Introduction In architectures that are focused on container and microservices, you can use IBM Cloud® Security and Compliance Center Workload Protection to protect, monitor, and enhance forensic analysis of your pipeline and runtime components. IBM Cloud Security and Compliance Center Workload Protection is available natively on IBM Cloud with an API and SDK that is maintained and provided by Sysdig. For details about using IBM Cloud Security and Compliance Center Workload Protection, see the IBM Cloud docshttps://cloud.ibm.com/docs/workload-protection?topic=workload-protection-getting-startedgetting-started. Use the following syntax from a terminal to run a cURL command: shell curl -X Method Path Summary GET /api/cloud/v2/accountIDs List the Cloud Account IDs. GET /api/cloud/v2/accounts List the Cloud Accounts. POST /api/cloud/v2/accounts Create a new Cloud Account. POST /api/cloud/v2/accounts/register Register a new Cloud Account. DELETE /api/cloud/v2/accounts/{accountId} Delete a Cloud Account. GET /api/cloud/v2/accounts/{accountId} Get the Cloud Account. PUT /api/cloud/v2/accounts/{accountId} Update the alias, roleAvailable or roleName of a Cloud Account. GET /api/cloud/v2/accounts/{accountId}/validateRole Determine whether a valid role exists. GET /api/cloud/v2/dataSources/accounts List the Cloud Account's Datasources. GET /api/cloud/v2/dataSources/clusters List the Cloud Account's Clusters. GET /api/cloud/v2/dataSources/filter/accounts List the Cloud Accounts and Monitor Accounts. GET /api/cloud/v2/dataSources/filter/agentStatus List Agent Status. GET /api/cloud/v2/dataSources/filter/agentVersions List all Agent Versions. GET /api/cloud/v2/dataSources/filter/clusters List the Clusters. GET /api/cloud/v2/dataSources/filter/nodes List all the Nodes. GET /api/cloud/v2/dataSources/status Get the DataSources status. GET /api/cloud/v2/groups Get the list of groups. GET /api/cloud/v2/groups/policies Get the list of policies attached to the specified group. GET /api/cloud/v2/groups/policySuggestion Get a policy suggestion by group. GET /api/cloud/v2/groups/users Get the list of users attached to the specified group. GET /api/cloud/v2/labels List the supported labels. GET /api/cloud/v2/policies Get the list of policies. GET /api/cloud/v2/policies/groups Get the policy groups. GET /api/cloud/v2/policies/policyDoc Get the policy document. GET /api/cloud/v2/policies/policySuggestion Get the policy suggestion by policy. GET /api/cloud/v2/policies/users Get the policy users. GET /api/cloud/v2/reports/groups/csv Get the Groups CSV Report. GET /api/cloud/v2/reports/policies/csv Get the Policies CSV Report. GET /api/cloud/v2/reports/users/csv Get the Users CSV Report. GET /api/cloud/v2/riskCategory List the risk category thresholds. GET /api/cloud/v2/riskFindingsDefinition List the risk finding(s) definition. GET /api/cloud/v2/riskLabelScores List the risk label scores. GET /api/cloud/v2/users Get the list of users. GET /api/cloud/v2/users/groups Get the list of groups attached to a specified user. GET /api/cloud/v2/users/policyInfo Get the policy information. GET /api/cloud/v2/users/policySuggestion Get a policy suggestion by user. GET /api/cloudauth/v1/accounts List Cloudauth Accounts POST /api/cloudauth/v1/accounts Create Cloudauth Accounts DELETE /api/cloudauth/v1/accounts/{accountId} Delete Cloudauth Accounts By Account Id GET /api/cloudauth/v1/accounts/{accountId} Get Cloudauth Accounts By Account Id PUT /api/cloudauth/v1/accounts/{accountId} Update Cloudauth Accounts By Account Id GET /api/cloudauth/v1/accounts/{accountId}/components List Cloudauth Accounts Components By Account Id POST /api/cloudauth/v1/accounts/{accountId}/components Create Cloudauth Accounts Components By Account Id DELETE /api/cloudauth/v1/accounts/{accountId}/components/{componentType}/{componentInstance} Delete Cloudauth Accounts Components By Account Id And Component Type And Component Instance GET /api/cloudauth/v1/accounts/{accountId}/components/{componentType}/{componentInstance} Get Cloudauth Accounts Components By Account Id And Component Type And Component Instance PUT /api/cloudauth/v1/accounts/{accountId}/components/{componentType}/{componentInstance} Update Cloudauth Accounts Components By Account Id And Component Type And Component Instance POST /api/cloudauth/v1/accounts/{accountId}/components/{componentType}/{componentInstance}/validate Create Cloudauth Accounts Components Validate By Account Id And Component Type And Component Instance DELETE /api/cloudauth/v1/accounts/{accountId}/feature/{featureType} Delete Cloudauth Accounts Feature By Account Id And Feature Type GET /api/cloudauth/v1/accounts/{accountId}/feature/{featureType} Get Cloudauth Accounts Feature By Account Id And Feature Type PUT /api/cloudauth/v1/accounts/{accountId}/feature/{featureType} Update Cloudauth Accounts Feature By Account Id And Feature Type POST /api/cloudauth/v1/accounts/{accountId}/feature/{featureType}/validate Create Cloudauth Accounts Feature Validate By Account Id And Feature Type POST /api/cloudauth/v1/accounts/{accountId}/validate Create Cloudauth Accounts Validate By Account Id POST /api/cloudauth/v1/components/validate Create Cloudauth Components Validate GET /api/cloudauth/v1/organizations List Cloudauth Organizations POST /api/cloudauth/v1/organizations Create Cloudauth Organizations DELETE /api/cloudauth/v1/organizations/{organizationId} Delete Cloudauth Organizations By Organization Id GET /api/cloudauth/v1/organizations/{organizationId} Get Cloudauth Organizations By Organization Id PUT /api/cloudauth/v1/organizations/{organizationId} Update Cloudauth Organizations By Organization Id POST /api/cloudauth/v1/organizations/{organizationId}/validate Create Cloudauth Organizations Validate By Organization Id GET /api/cspm/v1/cloud/resources Cloud Resources GET /api/cspm/v1/clusteranalysis/resources Cluster Analysis Resources GET /api/cspm/v1/compliance/requirements Compliance Results GET /api/cspm/v1/compliance/views Compliance Views PUT /api/cspm/v1/compliance/views/favorite Update favorite view POST /api/cspm/v1/compliance/violations/acceptances Accept Posture Risk GET /api/cspm/v1/kube/resources Kuberenetes Resources POST /api/cspm/v1/policy/controls Save Control GET /api/cspm/v1/policy/controls/resource-template/kinds Get Resource Kinds GET /api/cspm/v1/policy/controls/resource-template/view/{resource_kind} Get Resource Example GET /api/cspm/v1/policy/controls/search Controls POST /api/cspm/v1/policy/controls/test-rego Test Rego GET /api/cspm/v1/policy/controls/{controlId}/configuration Get Control Configurations PUT /api/cspm/v1/policy/controls/{controlId}/configuration Update Control Configurations GET /api/cspm/v1/policy/policies/list Get Policies GET /api/cspm/v1/policy/zones Get Zones POST /api/cspm/v1/policy/zones Save Zone DELETE /api/cspm/v1/policy/zones/delete/{id} Delete Zone GET /api/cspm/v1/tasks Search and list CSPM Tasks GET /api/cspm/v1/tasks/{taskId} Task POST /api/cspm/v1/tasks/{taskId}/rerun Rerun Task GET /api/cspm/v1/inventory/resources Search and list Inventory Resources GET /api/cspm/v1/inventory/resources/{hash} Retrieve a single Inventory Resource by its hash GET /api/policies/v3/rules/groups Retrieve a group of all rules matching a list of given names POST /api/secure/rules Create a new rule GET /api/secure/rules/groups Retrieve a group of all rules having a given name GET /api/secure/rules/policyMappings Retrieve a map of rule names to their corresponding policies that use them GET /api/secure/rules/summaries Retrieve a list of summary rule information, grouped by rule name GET /api/secure/rules/tags Retrieves every tag associated with a runtime policy rule DELETE /api/secure/rules/{ruleId} Delete a rule GET /api/secure/rules/{ruleId} Retrieve info about a single rule PUT /api/secure/rules/{ruleId} Update info associated with a rule GET /api/reporting/v1/{domain}/reports/{fileId} Download a previously generated report GET /api/reporting/v1/{domain}/schedules List all the saved schedules for report generation POST /api/reporting/v1/{domain}/schedules Create a new schedule for report generation DELETE /api/reporting/v1/{domain}/schedules/{scheduleId} Remove the requested schedule for report generation GET /api/reporting/v1/{domain}/schedules/{scheduleId} Get the configuration of the requested schedule for report generation PUT /api/reporting/v1/{domain}/schedules/{scheduleId} Edit the configuration of the requested schedule for report generation POST /api/reporting/v1/{domain}/schedules/{scheduleId}/run Generate an on-demand report using the configuration of