CloudSecurity Connector

Query and interact with cloud security products.

API Reference

For full API documentation see the CloudSecurity API Reference.

To create an integration with the CloudSecurity connector, use the Create Integration API endpoint, using one of the provider configs below.

Supported Providers

  • CrowdStrike Falcon® Insight EDR (cloudsecurity_crowdstrike)
  • Microsoft Defender for Cloud (cloudsecurity_defender)

Supported Operators by Provider

APICrowdStrike Cloud SecurityMicrosoft Defender for Cloud
query_cloud_resource_inventory
query_compliance_findings

APIs with Filters

APICrowdStrike Cloud SecurityMicrosoft Defender for Cloud
query_cloud_resource_inventory✅ [docs]
query_compliance_findings✅ [docs]✅ [docs]