curl --request GET \
  --url https://api.prd.rad.security/accounts/{account_id}/identities/{identity_id}/rightsize

{
  "after": {
    "cluster_role_bindings": [
      {
        "annotations": {},
        "apiVersion": "<string>",
        "creationTimestamp": "<string>",
        "deletionGracePeriodSeconds": 123,
        "deletionTimestamp": "<string>",
        "finalizers": [
          "<string>"
        ],
        "generateName": "<string>",
        "generation": 123,
        "kind": "<string>",
        "labels": {},
        "managedFields": [
          {
            "apiVersion": "<any>",
            "fieldsType": "<any>",
            "fieldsV1": "<any>",
            "manager": "<any>",
            "operation": "<any>",
            "subresource": "<any>",
            "time": "<any>"
          }
        ],
        "name": "<string>",
        "namespace": "<string>",
        "ownerReferences": [
          {
            "apiVersion": "<any>",
            "blockOwnerDeletion": "<any>",
            "controller": "<any>",
            "kind": "<any>",
            "name": "<any>",
            "uid": "<any>"
          }
        ],
        "resourceVersion": "<string>",
        "roleRef": {
          "apiGroup": "<string>",
          "kind": "<string>",
          "name": "<string>"
        },
        "selfLink": "<string>",
        "subjects": [
          {
            "apiGroup": "<any>",
            "kind": "<any>",
            "name": "<any>",
            "namespace": "<any>"
          }
        ],
        "uid": "<string>"
      }
    ],
    "cluster_roles": [
      {
        "aggregationRule": {
          "clusterRoleSelectors": [
            "<any>"
          ]
        },
        "annotations": {},
        "apiVersion": "<string>",
        "creationTimestamp": "<string>",
        "deletionGracePeriodSeconds": 123,
        "deletionTimestamp": "<string>",
        "finalizers": [
          "<string>"
        ],
        "generateName": "<string>",
        "generation": 123,
        "kind": "<string>",
        "labels": {},
        "managedFields": [
          {
            "apiVersion": "<any>",
            "fieldsType": "<any>",
            "fieldsV1": "<any>",
            "manager": "<any>",
            "operation": "<any>",
            "subresource": "<any>",
            "time": "<any>"
          }
        ],
        "name": "<string>",
        "namespace": "<string>",
        "ownerReferences": [
          {
            "apiVersion": "<any>",
            "blockOwnerDeletion": "<any>",
            "controller": "<any>",
            "kind": "<any>",
            "name": "<any>",
            "uid": "<any>"
          }
        ],
        "resourceVersion": "<string>",
        "rules": [
          {
            "apiGroups": "<any>",
            "nonResourceURLs": "<any>",
            "resourceNames": "<any>",
            "resources": "<any>",
            "verbs": "<any>"
          }
        ],
        "selfLink": "<string>",
        "uid": "<string>"
      }
    ],
    "role_bindings": [
      {
        "annotations": {},
        "apiVersion": "<string>",
        "creationTimestamp": "<string>",
        "deletionGracePeriodSeconds": 123,
        "deletionTimestamp": "<string>",
        "finalizers": [
          "<string>"
        ],
        "generateName": "<string>",
        "generation": 123,
        "kind": "<string>",
        "labels": {},
        "managedFields": [
          {
            "apiVersion": "<any>",
            "fieldsType": "<any>",
            "fieldsV1": "<any>",
            "manager": "<any>",
            "operation": "<any>",
            "subresource": "<any>",
            "time": "<any>"
          }
        ],
        "name": "<string>",
        "namespace": "<string>",
        "ownerReferences": [
          {
            "apiVersion": "<any>",
            "blockOwnerDeletion": "<any>",
            "controller": "<any>",
            "kind": "<any>",
            "name": "<any>",
            "uid": "<any>"
          }
        ],
        "resourceVersion": "<string>",
        "roleRef": {
          "apiGroup": "<string>",
          "kind": "<string>",
          "name": "<string>"
        },
        "selfLink": "<string>",
        "subjects": [
          {
            "apiGroup": "<any>",
            "kind": "<any>",
            "name": "<any>",
            "namespace": "<any>"
          }
        ],
        "uid": "<string>"
      }
    ],
    "roles": [
      {
        "annotations": {},
        "apiVersion": "<string>",
        "creationTimestamp": "<string>",
        "deletionGracePeriodSeconds": 123,
        "deletionTimestamp": "<string>",
        "finalizers": [
          "<string>"
        ],
        "generateName": "<string>",
        "generation": 123,
        "kind": "<string>",
        "labels": {},
        "managedFields": [
          {
            "apiVersion": "<any>",
            "fieldsType": "<any>",
            "fieldsV1": "<any>",
            "manager": "<any>",
            "operation": "<any>",
            "subresource": "<any>",
