cartography 0.111.0rc1__py3-none-any.whl → 0.112.0__py3-none-any.whl

cartography/models/aws/apigateway/apigatewayintegration.py

@@ -0,0 +1,79 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class APIGatewayIntegrationNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    httpmethod: PropertyRef = PropertyRef("httpMethod")
+    integration_http_method: PropertyRef = PropertyRef("integrationHttpMethod")
+    resource_id: PropertyRef = PropertyRef("resourceId")
+    api_id: PropertyRef = PropertyRef("apiId")
+    type: PropertyRef = PropertyRef("type")
+    uri: PropertyRef = PropertyRef("uri")
+    connection_type: PropertyRef = PropertyRef("connectionType")
+    connection_id: PropertyRef = PropertyRef("connectionId")
+    credentials: PropertyRef = PropertyRef("credentials")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class APIGatewayIntegrationToAPIGatewayResourceRelRelProperties(
+    CartographyRelProperties
+):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class APIGatewayIntegrationToAPIGatewayResourceRel(CartographyRelSchema):
+    target_node_label: str = "APIGatewayResource"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("resourceId")},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_INTEGRATION"
+    properties: APIGatewayIntegrationToAPIGatewayResourceRelRelProperties = (
+        APIGatewayIntegrationToAPIGatewayResourceRelRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class APIGatewayIntegrationToAWSAccountRelRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:APIGatewayIntegration)<-[:RESOURCE]-(:AWSAccount)
+class APIGatewayIntegrationToAWSAccountRel(CartographyRelSchema):
+    target_node_label: str = "AWSAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AWS_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: APIGatewayIntegrationToAWSAccountRelRelProperties = (
+        APIGatewayIntegrationToAWSAccountRelRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class APIGatewayIntegrationSchema(CartographyNodeSchema):
+    label: str = "APIGatewayIntegration"
+    properties: APIGatewayIntegrationNodeProperties = (
+        APIGatewayIntegrationNodeProperties()
+    )
+    sub_resource_relationship: APIGatewayIntegrationToAWSAccountRel = (
+        APIGatewayIntegrationToAWSAccountRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [APIGatewayIntegrationToAPIGatewayResourceRel()],
+    )

cartography/models/aws/apigateway/apigatewaymethod.py

@@ -0,0 +1,74 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class APIGatewayMethodNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    httpmethod: PropertyRef = PropertyRef("httpMethod")
+    resource_id: PropertyRef = PropertyRef("resourceId")
+    api_id: PropertyRef = PropertyRef("apiId")
+    authorization_type: PropertyRef = PropertyRef("authorizationType")
+    authorizer_id: PropertyRef = PropertyRef("authorizerId")
+    request_validator_id: PropertyRef = PropertyRef("requestValidatorId")
+    operation_name: PropertyRef = PropertyRef("operationName")
+    api_key_required: PropertyRef = PropertyRef("apiKeyRequired")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class APIGatewayMethodToAPIGatewayResourceRelRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class APIGatewayMethodToAPIGatewayResourceRel(CartographyRelSchema):
+    target_node_label: str = "APIGatewayResource"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("resourceId")},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_METHOD"
+    properties: APIGatewayMethodToAPIGatewayResourceRelRelProperties = (
+        APIGatewayMethodToAPIGatewayResourceRelRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class APIGatewayMethodToAWSAccountRelRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:APIGatewayMethod)<-[:RESOURCE]-(:AWSAccount)
+class APIGatewayMethodToAWSAccountRel(CartographyRelSchema):
+    target_node_label: str = "AWSAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AWS_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: APIGatewayMethodToAWSAccountRelRelProperties = (
+        APIGatewayMethodToAWSAccountRelRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class APIGatewayMethodSchema(CartographyNodeSchema):
+    label: str = "APIGatewayMethod"
+    properties: APIGatewayMethodNodeProperties = APIGatewayMethodNodeProperties()
+    sub_resource_relationship: APIGatewayMethodToAWSAccountRel = (
+        APIGatewayMethodToAWSAccountRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [APIGatewayMethodToAPIGatewayResourceRel()],
+    )

