Skip to content

/AWS1/CL_SAGUPDATETHREATOUTPUT

Output for the UpdateThreat operation.

CONSTRUCTOR

IMPORTING

Required arguments:

iv_threatid TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

The unique identifier of the threat.

iv_threatjobid TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

The unique identifier of the threat model job the threat belongs to.

Optional arguments:

iv_title TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

A short title summarizing the threat.

iv_statement TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

The natural-language threat statement.

iv_severity TYPE /AWS1/SAGTHREATSEVERITY /AWS1/SAGTHREATSEVERITY

The severity level of the threat.

iv_status TYPE /AWS1/SAGTHREATSTATUS /AWS1/SAGTHREATSTATUS

The current status of the threat.

iv_comments TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

Optional customer comment on the threat.

it_stride TYPE /AWS1/CL_SAGSTRIDECATLIST_W=>TT_STRIDECATEGORYLIST TT_STRIDECATEGORYLIST

The STRIDE categories applicable to this threat.

iv_threatsource TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

The actor or origin of the threat.

iv_prerequisites TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

The conditions required for the threat to be exploitable.

iv_threataction TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

What the threat source can do.

iv_threatimpact TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

The direct consequence of the threat action.

it_impactedgoal TYPE /AWS1/CL_SAGSTRINGLIST_W=>TT_STRINGLIST TT_STRINGLIST

The security goals affected by the threat.

it_impactedassets TYPE /AWS1/CL_SAGSTRINGLIST_W=>TT_STRINGLIST TT_STRINGLIST

The specific assets affected by the threat.

io_anchor TYPE REF TO /AWS1/CL_SAGTHREATANCHORSHAPE /AWS1/CL_SAGTHREATANCHORSHAPE

The DFD element this threat is anchored to.

it_evidence TYPE /AWS1/CL_SAGTHRTEVIDENCESHAPE=>TT_THREATEVIDENCELIST TT_THREATEVIDENCELIST

The source code files supporting the threat.

iv_recommendation TYPE /AWS1/SAGSTRING /AWS1/SAGSTRING

The recommended mitigation guidance for this threat.

iv_createdby TYPE /AWS1/SAGTHREATACTOR /AWS1/SAGTHREATACTOR

Who created this threat.

iv_updatedby TYPE /AWS1/SAGTHREATACTOR /AWS1/SAGTHREATACTOR

Who last updated this threat.

iv_createdat TYPE /AWS1/SAGTIMESTAMP /AWS1/SAGTIMESTAMP

The date and time the threat was created, in UTC format.

iv_updatedat TYPE /AWS1/SAGTIMESTAMP /AWS1/SAGTIMESTAMP

The date and time the threat was last updated, in UTC format.


Queryable Attributes

threatId

The unique identifier of the threat.

Accessible with the following methods

Method Description
GET_THREATID() Getter for THREATID, with configurable default
ASK_THREATID() Getter for THREATID w/ exceptions if field has no value
HAS_THREATID() Determine if THREATID has a value

threatJobId

The unique identifier of the threat model job the threat belongs to.

Accessible with the following methods

Method Description
GET_THREATJOBID() Getter for THREATJOBID, with configurable default
ASK_THREATJOBID() Getter for THREATJOBID w/ exceptions if field has no value
HAS_THREATJOBID() Determine if THREATJOBID has a value

title

A short title summarizing the threat.

Accessible with the following methods

Method Description
GET_TITLE() Getter for TITLE, with configurable default
ASK_TITLE() Getter for TITLE w/ exceptions if field has no value
HAS_TITLE() Determine if TITLE has a value

statement

The natural-language threat statement.

Accessible with the following methods

Method Description
GET_STATEMENT() Getter for STATEMENT, with configurable default
ASK_STATEMENT() Getter for STATEMENT w/ exceptions if field has no value
HAS_STATEMENT() Determine if STATEMENT has a value

severity

The severity level of the threat.

Accessible with the following methods

Method Description
GET_SEVERITY() Getter for SEVERITY, with configurable default
ASK_SEVERITY() Getter for SEVERITY w/ exceptions if field has no value
HAS_SEVERITY() Determine if SEVERITY has a value

status

The current status of the threat.

Accessible with the following methods

Method Description
GET_STATUS() Getter for STATUS, with configurable default
ASK_STATUS() Getter for STATUS w/ exceptions if field has no value
HAS_STATUS() Determine if STATUS has a value

comments

Optional customer comment on the threat.