            "time": "<any>"
          }
        ],
        "name": "<string>",
        "namespace": "<string>",
        "ownerReferences": [
          {
            "apiVersion": "<any>",
            "blockOwnerDeletion": "<any>",
            "controller": "<any>",
            "kind": "<any>",
            "name": "<any>",
            "uid": "<any>"
          }
        ],
        "resourceVersion": "<string>",
        "rules": [
          {
            "apiGroups": "<any>",
            "nonResourceURLs": "<any>",
            "resourceNames": "<any>",
            "resources": "<any>",
            "verbs": "<any>"
          }
        ],
        "selfLink": "<string>",
        "uid": "<string>"
      }
    ]
  },
  "before": {
    "cluster_role_bindings": [
      {
        "annotations": {},
        "apiVersion": "<string>",
        "creationTimestamp": "<string>",
        "deletionGracePeriodSeconds": 123,
        "deletionTimestamp": "<string>",
        "finalizers": [
          "<string>"
        ],
        "generateName": "<string>",
        "generation": 123,
        "kind": "<string>",
        "labels": {},
        "managedFields": [
          {
            "apiVersion": "<any>",
            "fieldsType": "<any>",
            "fieldsV1": "<any>",
            "manager": "<any>",
            "operation": "<any>",
            "subresource": "<any>",
            "time": "<any>"
          }
        ],
        "name": "<string>",
        "namespace": "<string>",
        "ownerReferences": [
          {
            "apiVersion": "<any>",
            "blockOwnerDeletion": "<any>",
            "controller": "<any>",
            "kind": "<any>",
            "name": "<any>",
            "uid": "<any>"
          }
        ],
        "resourceVersion": "<string>",
        "roleRef": {
          "apiGroup": "<string>",
          "kind": "<string>",
          "name": "<string>"
        },
        "selfLink": "<string>",
        "subjects": [
          {
            "apiGroup": "<any>",
            "kind": "<any>",
            "name": "<any>",
            "namespace": "<any>"
          }
        ],
        "uid": "<string>"
      }
    ],
    "cluster_roles": [
      {
        "aggregationRule": {
          "clusterRoleSelectors": [
            "<any>"
          ]
        },
        "annotations": {},
        "apiVersion": "<string>",
        "creationTimestamp": "<string>",
        "deletionGracePeriodSeconds": 123,
        "deletionTimestamp": "<string>",
        "finalizers": [
          "<string>"
        ],
        "generateName": "<string>",
        "generation": 123,
        "kind": "<string>",
        "labels": {},
        "managedFields": [
          {
            "apiVersion": "<any>",
            "fieldsType": "<any>",
            "fieldsV1": "<any>",
            "manager": "<any>",
            "operation": "<any>",
            "subresource": "<any>",
            "time": "<any>"
          }
        ],
        "name": "<string>",
        "namespace": "<string>",
        "ownerReferences": [
          {
            "apiVersion": "<any>",
            "blockOwnerDeletion": "<any>",
            "controller": "<any>",
            "kind": "<any>",
            "name": "<any>",
            "uid": "<any>"
          }
        ],
        "resourceVersion": "<string>",
        "rules": [
          {
            "apiGroups": "<any>",
            "nonResourceURLs": "<any>",
            "resourceNames": "<any>",
            "resources": "<any>",
            "verbs": "<any>"
          }
        ],
        "selfLink": "<string>",
        "uid": "<string>"
      }
    ],
    "role_bindings": [
      {
        "annotations": {},
        "apiVersion": "<string>",
        "creationTimestamp": "<string>",
        "deletionGracePeriodSeconds": 123,
        "deletionTimestamp": "<string>",
        "finalizers": [
          "<string>"
        ],
        "generateName": "<string>",
        "generation": 123,
        "kind": "<string>",
        "labels": {},
        "managedFields": [
          {
            "apiVersion": "<any>",
            "fieldsType": "<any>",
            "fieldsV1": "<any>",
            "manager": "<any>",
            "operation": "<any>",
            "subresource": "<any>",
            "time": "<any>"
          }
        ],
        "name": "<string>",
        "namespace": "<string>",
        "ownerReferences": [
          {
            "apiVersion": "<any>",
            "blockOwnerDeletion": "<any>",
            "controller": "<any>",
            "kind": "<any>",
            "name": "<any>",
            "uid": "<any>"
          }
        ],
        "resourceVersion": "<string>",
        "roleRef": {
          "apiGroup": "<string>",
          "kind": "<string>",
          "name": "<string>"
        },
        "selfLink": "<string>",
        "subjects": [
          {
            "apiGroup": "<any>",
            "kind": "<any>",
            "name": "<any>",
            "namespace": "<any>"
          }
        ],
        "uid": "<string>"
      }
    ],
    "roles": [
      {
        "annotations": {},
