data.network.security_boundary.persist

Upsert a NetworkSecurityBoundary from sync (no rule contents persisted)

Create, restore, or update a NetworkSecurityBoundary.

Overview

Property	Value
Workflow type	Atomic
Library	App-network
Version	1.0

Input Schema

Field	Type	Required	Default	Description
organization_uuid	uuid	Yes	—	UUID of the organization
network_scope_uuid	uuid	Yes	—	UUID of the parent NetworkScope
provider_boundary_ref	string	Yes	—	Provider-side security boundary reference (sg-..., nsg ref, etc.)
name	string	Yes	—	Human-readable boundary name
description	string	No	—	Provider-supplied description
boundary_type	string	No	—	Boundary type tag (security_group, nsg, firewall_group, ...)
rule_count	integer	No	—	Total count of provider rules attached (no rule contents)
provider_metadata	dict	No	—	Provider-side metadata bag (no secrets)
actor	string	No	—	Caller initiating the persist

Output Schema

Field	Type	Required	Default	Description
security_boundary_uuid	uuid	Yes	—	UUID of the persisted boundary
created	boolean	Yes	—	True when a new row was inserted
restored	boolean	Yes	—	True when a soft-deleted row was restored
updated	boolean	Yes	—	True when an existing row was mutated
persisted_at	string	Yes	—	ISO-8601 timestamp
failure_reason	string	No	—	Engine-stamped human-readable failure reason
failed_at_state	string	No	—	Engine-stamped state when the workflow failed
failed_step	string	No	—	Engine-stamped step name (DAG path)
failed_layer	integer	No	—	Engine-stamped layer index (DAG path)
error	string	No	—	Engine-stamped exception message
error_type	string	No	—	Engine-stamped exception class name

States

State	Initial	Terminal	Success	Auto-advance	Description
pending	Yes	No	—	complete	Persist boundary
completed	No	Yes	Yes	—	Persisted
failed	No	Yes	No	—	Persist failed

State Diagram

Transitions

From	Action	To	Description
pending	complete	completed	—
pending	fail	failed	—

Outcomes

Outcome	Type	Description	State Data Keys
persisted	SUCCESS	Upsert a NetworkSecurityBoundary from sync (no rule contents persisted)	—
failed	FAILURE	Network workflow failed	failure_reason

API Usage

POST /api/workflows/start
Content-Type: application/json

{
  "workflow_type": "data.network.security_boundary.persist",
  "initial_data": {
    "organization_uuid": "value",
    "network_scope_uuid": "value",
    "provider_boundary_ref": "value",
    "name": "value"
  }
}