cartography 0.104.0rc2__py3-none-any.whl → 0.123.0__py3-none-any.whl

cartography/models/gsuite/group.py

@@ -0,0 +1,218 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_source_node_matcher
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import SourceNodeMatcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class GSuiteGroupNodeProperties(CartographyNodeProperties):
+    """
+    GSuite group node properties
+    """
+
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+    # Group identifiers and basic info
+    group_id: PropertyRef = PropertyRef("id")  # Alias for id
+    email: PropertyRef = PropertyRef("email", extra_index=True)
+    name: PropertyRef = PropertyRef("name")
+    description: PropertyRef = PropertyRef("description")
+
+    # Group settings
+    admin_created: PropertyRef = PropertyRef("adminCreated")
+    direct_members_count: PropertyRef = PropertyRef("directMembersCount")
+
+    # Metadata
+    etag: PropertyRef = PropertyRef("etag")
+    kind: PropertyRef = PropertyRef("kind")
+
+    # Tenant relationship
+    customer_id: PropertyRef = PropertyRef("CUSTOMER_ID", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GSuiteGroupToTenantRelProperties(CartographyRelProperties):
+    """
+    Properties for GSuite group to tenant relationship
+    """
+
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GSuiteGroupToTenantRel(CartographyRelSchema):
+    """
+    Relationship from GSuite group to GSuite tenant
+    """
+
+    target_node_label: str = "GSuiteTenant"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "id": PropertyRef("CUSTOMER_ID", set_in_kwargs=True),
+        }
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "RESOURCE"
+    properties: GSuiteGroupToTenantRelProperties = GSuiteGroupToTenantRelProperties()
+
+
+@dataclass(frozen=True)
+class GSuiteGroupToMemberRelProperties(CartographyRelProperties):
+    """
+    Properties for GSuite group to member relationship
+    """
+
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GSuiteGroupToMemberRel(CartographyRelSchema):
+    """
+    Relationship from GSuite group to its members (users or groups)
+    """
+
+    target_node_label: str = "GSuiteUser"  # or GSuiteGroup for subgroup relationships
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "id": PropertyRef("member_ids", one_to_many=True),
+        }
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "MEMBER_GSUITE_GROUP"
+    properties: GSuiteGroupToMemberRelProperties = GSuiteGroupToMemberRelProperties()
+
+
+@dataclass(frozen=True)
+class GSuiteGroupToOwnerRelProperties(CartographyRelProperties):
+    """
+    Properties for GSuite group to owner relationship
+    """
+
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GSuiteGroupToOwnerRel(CartographyRelSchema):
+    """
+    Relationship from GSuite group to its owners (users)
+    """
+
+    target_node_label: str = "GSuiteUser"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "id": PropertyRef("owner_ids", one_to_many=True),
+        }
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "OWNER_GSUITE_GROUP"
+    properties: GSuiteGroupToOwnerRelProperties = GSuiteGroupToOwnerRelProperties()
+
+
+@dataclass(frozen=True)
+class GSuiteGroupSchema(CartographyNodeSchema):
+    """
+    GSuite group node schema
+    """
+
+    label: str = "GSuiteGroup"
+    properties: GSuiteGroupNodeProperties = GSuiteGroupNodeProperties()
+    sub_resource_relationship: GSuiteGroupToTenantRel = GSuiteGroupToTenantRel()
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(["GCPPrincipal"])
+    other_relationships = OtherRelationships(
+        [
+            GSuiteGroupToMemberRel(),
+            GSuiteGroupToOwnerRel(),
+        ]
+    )
+
+
+# MatchLinks for Group => Group relationships
+
+
+@dataclass(frozen=True)
+class GSuiteGroupToGroupMemberRelProperties(CartographyRelProperties):
+    """
+    Properties for GSuite group to group member relationship (MatchLink)
+    """
+
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    _sub_resource_label: PropertyRef = PropertyRef(
+        "_sub_resource_label", set_in_kwargs=True
+    )
+    _sub_resource_id: PropertyRef = PropertyRef("_sub_resource_id", set_in_kwargs=True)
+    role: PropertyRef = PropertyRef("role")
+
+
+@dataclass(frozen=True)
+class GSuiteGroupToGroupMemberRel(CartographyRelSchema):
+    """
+    MatchLink relationship from GSuite parent group to member group
+    """
+
+    target_node_label: str = "GSuiteGroup"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "id": PropertyRef("subgroup_id"),
+        }
+    )
+    source_node_label: str = "GSuiteGroup"
+    source_node_matcher: SourceNodeMatcher = make_source_node_matcher(
+        {
+            "id": PropertyRef("parent_group_id"),
+        }
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "MEMBER_GSUITE_GROUP"
+    properties: GSuiteGroupToGroupMemberRelProperties = (
+        GSuiteGroupToGroupMemberRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class GSuiteGroupToGroupOwnerRelProperties(CartographyRelProperties):
+    """
+    Properties for GSuite group to group owner relationship (MatchLink)
+    """
+
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+    _sub_resource_label: PropertyRef = PropertyRef(
+        "_sub_resource_label", set_in_kwargs=True
+    )
+    _sub_resource_id: PropertyRef = PropertyRef("_sub_resource_id", set_in_kwargs=True)
+    role: PropertyRef = PropertyRef("role")
+
+
+@dataclass(frozen=True)
+class GSuiteGroupToGroupOwnerRel(CartographyRelSchema):
+    """
+    MatchLink relationship from GSuite parent group to owner group
+    """
+
+    target_node_label: str = "GSuiteGroup"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "id": PropertyRef("subgroup_id"),
+        }
+    )
+    source_node_label: str = "GSuiteGroup"
+    source_node_matcher: SourceNodeMatcher = make_source_node_matcher(
+        {
+            "id": PropertyRef("parent_group_id"),
+        }
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "OWNER_GSUITE_GROUP"
+    properties: GSuiteGroupToGroupOwnerRelProperties = (
+        GSuiteGroupToGroupOwnerRelProperties()
+    )

