For the complete documentation index, see llms.txt. This page is also available as Markdown.

Cloud Account Management

The cloud account APIs allow you to manage accounts within a specific cloud instance. You can have multiple cloud accounts within one cloud instance. Use these APIs to get the cloud accounts in the specified cloud instance and to enable or disable cloud accounts.

Get accounts in the specified cloud instances

post

List accounts and their details for the specified cloud instance.

Required license: Cortex Cloud Posture Management

Header parameters
AuthorizationstringRequired

{api_key}

Example: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP
x-xdr-auth-idstringRequired

{api_key_id}

Example: 241
Body
Responses
200

Successful Response

application/json
post/public_api/v1/cloud_onboarding/get_accounts
POST /public_api/v1/cloud_onboarding/get_accounts HTTP/1.1
Host: api-yourfqdn
Authorization: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP 
x-xdr-auth-id: 241
Content-Type: application/json
Accept: */*
Content-Length: 215

{
  "request_data": {
    "instance_id": "text",
    "filter_data": {
      "sort": [
        {
          "FIELD": "STATUS",
          "ORDER": "DESC"
        }
      ],
      "paging": {
        "from": 0,
        "to": 50
      },
      "filter": {
        "AND": [
          {
            "SEARCH_FIELD": "STATUS",
            "SEARCH_TYPE": "EQ",
            "SEARCH_VALUE": "ENABLED"
          }
        ]
      }
    }
  }
}
{
  "reply": {
    "DATA": [
      {
        "account_name": "546064730288",
        "cloud_account_id": "546064730288",
        "account_type": "ORGANIZATION",
        "status": "ENABLED",
        "environment": "NONE",
        "created_at": 1775686847489
      }
    ],
    "FILTER_COUNT": 1,
    "TOTAL_COUNT": 1
  }
}

Enable or disable cloud accounts

post

Enable or disable the specified cloud accounts within a specific cloud instance.

Required license: Cortex Cloud Posture Management

Header parameters
AuthorizationstringRequired

{api_key}

Example: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP
x-xdr-auth-idstringRequired

{api_key_id}

Example: 241
Body
Responses
200

Successful Response

application/json
replyobjectOptional
post/public_api/v1/cloud_onboarding/enable_disable_account
POST /public_api/v1/cloud_onboarding/enable_disable_account HTTP/1.1
Host: api-yourfqdn
Authorization: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP 
x-xdr-auth-id: 241
Content-Type: application/json
Accept: */*
Content-Length: 91

{
  "request_data": {
    "ids": [
      "account-1",
      "account-2"
    ],
    "instance_id": "instance-1",
    "enable": true
  }
}
{
  "reply": {}
}

Last updated

Was this helpful?