Accessible with the following methods

Method Description
GET_COMMENTS() Getter for COMMENTS, with configurable default
ASK_COMMENTS() Getter for COMMENTS w/ exceptions if field has no value
HAS_COMMENTS() Determine if COMMENTS has a value

stride

The STRIDE categories applicable to this threat.

Accessible with the following methods

Method Description
GET_STRIDE() Getter for STRIDE, with configurable default
ASK_STRIDE() Getter for STRIDE w/ exceptions if field has no value
HAS_STRIDE() Determine if STRIDE has a value

threatSource

The actor or origin of the threat.

Accessible with the following methods

Method Description
GET_THREATSOURCE() Getter for THREATSOURCE, with configurable default
ASK_THREATSOURCE() Getter for THREATSOURCE w/ exceptions if field has no value
HAS_THREATSOURCE() Determine if THREATSOURCE has a value

prerequisites

The conditions required for the threat to be exploitable.

Accessible with the following methods

Method Description
GET_PREREQUISITES() Getter for PREREQUISITES, with configurable default
ASK_PREREQUISITES() Getter for PREREQUISITES w/ exceptions if field has no value
HAS_PREREQUISITES() Determine if PREREQUISITES has a value

threatAction

What the threat source can do.

Accessible with the following methods

Method Description
GET_THREATACTION() Getter for THREATACTION, with configurable default
ASK_THREATACTION() Getter for THREATACTION w/ exceptions if field has no value
HAS_THREATACTION() Determine if THREATACTION has a value

threatImpact

The direct consequence of the threat action.

Accessible with the following methods

Method Description
GET_THREATIMPACT() Getter for THREATIMPACT, with configurable default
ASK_THREATIMPACT() Getter for THREATIMPACT w/ exceptions if field has no value
HAS_THREATIMPACT() Determine if THREATIMPACT has a value

impactedGoal

The security goals affected by the threat.

Accessible with the following methods

Method Description
GET_IMPACTEDGOAL() Getter for IMPACTEDGOAL, with configurable default
ASK_IMPACTEDGOAL() Getter for IMPACTEDGOAL w/ exceptions if field has no value
HAS_IMPACTEDGOAL() Determine if IMPACTEDGOAL has a value

impactedAssets

The specific assets affected by the threat.

Accessible with the following methods

Method Description
GET_IMPACTEDASSETS() Getter for IMPACTEDASSETS, with configurable default
ASK_IMPACTEDASSETS() Getter for IMPACTEDASSETS w/ exceptions if field has no valu
HAS_IMPACTEDASSETS() Determine if IMPACTEDASSETS has a value

anchor

The DFD element this threat is anchored to.

Accessible with the following methods

Method Description
GET_ANCHOR() Getter for ANCHOR

evidence

The source code files supporting the threat.

Accessible with the following methods

Method Description
GET_EVIDENCE() Getter for EVIDENCE, with configurable default
ASK_EVIDENCE() Getter for EVIDENCE w/ exceptions if field has no value
HAS_EVIDENCE() Determine if EVIDENCE has a value

recommendation

The recommended mitigation guidance for this threat.

Accessible with the following methods

Method Description
GET_RECOMMENDATION() Getter for RECOMMENDATION, with configurable default
ASK_RECOMMENDATION() Getter for RECOMMENDATION w/ exceptions if field has no valu
HAS_RECOMMENDATION() Determine if RECOMMENDATION has a value

createdBy

Who created this threat.

Accessible with the following methods

Method Description
GET_CREATEDBY() Getter for CREATEDBY, with configurable default
ASK_CREATEDBY() Getter for CREATEDBY w/ exceptions if field has no value
HAS_CREATEDBY() Determine if CREATEDBY has a value

updatedBy

Who last updated this threat.

Accessible with the following methods

Method Description
GET_UPDATEDBY() Getter for UPDATEDBY, with configurable default
ASK_UPDATEDBY() Getter for UPDATEDBY w/ exceptions if field has no value
HAS_UPDATEDBY() Determine if UPDATEDBY has a value

createdAt

The date and time the threat was created, in UTC format.

Accessible with the following methods

Method Description
GET_CREATEDAT() Getter for CREATEDAT, with configurable default
ASK_CREATEDAT() Getter for CREATEDAT w/ exceptions if field has no value
HAS_CREATEDAT() Determine if CREATEDAT has a value

updatedAt

The date and time the threat was last updated, in UTC format.

Accessible with the following methods

Method Description
GET_UPDATEDAT() Getter for UPDATEDAT, with configurable default
ASK_UPDATEDAT() Getter for UPDATEDAT w/ exceptions if field has no value
HAS_UPDATEDAT() Determine if UPDATEDAT has a value