $ref: '#/components/responses/Unauthorized'
    post:
      operationId: createComplianceStandard
      summary: Kion Create a compliance standard
      description: Creates a new compliance standard.
      tags:
        - Compliance Standards
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ComplianceStandardCreate'
      responses:
        '201':
          description: Compliance standard created
        '401':
          $ref: '#/components/responses/Unauthorized'
  /compliance-standard/{id}:
    get:
      operationId: getComplianceStandard
      summary: Kion Get a compliance standard
      description: Returns details for a specific compliance standard.
      tags:
        - Compliance Standards
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    $ref: '#/components/schemas/ComplianceStandard'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
    patch:
      operationId: updateComplianceStandard
      summary: Kion Update a compliance standard
      description: Updates an existing compliance standard.
      tags:
        - Compliance Standards
      parameters:
        - $ref: '#/components/parameters/IdParam'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/ComplianceStandardUpdate'
      responses:
        '200':
          description: Compliance standard updated
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
    delete:
      operationId: deleteComplianceStandard
      summary: Kion Delete a compliance standard
      description: Deletes a compliance standard.
      tags:
        - Compliance Standards
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '204':
          description: Compliance standard deleted
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
  /funding-source:
    get:
      operationId: listFundingSources
      summary: Kion List funding sources
      description: Returns a list of all funding sources.
      tags:
        - Funding Sources
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    type: array
                    items:
                      $ref: '#/components/schemas/FundingSource'
        '401':
          $ref: '#/components/responses/Unauthorized'
    post:
      operationId: createFundingSource
      summary: Kion Create a funding source
      description: Creates a new funding source.
      tags:
        - Funding Sources
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/FundingSourceCreate'
      responses:
        '201':
          description: Funding source created
        '401':
          $ref: '#/components/responses/Unauthorized'
  /funding-source/{id}:
    get:
      operationId: getFundingSource
      summary: Kion Get a funding source
      description: Returns details for a specific funding source.
      tags:
        - Funding Sources
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '200':
          description: Successful response
          content:
            application/json:
              schema:
                type: object
                properties:
                  status:
                    type: integer
                  data:
                    $ref: '#/components/schemas/FundingSource'
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
    patch:
      operationId: updateFundingSource
      summary: Kion Update a funding source
      description: Updates an existing funding source.
      tags:
        - Funding Sources
      parameters:
        - $ref: '#/components/parameters/IdParam'
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/FundingSourceUpdate'
      responses:
        '200':
          description: Funding source updated
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
    delete:
      operationId: deleteFundingSource
      summary: Kion Delete a funding source
      description: Deletes a funding source.
      tags:
        - Funding Sources
      parameters:
        - $ref: '#/components/parameters/IdParam'
      responses:
        '204':
          description: Funding source deleted
        '401':
          $ref: '#/components/responses/Unauthorized'
        '404':
          $ref: '#/components/responses/NotFound'
  /funding-source/{id}/permission-mapping:
    get:
      operationId: listFundingSourcePermissionMappings
      summary: Kion List funding source permission mappings
      description: Returns permission mappings for a specific funding source.
      tags:
        - Permission 

# --- truncated at 32 KB (112 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/kion/refs/heads/main/openapi/kion-cloud-operations-api-openapi.yml