cartography/models/gsuite/tenant.py

@@ -0,0 +1,29 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+
+
+@dataclass(frozen=True)
+class GSuiteTenantNodeProperties(CartographyNodeProperties):
+    """
+    GSuite tenant (domain/customer) node properties
+    """
+
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+    # Customer/domain identifier - use id as the primary identifier
+    customer_id: PropertyRef = PropertyRef("id")
+
+
+@dataclass(frozen=True)
+class GSuiteTenantSchema(CartographyNodeSchema):
+    """
+    GSuite tenant (domain/customer) schema
+    """
+
+    label: str = "GSuiteTenant"
+    properties: GSuiteTenantNodeProperties = GSuiteTenantNodeProperties()
+    sub_resource_relationship: None = None  # Tenant is the root level

cartography/models/gsuite/user.py

@@ -0,0 +1,107 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.nodes import ExtraNodeLabels
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class GSuiteUserNodeProperties(CartographyNodeProperties):
+    """
+    GSuite user node properties
+    """
+
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+    # User identifiers and basic info
+    user_id: PropertyRef = PropertyRef("id")  # Alias for id
+    email: PropertyRef = PropertyRef("primaryEmail", extra_index=True)
+    primary_email: PropertyRef = PropertyRef("primaryEmail")
+    name: PropertyRef = PropertyRef("name")
+    family_name: PropertyRef = PropertyRef("family_name")
+    given_name: PropertyRef = PropertyRef("given_name")
+
+    # Account settings
+    agreed_to_terms: PropertyRef = PropertyRef("agreedToTerms")
+    archived: PropertyRef = PropertyRef("archived")
+    change_password_at_next_login: PropertyRef = PropertyRef(
+        "changePasswordAtNextLogin"
+    )
+    suspended: PropertyRef = PropertyRef("suspended")
+
+    # Admin and security settings
+    is_admin: PropertyRef = PropertyRef("isAdmin")
+    is_delegated_admin: PropertyRef = PropertyRef("isDelegatedAdmin")
+    is_enforced_in_2_sv: PropertyRef = PropertyRef("isEnforcedIn2Sv")
+    is_enrolled_in_2_sv: PropertyRef = PropertyRef("isEnrolledIn2Sv")
+    ip_whitelisted: PropertyRef = PropertyRef("ipWhitelisted")
+
+    # Organization and profile
+    org_unit_path: PropertyRef = PropertyRef("orgUnitPath")
+    include_in_global_address_list: PropertyRef = PropertyRef(
+        "includeInGlobalAddressList"
+    )
+    is_mailbox_setup: PropertyRef = PropertyRef("isMailboxSetup")
+
+    # Timestamps and metadata
+    creation_time: PropertyRef = PropertyRef("creationTime")
+    last_login_time: PropertyRef = PropertyRef("lastLoginTime")
+    etag: PropertyRef = PropertyRef("etag")
+    kind: PropertyRef = PropertyRef("kind")
+
+    # Photo information
+    thumbnail_photo_etag: PropertyRef = PropertyRef("thumbnailPhotoEtag")
+    thumbnail_photo_url: PropertyRef = PropertyRef("thumbnailPhotoUrl")
+
+    # Tenant relationship
+    customer_id: PropertyRef = PropertyRef("CUSTOMER_ID", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GSuiteUserToTenantRelProperties(CartographyRelProperties):
+    """
+    Properties for GSuite user to tenant relationship
+    """
+
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class GSuiteUserToTenantRel(CartographyRelSchema):
+    """
+    Relationship from GSuite user to GSuite tenant
+    """
+
+    target_node_label: str = "GSuiteTenant"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "id": PropertyRef("CUSTOMER_ID", set_in_kwargs=True),
+        }
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "RESOURCE"
+    properties: GSuiteUserToTenantRelProperties = GSuiteUserToTenantRelProperties()
+
+
+@dataclass(frozen=True)
+class GSuiteUserSchema(CartographyNodeSchema):
+    """
+    GSuite user node schema
+    """
+
+    label: str = "GSuiteUser"
+    properties: GSuiteUserNodeProperties = GSuiteUserNodeProperties()
+    sub_resource_relationship: GSuiteUserToTenantRel = GSuiteUserToTenantRel()
+    extra_node_labels: ExtraNodeLabels = ExtraNodeLabels(
+        [
+            "GCPPrincipal",
+            "UserAccount",
+        ]  # UserAccount label is used for ontology mapping
+    )

