The Palo Alto Networks Cortex Cloud Security connector is currently in development and may expand with additional capabilities over time.
This guide walks you through generating Palo Alto Networks Cortex Cloud Security API credentials and gathering the values required to create an integration.
Before you begin, ensure that you have:
- Access to your Palo Alto Networks Cortex Cloud Security tenant
- Permission to create API keys for integrations
- A Cloud Posture Management license
- At least one onboarded cloud account in the tenant you want the provider to query
- Sign in to your Palo Alto Networks Cortex Cloud Security tenant.
- Open Settings.
- Select Data Sources & Integrations.
- Under Integrations, click API Keys.
- Click New Key.
- Under Security Level, select Standard. Advanced is not supported at this time.
- Assign a role that can read the cloud security provider will query. If available in your tenant, use Data Security Viewer.
- Click Generate.
- Copy and securely store the generated API Key. Treat this as a secret.
After creating the key, locate the new key entry in the API Keys page and copy the ID value. This is the API Key ID required by the provider.
In the API Keys page, click Copy API URL and save that value as your Base URL. It should look similar to https://api-{tenant}.xdr.{region}.paloaltonetworks.com.
Create your integration by supplying the following values.
| Integration Parameter | Description |
|---|---|
| Base URL | The API URL copied from Copy API URL in your Cortex Cloud tenant. |
| API Key ID | The ID value for the API key you created. |
| API Key | The secret key value generated when the API key was created. |
If your tenant offers multiple key types or roles, use the option that grants read access to the cloud security data needs, and store the generated API key immediately in a secure location.