初始化项目,由ModelHub XC社区提供模型
Model: abhaybhargav/PWNISMS-Threat-Model-Structured Source: Original Platform
This commit is contained in:
23
examples/sample_scenario.md
Normal file
23
examples/sample_scenario.md
Normal file
@@ -0,0 +1,23 @@
|
||||
# Example scenario (excerpt)
|
||||
|
||||
Use a full system description in markdown: components, data flows, users, compliance, and trust boundaries. The model responds with a single JSON object (no code fences) matching `threat_model_schema.json`.
|
||||
|
||||
This file is illustrative; replace with your own scenario text.
|
||||
|
||||
## Sample title
|
||||
|
||||
A minimal API service that issues OAuth tokens to internal services behind mTLS.
|
||||
|
||||
## Application Information
|
||||
|
||||
- REST API on AWS Lambda behind API Gateway
|
||||
- Tokens signed with an AWS KMS key; rotation weekly
|
||||
- Audit logs to CloudWatch
|
||||
|
||||
## Users
|
||||
|
||||
- Internal service principals only (no public internet clients)
|
||||
|
||||
## Compliance
|
||||
|
||||
- SOC 2
|
||||
Reference in New Issue
Block a user