cartography/models/kandji/device.py

@@ -14,9 +14,8 @@ from cartography.models.core.relationships import TargetNodeMatcher
 class KandjiDeviceNodeProperties(CartographyNodeProperties):
     id: PropertyRef = PropertyRef("id")
     lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
-
     device_id: PropertyRef = PropertyRef("device_id")
-    device_name: PropertyRef = PropertyRef("device_name")
+    device_name: PropertyRef = PropertyRef("device_name", extra_index=True)
     last_check_in: PropertyRef = PropertyRef("last_check_in")
     model: PropertyRef = PropertyRef("model")
     os_version: PropertyRef = PropertyRef("os_version")

cartography/models/keycloak/authenticationexecution.py

@@ -0,0 +1,160 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_source_node_matcher
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import SourceNodeMatcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KeycloakAuthenticationExecutionNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    display_name: PropertyRef = PropertyRef("displayName")
+    requirement: PropertyRef = PropertyRef("requirement")
+    description: PropertyRef = PropertyRef("description")
+    configurable: PropertyRef = PropertyRef("configurable")
+    authentication_flow: PropertyRef = PropertyRef("authenticationFlow")
+    provider_id: PropertyRef = PropertyRef("providerId")
+    flow_id: PropertyRef = PropertyRef("flowId")
+    level: PropertyRef = PropertyRef("level")
+    index: PropertyRef = PropertyRef("index")
+    priority: PropertyRef = PropertyRef("priority")
+    is_terminal_step: PropertyRef = PropertyRef("is_terminal_step")
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KeycloakAuthenticationExecutionToRealmRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakAuthenticationExecution)<-[:RESOURCE]-(:KeycloakRealm)
+class KeycloakAuthenticationExecutionToRealmRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakRealm"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"name": PropertyRef("REALM", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KeycloakAuthenticationExecutionToRealmRelProperties = (
+        KeycloakAuthenticationExecutionToRealmRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class ExecutionToFlowRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakAuthenticationExecution)<-[:HAS_STEP]-(:KeycloakAuthenticationFlow)
+class ExecutionToFlowRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakAuthenticationFlow"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "alias": PropertyRef("_parent_flow"),
+            "realm": PropertyRef("REALM", set_in_kwargs=True),
+        },
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_STEP"
+    properties: ExecutionToFlowRelProperties = ExecutionToFlowRelProperties()
+
+
+@dataclass(frozen=True)
+class ExecutionToExecutionRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakAuthenticationExecution)<-[:HAS_STEP]-(:KeycloakAuthenticationExecution)
+class ExecutionToExecutionRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakAuthenticationExecution"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("_parent_subflow")},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_STEP"
+    properties: ExecutionToExecutionRelProperties = ExecutionToExecutionRelProperties()
+
+
+@dataclass(frozen=True)
+class KeycloakAuthenticationExecutionSchema(CartographyNodeSchema):
+    label: str = "KeycloakAuthenticationExecution"
+    properties: KeycloakAuthenticationExecutionNodeProperties = (
+        KeycloakAuthenticationExecutionNodeProperties()
+    )
+    sub_resource_relationship: KeycloakAuthenticationExecutionToRealmRel = (
+        KeycloakAuthenticationExecutionToRealmRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [ExecutionToFlowRel(), ExecutionToExecutionRel()]
+    )
+
+
+# The following relationships are MatchLinks, they are used to modelize all the possible flows
