Amazon Detective — Investigations

naftiko: 1.0.0-alpha2
info:
  label: Amazon Detective — Investigations
  description: 'Amazon Detective — Investigations. 5 operations. Lead operation: Amazon Detective Get Investigation. Self-contained
    Naftiko capability covering one Amazon Detective business surface.'
  tags:
  - Amazon Detective
  - Investigations
  created: '2026-05-19'
  modified: '2026-05-19'
binds:
- namespace: env
  keys:
    AMAZON_DETECTIVE_API_KEY: AMAZON_DETECTIVE_API_KEY
capability:
  consumes:
  - type: http
    namespace: amazon-detective-investigations
    baseUri: https://api.detective.{region}.amazonaws.com
    description: Amazon Detective — Investigations business capability. Self-contained, no shared references.
    resources:
    - name: investigations-getInvestigation
      path: /investigations/getInvestigation
      operations:
      - name: getinvestigation
        method: POST
        description: Amazon Detective Get Investigation
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: investigations-listIndicators
      path: /investigations/listIndicators
      operations:
      - name: listindicators
        method: POST
        description: Amazon Detective List Indicators
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: investigations-listInvestigations
      path: /investigations/listInvestigations
      operations:
      - name: listinvestigations
        method: POST
        description: Amazon Detective List Investigations
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: investigations-startInvestigation
      path: /investigations/startInvestigation
      operations:
      - name: startinvestigation
        method: POST
        description: Amazon Detective Start Investigation
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    - name: investigations-updateInvestigationState
      path: /investigations/updateInvestigationState
      operations:
      - name: updateinvestigationstate
        method: POST
        description: Amazon Detective Update Investigation State
        outputRawFormat: json
        outputParameters:
        - name: result
          type: object
          value: $.
        inputParameters:
        - name: body
          in: body
          type: object
          description: Request body (JSON).
          required: true
    authentication:
      type: apikey
      key: Authorization
      value: '{{env.AMAZON_DETECTIVE_API_KEY}}'
      placement: header
  exposes:
  - type: rest
    namespace: amazon-detective-investigations-rest
    port: 8080
    description: REST adapter for Amazon Detective — Investigations. One Spectral-compliant resource per consumed operation,
      prefixed with /v1.
    resources:
    - path: /v1/investigations/getinvestigation
      name: investigations-getinvestigation
      description: REST surface for investigations-getInvestigation.
      operations:
      - method: POST
        name: getinvestigation
        description: Amazon Detective Get Investigation
        call: amazon-detective-investigations.getinvestigation
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/investigations/listindicators
      name: investigations-listindicators
      description: REST surface for investigations-listIndicators.
      operations:
      - method: POST
        name: listindicators
        description: Amazon Detective List Indicators
        call: amazon-detective-investigations.listindicators
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/investigations/listinvestigations
      name: investigations-listinvestigations
      description: REST surface for investigations-listInvestigations.
      operations:
      - method: POST
        name: listinvestigations
        description: Amazon Detective List Investigations
        call: amazon-detective-investigations.listinvestigations
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/investigations/startinvestigation
      name: investigations-startinvestigation
      description: REST surface for investigations-startInvestigation.
      operations:
      - method: POST
        name: startinvestigation
        description: Amazon Detective Start Investigation
        call: amazon-detective-investigations.startinvestigation
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
    - path: /v1/investigations/updateinvestigationstate
      name: investigations-updateinvestigationstate
      description: REST surface for investigations-updateInvestigationState.
      operations:
      - method: POST
        name: updateinvestigationstate
        description: Amazon Detective Update Investigation State
        call: amazon-detective-investigations.updateinvestigationstate
        with:
          body: rest.body
        outputParameters:
        - type: object
          mapping: $.
  - type: mcp
    namespace: amazon-detective-investigations-mcp
    port: 9090
    transport: http
    description: MCP adapter for Amazon Detective — Investigations. One tool per consumed operation, routed inline through
      this capability's consumes block.
    tools:
    - name: amazon-detective-get-investigation
      description: Amazon Detective Get Investigation
      hints:
        readOnly: true
        destructive: false
        idempotent: false
      call: amazon-detective-investigations.getinvestigation
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-detective-list-indicators
      description: Amazon Detective List Indicators
      hints:
        readOnly: true
        destructive: false
        idempotent: false
      call: amazon-detective-investigations.listindicators
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-detective-list-investigations
      description: Amazon Detective List Investigations
      hints:
        readOnly: true
        destructive: false
        idempotent: false
      call: amazon-detective-investigations.listinvestigations
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-detective-start-investigation
      description: Amazon Detective Start Investigation
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: amazon-detective-investigations.startinvestigation
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.
    - name: amazon-detective-update-investigation-state
      description: Amazon Detective Update Investigation State
      hints:
        readOnly: false
        destructive: false
        idempotent: false
      call: amazon-detective-investigations.updateinvestigationstate
      with:
        body: tools.body
      outputParameters:
      - type: object
        mapping: $.