# Cloud Security Connector

Query and interact with cloud security products.

## API Reference

For full API documentation see the [Cloud Security API Reference](/api-reference/connectors/cloudsecurity).

To create an integration with the Cloud Security connector, use the [Create Integration API](/api-reference/management/integrations/integrations_create) endpoint, using one of the provider configs below.

## Supported Providers

- AWS Cloud Security (`cloudsecurity_aws`)
- AWS EventBridge SQS (`cloudsecurity_awseventbridgesqs`)
- CrowdStrike Falcon® Insight EDR (`cloudsecurity_crowdstrike`)
- Google Security Command Center (`cloudsecurity_google`)
- Microsoft Defender for Cloud (`cloudsecurity_defender`)
- Palo Alto Networks Cortex Cloud Security (`cloudsecurity_paloalto`)
- Upwind Cloud Security (`cloudsecurity_upwind`)
- Wiz (`cloudsecurity_wiz`)
- [MOCK] CrowdStrike Falcon® Insight EDR (`cloudsecurity_crowdstrike_mock`)


## Supported Operators by Provider

| API | AWS Cloud Security | AWS EventBridge SQS | CrowdStrike Cloud Security | [MOCK] CrowdStrike Cloud Security | Microsoft Defender for Cloud | Google Security Command Center | Palo Alto Networks Cortex Cloud Security | Upwind Cloud Security | Wiz Cloud Security |
|  --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
| query_cloud_resource_inventory | ✅ | ❌ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
| query_compliance_findings | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
| query_events | ✅ | ❌ | ❌ | ❌ | ✅ | ❌ | ❌ | ✅ | ❌ |
| query_ioms | ✅ | ❌ | ✅ | ✅ | ❌ | ✅ | ✅ | ❌ | ❌ |
| query_threats | ✅ | ✅ | ❌ | ❌ | ✅ | ✅ | ❌ | ✅ | ✅ |


## APIs with Filters

| API | AWS Cloud Security | AWS EventBridge SQS | CrowdStrike Cloud Security | [MOCK] CrowdStrike Cloud Security | Microsoft Defender for Cloud | Google Security Command Center | Palo Alto Networks Cortex Cloud Security | Upwind Cloud Security | Wiz Cloud Security |
|  --- | --- | --- | --- | --- | --- | --- | --- | --- | --- |
| query_cloud_resource_inventory | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#aws-cloud-security-filters-for-query_cloud_resource_inventory)] | ❌ | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#crowdstrike-cloud-security-filters-for-query_cloud_resource_inventory)] | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#%5Bmock%5D-crowdstrike-cloud-security-filters-for-query_cloud_resource_inventory)] | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#microsoft-defender-for-cloud-filters-for-query_cloud_resource_inventory)] | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#google-security-command-center-filters-for-query_cloud_resource_inventory)] | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#palo-alto-networks-cortex-cloud-security-filters-for-query_cloud_resource_inventory)] | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#upwind-cloud-security-filters-for-query_cloud_resource_inventory)] | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#wiz-cloud-security-filters-for-query_cloud_resource_inventory)] |
| query_compliance_findings | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#aws-cloud-security-filters-for-query_compliance_findings)] | ❌ | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#crowdstrike-cloud-security-filters-for-query_compliance_findings)] | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#%5Bmock%5D-crowdstrike-cloud-security-filters-for-query_compliance_findings)] | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#microsoft-defender-for-cloud-filters-for-query_compliance_findings)] | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#google-security-command-center-filters-for-query_compliance_findings)] | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#palo-alto-networks-cortex-cloud-security-filters-for-query_compliance_findings)] | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#upwind-cloud-security-filters-for-query_compliance_findings)] | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#wiz-cloud-security-filters-for-query_compliance_findings)] |
| query_events | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#aws-cloud-security-filters-for-query_events)] | ❌ | ❌ | ❌ | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#microsoft-defender-for-cloud-filters-for-query_events)] | ❌ | ❌ | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#upwind-cloud-security-filters-for-query_events)] | ❌ |
| query_ioms | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#aws-cloud-security-filters-for-query_ioms)] | ❌ | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#crowdstrike-cloud-security-filters-for-query_ioms)] | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#%5Bmock%5D-crowdstrike-cloud-security-filters-for-query_ioms)] | ❌ | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#google-security-command-center-filters-for-query_ioms)] | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#palo-alto-networks-cortex-cloud-security-filters-for-query_ioms)] | ❌ | ❌ |
| query_threats | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#aws-cloud-security-filters-for-query_threats)] | ❌ | ❌ | ❌ | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#microsoft-defender-for-cloud-filters-for-query_threats)] | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#google-security-command-center-filters-for-query_threats)] | ❌ | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#upwind-cloud-security-filters-for-query_threats)] | ✅ [[docs](/guides/connectors/cloudsecurity/query-filters#wiz-cloud-security-filters-for-query_threats)] |