the requested schedule GET /api/reporting/v1/{domain}/{reportType}/config Get all the options available to define a report configuration POST /api/reporting/v1/{domain}/{reportType}/preview Get a result preview of a report with the given configuration GET /api/scanning/reporting/v2/schedules List all the saved schedules for report generation POST /api/scanning/reporting/v2/schedules Create a new schedule for report generation POST /api/scanning/reporting/v2/schedules/disable Disable all schedules for a given customer DELETE /api/scanning/reporting/v2/schedules/{scheduleId} Remove the requested schedule for report generation GET /api/scanning/reporting/v2/schedules/{scheduleId} Get the configuration of the requested schedule for report generation PUT /api/scanning/reporting/v2/schedules/{scheduleId} Edit the configuration of the requested schedule for report generation GET /api/scanning/reporting/v2/schedules/{scheduleId}/download Download the last generated report of the given schedule HEAD /api/scanning/reporting/v2/schedules/{scheduleId}/download Return headers of the download request GET /api/scanning/reporting/v2/schedules/{scheduleId}/reports Get the list of reports generated by a schedule GET /api/scanning/reporting/v2/schedules/{scheduleId}/reports/{reportId} Get a specific report GET /api/scanning/reporting/v2/schedules/{scheduleId}/reports/{reportId}/download Download a specific report HEAD /api/scanning/reporting/v2/schedules/{scheduleId}/reports/{reportId}/download Get the download headers POST /api/scanning/reporting/v2/schedules/{scheduleId}/run Generate an on-demand report using the configuration of the requested schedule GET /api/scanning/reporting/v2/schedules/{scheduleId}/status Get the status of the current and last completed reports generated by the schedule GET /api/scanning/reporting/v2/{reportType}/config Get all the options available to define a report configuration GET /api/scanning/reporting/v2/{reportType}/entities/{entityType}/config Get all the options available to define a report configuration POST /api/scanning/reporting/v2/{reportType}/entities/{entityType}/preview Get a result preview of a report with the given configuration POST /api/scanning/reporting/v2/{reportType}/preview Get a result preview of a report with the given configuration POST /api/secure/falco/lists Create a new falco list GET /api/secure/falco/lists/groups Retrieve a group of falco lists having a given name GET /api/secure/falco/lists/summaries Retrieve a list of summary falco list information, grouped by list name DELETE /api/secure/falco/lists/{listId} Delete a Falco list GET /api/secure/falco/lists/{listId} Retrieve a Falco list PUT /api/secure/falco/lists/{listId} Update a Falco list PUT /api/settings/falco/lists Update multiple default falco lists PUT /api/settings/falco/lists/{listId} Update a default Falco list POST /api/secure/falco/macros Create a new Falco macro GET /api/secure/falco/macros/groups Retrieve a group of all falco macros having a given name GET /api/secure/falco/macros/summaries Retrieve a list of summary macro information, grouped by macro name DELETE /api/secure/falco/macros/{macroId} Delete a Falco macro GET /api/secure/falco/macros/{macroId} Retrieve a Falco macro PUT /api/secure/falco/macros/{macroId} Update a Falco macro GET /api/secure/lists/groups/versions Get the last 10 versions of a list. GET /api/secure/lists/groups/versions/diff/{version1}/{version2} Compares two list versions GET /api/secure/lists/groups/versions/latest Gets latest version of a list. GET /api/secure/macros/groups/versions Get the last 10 versions of a macro. GET /api/secure/macros/groups/versions/diff/{version1}/{version2} Compares two macro versions GET /api/secure/macros/groups/versions/latest Gets latest version of a macro. GET /api/secure/rules/groups/versions Get the last 10 versions of a rule. GET /api/secure/rules/groups/versions/diff/{version1}/{version2} Compares two rules versions GET /api/secure/rules/groups/versions/latest Gets latest version of a rule. GET /api/secure/onboarding/v2/connectionStatus/{environment} Get the connection status GET /api/secure/onboarding/v2/environments Get the list of available environments. GET /api/secure/onboarding/v2/environments/selection Get the selected environments. POST /api/secure/onboarding/v2/environments/selection Register the selected environment. PUT /api/secure/onboarding/v2/feature/customer/skip Skips the onboarding feature per customer GET /api/secure/onboarding/v2/feature/status Check the onboarding feature status GET /api/secure/onboarding/v2/frameworks Get all compliance frameworks. GET /api/secure/onboarding/v2/frameworks/{environment} Get the list of compliance frameworks. POST /api/secure/onboarding/v2/frameworks/{environment} Create compliance tasks GET /api/secure/onboarding/v2/installActions/{installType} Get the install action. GET /api/secure/onboarding/v2/installActions/{installType}/values Get values.yaml content GET /api/secure/onboarding/v2/status Check the onboarding status GET /api/secure/onboarding/v2/userProfile Get a user profile GET /api/secure/onboarding/v2/userProfile/questionnaire Get the user profile questionnaire POST /api/secure/onboarding/v2/userProfile/questionnaire Submit the user profile questionnaire GET /api/secure/onboarding/v3/environments/{environment}/installActions/{installType} Get the install action. GET /api/settings/falco/customRulesFiles Get the custom falco rules files PUT /api/settings/falco/customRulesFiles Set the custom rules files e.g. the set of falco rules managed by a customer. DELETE /api/settings/falco/customRulesFiles/{filename} Delete the specified falco rules file GET /api/settings/falco/customRulesFiles/{filename} Get the custom falco rules file matching the filename PUT /api/settings/falco/customRulesFiles/{filename} Update the custom falco rules file matching the filename GET /api/settings/falco/defaultRulesFiles Get the default falco rules files GET /api/settings/falco/newestDefaultRulesFiles Get the newest default falco rules files GET /api/settings/falco/filters View the available falco filters for a customer GET /api/ticketing/v1/integrations/{provider} Get all integration. POST /api/ticketing/v1/integrations/{provider} Create a new Integration DELETE /api/ticketing/v1/integrations/{provider}/{integration_id} Delete an Integration. GET /api/ticketing/v1/integrations/{provider}/{integration_id} Get an Integration. PUT /api/ticketing/v1/integrations/{provider}/{integration_id} Update an Integration. GET /api/ticketing/v1/integrations/{provider}/{integration_id}/project/{project_id}/projectMeta Pull all jira project metadata. GET /api/ticketing/v1/integrations/{provider}/{integration_id}/projects Pull all jira projects. DELETE /api/v1/captures Delete captures GET /api/v1/captures Retrieve the list of captures POST /api/v1/captures Create a capture GET /api/v1/captures/{captureId} Get a capture PUT /api/v1/captures/{captureId} Update a capture GET /api/v1/captures/{captureId}/download Download a capture POST /api/v1/captures/{captureId}/stop Stop a capture GET /api/v1/eventsForwarding/channels Retrieve a list of the supported channels. GET /api/v1/eventsForwarding/integrations Retrieve a list of integrations for the customer. POST /api/v1/eventsForwarding/integrations Create an integration for the customer. DELETE /api/v1/eventsForwarding/integrations/{integrationId} Delete an integration given its id. GET /api/v1/eventsForwarding/integrations/{integrationId} Retrieve an integration given its id. PATCH /api/v1/eventsForwarding/integrations/{integrationId} Update an integration given its id. GET /api/v1/eventsForwarding/supported Retrieve a list of the supported targets. POST /api/v1/networkSecurity/namespaces/{namespaceName}/simulatedPolicies Creates a Kubernetes Network Policy POST /api/v1/networkSecurity/networkPolicyOverlayOwnerTopology Creates a communication topology graph around the specified owner GET /api/v1/networkSecurity/status Ping the status GET /api/v1/networkTopology/clusters Returns all cluster names for the customer GET /api/v1/networkTopology/egressSummaries Returns an overview of egress networking traffic GET /api/v1/networkTopology/egressUnresolvedIps Returns the unresolved ips for a time range and pod owner GET /api/v1/networkTopology/ingressSummaries Returns an overview of ingress networking traffic GET /api/v1/networkTopology/ingressUnresolvedIps Returns the unresolved ips for a time range and pod owner GET /api/v1/networkTopology/namespaceLabelKeys Returns sorted list of unique namespace label key values GET /api/v1/networkTopology/namespaces Returns all namespace names for the cluster GET /api/v1/networkTopology/ownerTopology Creates a communication topology graph around the specified owner GET /api/v1/networkTopology/owners Returns all pod owners for a cluster, namespace, and time range GET /api/v1/networkTopology/status Ping the status GET /api/v1/networkTopology/workloadLabelKeys Returns sorted list of unique workload label key values GET /api/v1/profiling/profileGroups Get info about profile groups for a customer GET /api/v1/profiling/profileGroups/{profileGroupId} Get info about a profile group with a specific id for a customer GET /api/v1/profiling/profileGroups/{profileGroupId}/profiles Get all profiles for a given profileGroupId GET /api/v1/profiling/profiles/{profileId} Get profile matching given profileId POST /api/v1/profiling/profiles/{profileId}/actions/remove Remove a profile given the profileId POST /api/v1/profiling/profiles/{profileId}/actions/reset Reset a profile given the profileId GET /api/v1/profiling/status Get status of Profiling API POST /api/v1/secure/policyTuner/disable The policy tuner service records this customer as disabled such that a tune will not be run for this customer during the next run cycle POST /api/v1/secure/policyTuner/enable The policy tuner service records this customer as enabled such that a tune will be run for this customer during the next run cycle POST /api/v1/secure/policyTuner/exceptions Adds a provided set of exceptions to the tuner file POST /api/v1/secure/policyTuner/excludeEvents Returns a list of exceptions to exclude the events matching a set of parameters GET /api/v1/secure/policyTuner/status Ping the status POST /api/v1/secure/policyTuner/tuneNow The policy tuner immediately runs tuning for the customer GET /api/v1/secure/policyTuner/tuningEnabled Checks if tuning is enabled GET /api/v1/secureEvents Retrieves a secure events feed GET /api/v1/secureEvents/filters Retrieves the supported events feed scope filters GET /api/v1/secureEvents/hasEvents Verify presence of old events GET /api/v1/secureEvents/status Ping the status GET /api/v1/secureEvents/{eventId} Retrieves an event given its id GET /api/vi/secureEvents/bubbleChart Retrieves bubbleChart stats of runtime policy events and vulnerabilities with severities. GET /api/vi/secureEvents/count Retrieves the count of scanning and policy events. GET /api/vi/secureEvents/timeSeries Retrieves timeseries counts of events by severity or user. GET /api/vi/secureEvents/topStats Retrieves top column value and counts of events by cluster, compliance, mitre, namespace, node, rule name, workload. GET /api/v2/activityAudit/events Retrieves a list of audit events GET /api/v2/activityAudit/events/{type}/{eventId} Retrieves an audit event given its type and id GET /api/v2/activityAudit/events/{type}/{eventId}/trace Retrieves the trace of an audit event GET /api/v2/activityAudit/summary Retrieve a summary of the audit events GET /api/v2/policies Retrieve security policies POST /api/v2/policies Create a new security policy POST /api/v2/policies/batch Create a new security policy and rules in a transaction DELETE /api/v2/policies/{id} Delete a security policy. GET /api/v2/policies/{id} Retrieve a security policy PUT /api/v2/policies/{id} Update a security policy GET /secure/vulnerability/v1beta1/pipeline-results Get a list of pipeline scan results GET /secure/vulnerability/v1beta1/registry-results Get a list of registry scan results GET /secure/vulnerability/v1beta1/results/{resultId} Get full scan result GET /secure/vulnerability/v1beta1/runtime-results Get a list of runtime scan results GET /secure/vulnerability/v1beta1/sboms Get sbom GET /secure/vulnerability/v1/runtime-results Get a list of runtime scan results GET /secure/vulnerability/v1/registry-results Get a list of registry scan results GET /secure/vulnerability/v1/pipeline-results Get a list of pipeline scan results GET /secure/vulnerability/v1/results/{resultId} Get full scan result GET /platform/v1/zones List Zones POST /platform/v1/zones Create Zone DELETE /platform/v1/zones/{zoneId} Delete Zone GET /platform/v1/zones/{zoneId} Get Zone PUT /platform/v1/zones/{zoneId} Update Zone GET /platform/reporting/v1/schedules List Report Schedules GET /platform/reporting/v1/jobs List Report Job Runs