Each CNA module defines a schema of accepted input variables, their types and if they are optional or mandatory. Right now the /cnas API endpoint accepts payloads with variables not mentioned in the schema. The API endpoint also accepts missing mandatory variables right now, which would result in failing asset provisioning.

The CNA API should validate the payload on asset creation or update towards the schema defined for a module.