Skip to content
Guides
/
Connectors
/
/
Cloud Security Connector

Cloud Security Connector

Query and interact with cloud security products.

API Reference

For full API documentation see the Cloud Security API Reference.

To create an integration with the Cloud Security connector, use the Create Integration API endpoint, using one of the provider configs below.

Supported Providers

  • AWS Cloud Security (cloudsecurity_aws)
  • CrowdStrike Falcon® Insight EDR (cloudsecurity_crowdstrike)
  • Microsoft Defender for Cloud (cloudsecurity_defender)
  • Palo Alto Networks Cortex Cloud Security (cloudsecurity_paloalto)

Supported Operators by Provider

APIAWS Cloud SecurityCrowdStrike Cloud SecurityMicrosoft Defender for CloudPalo Alto Networks Cortex Cloud Security
query_cloud_resource_inventory❌✅✅✅
query_compliance_findings✅✅✅✅
query_events❌❌✅❌
query_ioms❌✅❌❌
query_threats✅❌✅❌

APIs with Filters

APIAWS Cloud SecurityCrowdStrike Cloud SecurityMicrosoft Defender for CloudPalo Alto Networks Cortex Cloud Security
query_cloud_resource_inventory❌✅ [docs]✅ [docs]✅ [docs]
query_compliance_findings✅ [docs]✅ [docs]✅ [docs]✅ [docs]
query_events❌❌✅ [docs]❌
query_ioms❌✅ [docs]❌❌
query_threats✅ [docs]❌✅ [docs]❌
Previous page
Next page