Compliance Assets

Operations for retrieving compliance assets

Get compliance assets

post

Retrieve compliance assets with required assessment profile revision and last evaluation time, with optional filtering, sorting and pagination.

Filtering Support:

• String fields (asset_name, rule_name, control): eq, neq, contains, not_contains
• Status fields (asset_type, status, severity, rule_type): eq, neq
• Status valid values: [FAILED, PASSED, NOT_ASSESSED]
• Severity valid values: [low, medium, high, critical]

Sorting Support:

• Available fields: asset_name, asset_type, status, rule_name, control, severity
• Sort orders: asc, desc
• Default: asset_name in ascending order

Pagination: (max number of elements is 100)

Required license: Cortex Cloud Runtime Security or Cortex Cloud Posture Management.

Authorizations

x-xdr-auth-idstringRequired

API Key ID for authentication

AuthorizationstringRequired

API Key for authentication

Body

Responses

200

Successfully retrieved compliance assets

application/json

400

Bad request - invalid input parameters

application/json

401

Authentication required

application/json

403

Access denied - insufficient permissions

application/json

500

Internal server error

application/json

post/public_api/v1/compliance/get_assets

POST /public_api/v1/compliance/get_assets HTTP/1.1
Host: api.xdr.us.paloaltonetworks.com
x-xdr-auth-id: YOUR_API_KEY
Authorization: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 216

{
  "request_data": {
    "assessment_profile_revision": "343554605578776831",
    "last_evaluation_time": 1758816221000,
    "filters": [
      null,
      null,
      null,
      null
    ],
    "sort": {
      "field": "asset_name",
      "keyword": "asc"
    },
    "search_from": 0,
    "search_to": 100
  }
}

{
  "reply": {
    "total_count": 134,
    "result_count": 29,
    "filter_count": 29,
    "assets": [
      {
        "ASSET_ID": "a4d9b7b4e7c88cecaf24a063d86cb0069ed659f8bc66c4c1572c90e716291e3d",
        "ASSET_NAME": "mock-gcloud-storage-buckets-list-3d0a69ff21184406aa1cbd07b29f6f1f",
        "ASSET_TYPE": "GOOGLE_CLOUD_STORAGE_BUCKET",
        "STATUS": "PASSED",
        "RULE_NAME": "Sensitive public object in private storage",
        "CONTROL": "Safeguard 3.2 : Establish and Maintain a Data Inventory",
        "RULE_REVISION_ID": "DSPM_1006",
        "CONTROL_REVISION_ID": -7177800670050593000,
        "SOURCE": "No Finding or Issue",
        "SEVERITY": "high",
        "RULE_TYPE": "Data",
        "PROVIDER": "GCP",
        "REGION": "us",
        "REALM": "gcp-c0844a50-dd0f-47ec-9d14-c7af5f5325aa",
        "TAGS": {
          "Name": "mock-gcloud-storage-buckets-list-3d0a69ff21184406aa1cbd07b29f6f1f"
        },
        "ORGANIZATION": null,
        "ASSET_STRONG_ID": "mock-gcloud-storage-buckets-list-3d0a69ff21184406aa1cbd07b29f6f1f"
      }
    ]
  }
}