cartography/models/aws/ec2/vpc_peering.py

@@ -0,0 +1,157 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class VPCPeeringNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("VpcPeeringConnectionId")
+    allow_dns_resolution_from_remote_vpc: PropertyRef = PropertyRef(
+        "AllowDnsResolutionFromRemoteVpc",
+    )
+    allow_egress_from_local_classic_link_to_remote_vpc: PropertyRef = PropertyRef(
+        "AllowEgressFromLocalClassicLinkToRemoteVpc",
+    )
+    allow_egress_from_local_vpc_to_remote_classic_link: PropertyRef = PropertyRef(
+        "AllowEgressFromLocalVpcToRemoteClassicLink",
+    )
+    requester_region: PropertyRef = PropertyRef("RequesterRegion")
+    accepter_region: PropertyRef = PropertyRef("AccepterRegion")
+    status_code: PropertyRef = PropertyRef("StatusCode")
+    status_message: PropertyRef = PropertyRef("StatusMessage")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class PeeringToAccepterVpcRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class PeeringToAccepterVpcRel(CartographyRelSchema):
+    target_node_label: str = "AWSVpc"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AccepterVpcId")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "ACCEPTER_VPC"
+    properties: PeeringToAccepterVpcRelProperties = PeeringToAccepterVpcRelProperties()
+
+
+@dataclass(frozen=True)
+class PeeringToRequesterVpcRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class PeeringToRequesterVpcRel(CartographyRelSchema):
+    target_node_label: str = "AWSVpc"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("RequesterVpcId")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "REQUESTER_VPC"
+    properties: PeeringToRequesterVpcRelProperties = (
+        PeeringToRequesterVpcRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class PeeringToAccepterCidrRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class PeeringToAccepterCidrRel(CartographyRelSchema):
+    target_node_label: str = "AWSCidrBlock"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("ACCEPTER_CIDR_BLOCK_IDS", one_to_many=True)},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "ACCEPTER_CIDR"
+    properties: PeeringToAccepterCidrRelProperties = (
+        PeeringToAccepterCidrRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class PeeringToRequesterCidrRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class PeeringToRequesterCidrRel(CartographyRelSchema):
+    target_node_label: str = "AWSCidrBlock"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("REQUESTER_CIDR_BLOCK_IDS", one_to_many=True)},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "REQUESTER_CIDR"
+    properties: PeeringToRequesterCidrRelProperties = (
+        PeeringToRequesterCidrRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class PeeringConnectionToAWSAccountRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class PeeringConnectionToAWSAccountRel(CartographyRelSchema):
+    target_node_label: str = "AWSAccount"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("AWS_ID", set_in_kwargs=True)}
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: PeeringConnectionToAWSAccountRelProperties = (
+        PeeringConnectionToAWSAccountRelProperties()
+    )
+
+
+# Composite Node Pattern: AWSAccount as known by VPC Peering
+@dataclass(frozen=True)
+class AWSAccountVPCPeeringNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AWSAccountVPCPeeringSchema(CartographyNodeSchema):
+    """
+    Composite schema to represent AWS Accounts as known by VPC Peering.
+    Targets the same 'AWSAccount' label as the primary AWS account schema,
+    allowing MERGE operations to combine properties from both sources.
+    """
+
+    label: str = "AWSAccount"  # Same label as primary AWSAccount schema
+    properties: AWSAccountVPCPeeringNodeProperties = (
+        AWSAccountVPCPeeringNodeProperties()
+    )
+    # No sub_resource_relationship - accounts are top-level entities
+
+
+@dataclass(frozen=True)
+class AWSPeeringConnectionSchema(CartographyNodeSchema):
+    label: str = "AWSPeeringConnection"
+    properties: VPCPeeringNodeProperties = VPCPeeringNodeProperties()
+    sub_resource_relationship: PeeringConnectionToAWSAccountRel = (
+        PeeringConnectionToAWSAccountRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [
+            PeeringToAccepterVpcRel(),
+            PeeringToRequesterVpcRel(),
+            PeeringToAccepterCidrRel(),
+            PeeringToRequesterCidrRel(),
+        ],
+    )

cartography/models/azure/principal.py

@@ -0,0 +1,44 @@
+import logging
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+logger = logging.getLogger(__name__)
+
+
+@dataclass(frozen=True)
+class AzurePrincipalProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzurePrincipalToTenantRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzurePrincipalToTenantRel(CartographyRelSchema):
+    target_node_label: str = "AzureTenant"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("TENANT_ID", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: AzurePrincipalToTenantRelProperties = (
+        AzurePrincipalToTenantRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class AzurePrincipalSchema(CartographyNodeSchema):
+    label: str = "AzurePrincipal"
+    properties: AzurePrincipalProperties = AzurePrincipalProperties()
+    sub_resource_relationship: AzurePrincipalToTenantRel = AzurePrincipalToTenantRel()

