Maps a risk to assets, asset types, threats, vulnerabilities, vendors, objectives, controls, and/or action items for a client.

In the request body, include only the entity codes that need to be mapped.
Empty or omitted arrays are ignored.

Supported request fields:

• asset_codes
• asset_type_names
• threat_codes
• vulnerability_codes
• vendor_codes
• objective_codes
• control_codes
• action_item_codes