Cloud Account Management

The cloud account APIs allow you to manage accounts within a specific cloud instance. You can have multiple cloud accounts within one cloud instance. Use these APIs to get the cloud accounts in the specified cloud instance and to enable or disable cloud accounts.

Get accounts in the specified cloud instances

post

List accounts and their details for the specified cloud instance.

Required license: In Cortex XSIAM Premium, Cortex XSIAM Enterprise, or Cortex XSIAM NG SIEM, requires the Cortex Cloud Posture Management add-on. In Cortex XSIAM Enterprise Plus, requires the Data Collection add-on.

Header parameters

AuthorizationstringRequired

{api_key}

Example: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP

x-xdr-auth-idstringRequired

{api_key_id}

Example: 241

Body

Responses

200

Successful Response

application/json

422

Invalid Client Request Error

application/json

500

Internal Server Error

application/json

post/public_api/v1/cloud_onboarding/get_accounts

POST /public_api/v1/cloud_onboarding/get_accounts HTTP/1.1
Host: api-yourfqdn
Authorization: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP 
x-xdr-auth-id: 241
Content-Type: application/json
Accept: */*
Content-Length: 215

{
  "request_data": {
    "instance_id": "text",
    "filter_data": {
      "sort": [
        {
          "FIELD": "STATUS",
          "ORDER": "DESC"
        }
      ],
      "paging": {
        "from": 0,
        "to": 50
      },
      "filter": {
        "AND": [
          {
            "SEARCH_FIELD": "STATUS",
            "SEARCH_TYPE": "EQ",
            "SEARCH_VALUE": "ENABLED"
          }
        ]
      }
    }
  }
}

{
  "reply": {
    "DATA": [
      {
        "account_name": "546064730288",
        "cloud_account_id": "546064730288",
        "account_type": "ORGANIZATION",
        "status": "ENABLED",
        "environment": "NONE",
        "created_at": 1775686847489
      }
    ],
    "FILTER_COUNT": 1,
    "TOTAL_COUNT": 1
  }
}

Enable or disable cloud accounts

post

Enable or disable the specified cloud accounts within a specific cloud instance.

Required license: In Cortex XSIAM Premium, Cortex XSIAM Enterprise, or Cortex XSIAM NG SIEM, requires the Cortex Cloud Posture Management add-on. In Cortex XSIAM Enterprise Plus, requires the Data Collection add-on.

Header parameters

AuthorizationstringRequired

{api_key}

Example: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP

x-xdr-auth-idstringRequired

{api_key_id}

Example: 241

Body

Responses

200

Successful Response

application/json

replyobjectOptional

422

Invalid Client Request Error

application/json

500

Internal Server Error

application/json

post/public_api/v1/cloud_onboarding/enable_disable_account

POST /public_api/v1/cloud_onboarding/enable_disable_account HTTP/1.1
Host: api-yourfqdn
Authorization: UCoWpG4rkNzgCp2dsh8m02iVpZsskwKHz7N1tErPcUV3Wmf59Gc9kytmgOv0pDWoem3PBlORyRIPiir4OcYdWUOWAM3JyTgoCxQf4nQoTlKmFRKz9Bj5vIjluw66p9WP 
x-xdr-auth-id: 241
Content-Type: application/json
Accept: */*
Content-Length: 91

{
  "request_data": {
    "ids": [
      "account-1",
      "account-2"
    ],
    "instance_id": "instance-1",
    "enable": true
  }
}

{
  "reply": {}
}