        "apiVersion": "<string>",
        "creationTimestamp": "<string>",
        "deletionGracePeriodSeconds": 123,
        "deletionTimestamp": "<string>",
        "finalizers": [
          "<string>"
        ],
        "generateName": "<string>",
        "generation": 123,
        "kind": "<string>",
        "labels": {},
        "managedFields": [
          {
            "apiVersion": "<any>",
            "fieldsType": "<any>",
            "fieldsV1": "<any>",
            "manager": "<any>",
            "operation": "<any>",
            "subresource": "<any>",
            "time": "<any>"
          }
        ],
        "name": "<string>",
        "namespace": "<string>",
        "ownerReferences": [
          {
            "apiVersion": "<any>",
            "blockOwnerDeletion": "<any>",
            "controller": "<any>",
            "kind": "<any>",
            "name": "<any>",
            "uid": "<any>"
          }
        ],
        "resourceVersion": "<string>",
        "rules": [
          {
            "apiGroups": "<any>",
            "nonResourceURLs": "<any>",
            "resourceNames": "<any>",
            "resources": "<any>",
            "verbs": "<any>"
          }
        ],
        "selfLink": "<string>",
        "uid": "<string>"
      }
    ]
  },
  "generated_at": "<string>",
  "identity": {
    "account_id": "<string>",
    "actions": [
      "<string>"
    ],
    "created_at": "<string>",
    "deleted_at": "<string>",
    "id": "<string>",
    "last_used_at": "<string>",
    "linked_resources": 123,
    "name": "<string>",
    "namespace": "<string>",
    "original_id": "<string>",
    "raw_rbac_objects": {
      "cluster_role_bindings": [
        {
          "annotations": {},
          "apiVersion": "<string>",
          "creationTimestamp": "<string>",
          "deletionGracePeriodSeconds": 123,
          "deletionTimestamp": "<string>",
          "finalizers": [
            "<string>"
          ],
          "generateName": "<string>",
          "generation": 123,
          "kind": "<string>",
          "labels": {},
          "managedFields": [
            {
              "apiVersion": "<any>",
              "fieldsType": "<any>",
              "fieldsV1": "<any>",
              "manager": "<any>",
              "operation": "<any>",
              "subresource": "<any>",
              "time": "<any>"
            }
          ],
          "name": "<string>",
          "namespace": "<string>",
          "ownerReferences": [
            {
              "apiVersion": "<any>",
              "blockOwnerDeletion": "<any>",
              "controller": "<any>",
              "kind": "<any>",
              "name": "<any>",
              "uid": "<any>"
            }
          ],
          "resourceVersion": "<string>",
          "roleRef": {
            "apiGroup": "<string>",
            "kind": "<string>",
            "name": "<string>"
          },
          "selfLink": "<string>",
          "subjects": [
            {
              "apiGroup": "<any>",
              "kind": "<any>",
              "name": "<any>",
              "namespace": "<any>"
            }
          ],
          "uid": "<string>"
        }
      ],
      "cluster_roles": [
        {
          "aggregationRule": {
            "clusterRoleSelectors": [
              "<any>"
            ]
          },
          "annotations": {},
          "apiVersion": "<string>",
          "creationTimestamp": "<string>",
          "deletionGracePeriodSeconds": 123,
          "deletionTimestamp": "<string>",
          "finalizers": [
            "<string>"
          ],
          "generateName": "<string>",
          "generation": 123,
          "kind": "<string>",
          "labels": {},
          "managedFields": [
            {
              "apiVersion": "<any>",
              "fieldsType": "<any>",
              "fieldsV1": "<any>",
              "manager": "<any>",
              "operation": "<any>",
              "subresource": "<any>",
              "time": "<any>"
            }
          ],
          "name": "<string>",
          "namespace": "<string>",
          "ownerReferences": [
            {
              "apiVersion": "<any>",
              "blockOwnerDeletion": "<any>",
              "controller": "<any>",
              "kind": "<any>",
              "name": "<any>",
              "uid": "<any>"
            }
          ],
          "resourceVersion": "<string>",
          "rules": [
            {
              "apiGroups": "<any>",
              "nonResourceURLs": "<any>",
              "resourceNames": "<any>",
              "resources": "<any>",
              "verbs": "<any>"
            }
          ],
          "selfLink": "<string>",
          "uid": "<string>"
        }
      ],
      "role_bindings": [
        {
          "annotations": {},
          "apiVersion": "<string>",
          "creationTimestamp": "<string>",
          "deletionGracePeriodSeconds": 123,
          "deletionTimestamp": "<string>",
          "finalizers": [
            "<string>"
          ],
