model-security rule-instances¶
model-security rule-instances list¶
List rule instances in a security group
Arguments¶
groupUuid(required) —
Options¶
| Flag | Required | Default | Description |
|---|---|---|---|
--security-rule-uuid <uuid> |
No | — | Filter by security rule UUID |
--state <state> |
No | — | Filter by state (DISABLED, ALLOWING, BLOCKING) |
--limit <n> |
No | 20 |
Max results |
Examples¶
List rule instances in a group
Rule Instances:
16b310b7-5bc3-472a-928b-a80d751ea8b0
Known Framework Operators Check BLOCKING
1f46e5ab-d7cf-4dba-98c5-e93eab4c280c
Load Time Code Execution Check BLOCKING
d90c57bb-8ee5-41dc-94db-c7e3e23bd0dd
Model Architecture Backdoor Check BLOCKING
8960246d-fe50-4a40-9df4-11732cd5ec85
Stored In Approved File Format BLOCKING
model-security rule-instances get¶
Get rule instance details
Arguments¶
groupUuid(required) —instanceUuid(required) —
Examples¶
Pretty output (default; no --output flag on this command)
airs model-security rule-instances get 00000000-0000-0000-0000-000000000001 00000000-0000-0000-0000-000000000002
Prisma AIRS — Model Security
ML model supply chain security
Rule Instance Detail:
UUID: 00000000-0000-0000-0000-000000000002
Group UUID: 00000000-0000-0000-0000-000000000001
Rule UUID: 550e8400-e29b-41d4-a716-44665544000b
State: BLOCKING
Rule Name: Known Framework Operators Check
Created: 2025-11-24T15:44:39.596957Z
Updated: 2025-11-24T15:44:39.596957Z
model-security rule-instances update¶
Update a rule instance
Arguments¶
groupUuid(required) —instanceUuid(required) —
Options¶
| Flag | Required | Default | Description |
|---|---|---|---|
--config <path> |
Yes | — | JSON file with rule instance updates |
Examples¶
Flip a rule instance from BLOCKING to ALLOWING (see docs/cli/examples/model-security/rule-instance-update.json)
airs model-security rule-instances update 00000000-0000-0000-0000-000000000001 00000000-0000-0000-0000-000000000003 --config docs/cli/examples/model-security/rule-instance-update.json
Prisma AIRS — Model Security
ML model supply chain security
Rule instance updated: 00000000-0000-0000-0000-000000000003
Rule Instance Detail:
UUID: 00000000-0000-0000-0000-000000000003
Group UUID: 00000000-0000-0000-0000-000000000001
Rule UUID: 550e8400-e29b-41d4-a716-44665544000b
State: ALLOWING
Rule Name: Known Framework Operators Check
Created: 2026-05-26T10:20:10.809882Z
Updated: 2026-05-26T10:20:38.433422Z