cartography/models/azure/tenant.py

@@ -0,0 +1,20 @@
+import logging
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+
+logger = logging.getLogger(__name__)
+
+
+@dataclass(frozen=True)
+class AzureTenantProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    lastupdated: PropertyRef = PropertyRef("lastupdated", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class AzureTenantSchema(CartographyNodeSchema):
+    label: str = "AzureTenant"
+    properties: AzureTenantProperties = AzureTenantProperties()

cartography/models/keycloak/authenticationexecution.py

@@ -0,0 +1,160 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_source_node_matcher
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import OtherRelationships
+from cartography.models.core.relationships import SourceNodeMatcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KeycloakAuthenticationExecutionNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    display_name: PropertyRef = PropertyRef("displayName")
+    requirement: PropertyRef = PropertyRef("requirement")
+    description: PropertyRef = PropertyRef("description")
+    configurable: PropertyRef = PropertyRef("configurable")
+    authentication_flow: PropertyRef = PropertyRef("authenticationFlow")
+    provider_id: PropertyRef = PropertyRef("providerId")
+    flow_id: PropertyRef = PropertyRef("flowId")
+    level: PropertyRef = PropertyRef("level")
+    index: PropertyRef = PropertyRef("index")
+    priority: PropertyRef = PropertyRef("priority")
+    is_terminal_step: PropertyRef = PropertyRef("is_terminal_step")
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+class KeycloakAuthenticationExecutionToRealmRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakAuthenticationExecution)<-[:RESOURCE]-(:KeycloakRealm)
+class KeycloakAuthenticationExecutionToRealmRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakRealm"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"name": PropertyRef("REALM", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KeycloakAuthenticationExecutionToRealmRelProperties = (
+        KeycloakAuthenticationExecutionToRealmRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class ExecutionToFlowRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakAuthenticationExecution)<-[:HAS_STEP]-(:KeycloakAuthenticationFlow)
+class ExecutionToFlowRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakAuthenticationFlow"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "alias": PropertyRef("_parent_flow"),
+            "realm": PropertyRef("REALM", set_in_kwargs=True),
+        },
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_STEP"
+    properties: ExecutionToFlowRelProperties = ExecutionToFlowRelProperties()
+
+
+@dataclass(frozen=True)
+class ExecutionToExecutionRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakAuthenticationExecution)<-[:HAS_STEP]-(:KeycloakAuthenticationExecution)
+class ExecutionToExecutionRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakAuthenticationExecution"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("_parent_subflow")},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "HAS_STEP"
+    properties: ExecutionToExecutionRelProperties = ExecutionToExecutionRelProperties()
+
+
+@dataclass(frozen=True)
+class KeycloakAuthenticationExecutionSchema(CartographyNodeSchema):
+    label: str = "KeycloakAuthenticationExecution"
+    properties: KeycloakAuthenticationExecutionNodeProperties = (
+        KeycloakAuthenticationExecutionNodeProperties()
+    )
+    sub_resource_relationship: KeycloakAuthenticationExecutionToRealmRel = (
+        KeycloakAuthenticationExecutionToRealmRel()
+    )
+    other_relationships: OtherRelationships = OtherRelationships(
+        [ExecutionToFlowRel(), ExecutionToExecutionRel()]
+    )
+
+
+# The following relationships are MatchLinks, they are used to modelize all the possible flows
+@dataclass(frozen=True)
+class ExecutionToExecutionStepRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+    # Mandatory fields for MatchLinks
+    _sub_resource_label: PropertyRef = PropertyRef(
+        "_sub_resource_label", set_in_kwargs=True
+    )
+    _sub_resource_id: PropertyRef = PropertyRef("_sub_resource_id", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakAuthenticationExecution)-[:NEXT_STEP]->(:KeycloakAuthenticationExecution)
+class ExecutionToExecutionMatchLink(CartographyRelSchema):
+    source_node_label: str = "KeycloakAuthenticationExecution"
+    source_node_matcher: SourceNodeMatcher = make_source_node_matcher(
+        {"id": PropertyRef("source")},
+    )
+    target_node_label: str = "KeycloakAuthenticationExecution"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"id": PropertyRef("target")},
+    )
+    direction: LinkDirection = LinkDirection.OUTWARD
+    rel_label: str = "NEXT_STEP"
+    properties: ExecutionToExecutionStepRelProperties = (
+        ExecutionToExecutionStepRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class ExecutionToFlowStepRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+    # Mandatory fields for MatchLinks
+    _sub_resource_label: PropertyRef = PropertyRef(
+        "_sub_resource_label", set_in_kwargs=True
+    )
+    _sub_resource_id: PropertyRef = PropertyRef("_sub_resource_id", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakAuthenticationFlow)-[:NEXT_STEP]->(:KeycloakAuthenticationExecution)
+class ExecutionToFlowMatchLink(CartographyRelSchema):
+    source_node_label: str = "KeycloakAuthenticationExecution"
+    source_node_matcher: SourceNodeMatcher = make_source_node_matcher(
+        {"id": PropertyRef("execution_id")},
+    )
+    target_node_label: str = "KeycloakAuthenticationFlow"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {
+            "alias": PropertyRef("flow_name"),
+            "realm": PropertyRef(
+                "realm"
+            ),  # We need to pass the realm to match the flow correctly as aliases can be shared across realms
+        },
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "NEXT_STEP"
+    properties: ExecutionToFlowStepRelProperties = ExecutionToFlowStepRelProperties()