          "generateName": "<string>",
          "generation": 123,
          "kind": "<string>",
          "labels": {},
          "managedFields": [
            {
              "apiVersion": "<any>",
              "fieldsType": "<any>",
              "fieldsV1": "<any>",
              "manager": "<any>",
              "operation": "<any>",
              "subresource": "<any>",
              "time": "<any>"
            }
          ],
          "name": "<string>",
          "namespace": "<string>",
          "ownerReferences": [
            {
              "apiVersion": "<any>",
              "blockOwnerDeletion": "<any>",
              "controller": "<any>",
              "kind": "<any>",
              "name": "<any>",
              "uid": "<any>"
            }
          ],
          "resourceVersion": "<string>",
          "roleRef": {
            "apiGroup": "<string>",
            "kind": "<string>",
            "name": "<string>"
          },
          "selfLink": "<string>",
          "subjects": [
            {
              "apiGroup": "<any>",
              "kind": "<any>",
              "name": "<any>",
              "namespace": "<any>"
            }
          ],
          "uid": "<string>"
        }
      ],
      "roles": [
        {
          "annotations": {},
          "apiVersion": "<string>",
          "creationTimestamp": "<string>",
          "deletionGracePeriodSeconds": 123,
          "deletionTimestamp": "<string>",
          "finalizers": [
            "<string>"
          ],
          "generateName": "<string>",
          "generation": 123,
          "kind": "<string>",
          "labels": {},
          "managedFields": [
            {
              "apiVersion": "<any>",
              "fieldsType": "<any>",
              "fieldsV1": "<any>",
              "manager": "<any>",
              "operation": "<any>",
              "subresource": "<any>",
              "time": "<any>"
            }
          ],
          "name": "<string>",
          "namespace": "<string>",
          "ownerReferences": [
            {
              "apiVersion": "<any>",
              "blockOwnerDeletion": "<any>",
              "controller": "<any>",
              "kind": "<any>",
              "name": "<any>",
              "uid": "<any>"
            }
          ],
          "resourceVersion": "<string>",
          "rules": [
            {
              "apiGroups": "<any>",
              "nonResourceURLs": "<any>",
              "resourceNames": "<any>",
              "resources": "<any>",
              "verbs": "<any>"
            }
          ],
          "selfLink": "<string>",
          "uid": "<string>"
        }
      ]
    },
    "rbac_objects": {
      "assigned_roles": [
        {
          "kind": "<string>",
          "name": "<string>",
          "namespace": "<string>",
          "uid": "<string>",
          "account_id": "<string>",
          "cluster_id": "<string>",
          "created_at": "<string>",
          "id": "<string>",
          "updated_at": "<string>"
        }
      ],
      "created_at": "<string>",
      "graph": {
        "edges": [
          {
            "from_id": "<string>",
            "id": "<string>",
            "to_id": "<string>",
            "type": "<string>"
          }
        ],
        "nodes": [
          {
            "id": "<string>",
            "properties": {},
            "type": "<string>"
          }
        ]
      },
      "permissions": [
        {
          "api_groups": [
            "<string>"
          ],
          "namespace": "<string>",
          "resource_names": [
            "<string>"
          ],
          "resources": [
            "<string>"
          ],
          "verbs": [
            "<string>"
          ]
        }
      ]
    },
    "resolved_at": "<string>",
    "resolved_reason": "<string>",
    "rightsizeable": true,
    "risk_detectors": {},
    "risk_level": "Unspecified",
    "risk_score": 123,
    "risk_types": [
      "<string>"
    ],
    "risks": [
      {
        "associated_resources": [
          {
            "id": "<string>",
            "name": "<string>",
            "severity": "<string>"
          }
        ],
        "deleted_at": "<string>",
        "description": "<string>",
        "fingerprint": "<string>",
        "first_detected_at": "<string>",
        "id": "<string>",
        "identity_id": "<string>",
        "last_detected_at": "<string>",
        "name": "<string>",
        "risk_counter": 123,
        "score": 123,
        "type": "<string>",
        "weight": 123
      }
    ],
    "risks_summary": {
      "risks": [
        {
          "count": 123,
          "normalized_weight": 123,
          "score": 123,
          "type": "<string>",
          "weight": 123
        }
      ],
      "total_risk_score": 123,
      "total_weight": 123
    },
    "source_id": "<string>",
    "source_name": "<string>",
    "source_type": "<string>",
    "status": "open",
    "tenant_id": "<string>",
    "type": "<string>",
    "updated_at": "<string>"
  },
  "recommendation": "<string>"
}