+@dataclass(frozen=True)
+class ExecutionToExecutionStepRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+    # Mandatory fields for MatchLinks
+    _sub_resource_label: PropertyRef = PropertyRef(
+        "_sub_resource_label", set_in_kwargs=True
+    )
+    _sub_resource_id: PropertyRef = PropertyRef("_sub_resource_id", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakAuthenticationExecution)-[:NEXT_STEP]->(:KeycloakAuthenticationExecution)
+class ExecutionToExecutionMatchLink(CartographyRelSchema):
+    source_node_label: str = "KeycloakAuthenticationExecution"
+    source_node_matcher: SourceNodeMatcher = make_source_node_matcher(
+        {"id": PropertyRef("source")},
+    )
+    target_node_label: str = "KeycloakAuthenticationExecution"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("target")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "NEXT_STEP"
+    properties: ExecutionToExecutionStepRelProperties = (
+        ExecutionToExecutionStepRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class ExecutionToFlowStepRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+    # Mandatory fields for MatchLinks
+    _sub_resource_label: PropertyRef = PropertyRef(
+        "_sub_resource_label", set_in_kwargs=True
+    )
+    _sub_resource_id: PropertyRef = PropertyRef("_sub_resource_id", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakAuthenticationFlow)-[:NEXT_STEP]->(:KeycloakAuthenticationExecution)
+class ExecutionToFlowMatchLink(CartographyRelSchema):
+    source_node_label: str = "KeycloakAuthenticationExecution"
+    source_node_matcher: SourceNodeMatcher = make_source_node_matcher(
+        {"id": PropertyRef("execution_id")},
+    )
+    target_node_label: str = "KeycloakAuthenticationFlow"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "alias": PropertyRef("flow_name"),
+            "realm": PropertyRef(
+                "realm"
+            ),  # We need to pass the realm to match the flow correctly as aliases can be shared across realms
+        },
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "NEXT_STEP"
+    properties: ExecutionToFlowStepRelProperties = ExecutionToFlowStepRelProperties()

cartography/models/keycloak/authenticationflow.py

@@ -0,0 +1,54 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KeycloakAuthenticationFlowNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    alias: PropertyRef = PropertyRef("alias", extra_index=True)
+    description: PropertyRef = PropertyRef("description")
+    provider_id: PropertyRef = PropertyRef("providerId")
+    top_level: PropertyRef = PropertyRef("topLevel")
+    built_in: PropertyRef = PropertyRef("builtIn")
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+    # We need to store the realm name because authentication flows are often referenced by name
+    # and not by id, so we need to be able to find the authentication flows by name (that is not unique across realms)
+    realm: PropertyRef = PropertyRef("REALM", set_in_kwargs=True, extra_index=True)
+
+
+@dataclass(frozen=True)
+class KeycloakAuthenticationFlowToRealmRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakAuthenticationFlow)<-[:RESOURCE]-(:KeycloakRealm)
+class KeycloakAuthenticationFlowToRealmRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakRealm"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"name": PropertyRef("REALM", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KeycloakAuthenticationFlowToRealmRelProperties = (
+        KeycloakAuthenticationFlowToRealmRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakAuthenticationFlowSchema(CartographyNodeSchema):
+    label: str = "KeycloakAuthenticationFlow"
+    properties: KeycloakAuthenticationFlowNodeProperties = (
+        KeycloakAuthenticationFlowNodeProperties()
+    )
+    sub_resource_relationship: KeycloakAuthenticationFlowToRealmRel = (
+        KeycloakAuthenticationFlowToRealmRel()
+    )