cartography/models/keycloak/authenticationflow.py

@@ -0,0 +1,54 @@
+from dataclasses import dataclass
+
+from cartography.models.core.common import PropertyRef
+from cartography.models.core.nodes import CartographyNodeProperties
+from cartography.models.core.nodes import CartographyNodeSchema
+from cartography.models.core.relationships import CartographyRelProperties
+from cartography.models.core.relationships import CartographyRelSchema
+from cartography.models.core.relationships import LinkDirection
+from cartography.models.core.relationships import make_target_node_matcher
+from cartography.models.core.relationships import TargetNodeMatcher
+
+
+@dataclass(frozen=True)
+class KeycloakAuthenticationFlowNodeProperties(CartographyNodeProperties):
+    id: PropertyRef = PropertyRef("id")
+    alias: PropertyRef = PropertyRef("alias", extra_index=True)
+    description: PropertyRef = PropertyRef("description")
+    provider_id: PropertyRef = PropertyRef("providerId")
+    top_level: PropertyRef = PropertyRef("topLevel")
+    built_in: PropertyRef = PropertyRef("builtIn")
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+    # We need to store the realm name because authentication flows are often referenced by name
+    # and not by id, so we need to be able to find the authentication flows by name (that is not unique across realms)
+    realm: PropertyRef = PropertyRef("REALM", set_in_kwargs=True, extra_index=True)
+
+
+@dataclass(frozen=True)
+class KeycloakAuthenticationFlowToRealmRelProperties(CartographyRelProperties):
+    lastupdated: PropertyRef = PropertyRef("LASTUPDATED", set_in_kwargs=True)
+
+
+@dataclass(frozen=True)
+# (:KeycloakAuthenticationFlow)<-[:RESOURCE]-(:KeycloakRealm)
+class KeycloakAuthenticationFlowToRealmRel(CartographyRelSchema):
+    target_node_label: str = "KeycloakRealm"
+    target_node_matcher: TargetNodeMatcher = make_target_node_matcher(
+        {"name": PropertyRef("REALM", set_in_kwargs=True)},
+    )
+    direction: LinkDirection = LinkDirection.INWARD
+    rel_label: str = "RESOURCE"
+    properties: KeycloakAuthenticationFlowToRealmRelProperties = (
+        KeycloakAuthenticationFlowToRealmRelProperties()
+    )
+
+
+@dataclass(frozen=True)
+class KeycloakAuthenticationFlowSchema(CartographyNodeSchema):
+    label: str = "KeycloakAuthenticationFlow"
+    properties: KeycloakAuthenticationFlowNodeProperties = (
+        KeycloakAuthenticationFlowNodeProperties()
+    )
+    sub_resource_relationship: KeycloakAuthenticationFlowToRealmRel = (
+        KeycloakAuthenticationFlowToRealmRel()
+    )