Create IAM Policies in bundle using python

Juanpnav — Thu, 14 Dec 2023 05:33:00 GMT

Hello,

I'm trying to create a bunch of IAM policies using Prisma's API,

I can create config policies with no issues however when I try to create IAM policies, following Palo Alto's API documentation, I always get 400 error,

So probably my payload is bad done, but I find no errors in this code:

def makePolicy(session😞

url="https://{}.prismacloud.io/policy".format(region)

payload={

"cloudType": "azure",

"name": "iam test policy for azure using API",

"policyType": "IAM",

"rule": {

"criteria": "XXXXXXXX-XXXXXX-XXXXXXX",

"name": "use this rql for testing",

"parameters": {

"savedSearch": "true"

"type": "IAM"

"severity": "low"

}

payload=json.dumps(payload)

headers={

'Content-Type': 'application/json; charset=UTF-8',

"Accept": "application/json; charset=UTF-8",

"x-redlock-auth": session

}

response=requests.request('POST',url,headers=headers,data=payload)

print(response)

print(response.content)

return response

makePolicy(session())

Take in mind I changed the criteria value,

I tried with different rql ids, and changing the payload multiple times, but I can't stop receiving 400 error, thing that doesn't happen with config policies,

I appreciate any help,

Re: Create IAM Policies in bundle using python

MDavis29 — Fri, 15 Dec 2023 17:59:03 GMT

Hello,

Based on the code snipped you provided you have the basic requirements to this to work using the API. Please open a support case to have this looked at by out support team.

https://pan.dev/prisma-cloud/api/cspm/add-policy/
{
"cloudType": "aws",
"name": "Config test policy",
"policyType": "config",
"rule": {
"criteria": "e1234567-2798-4d1d-a1b0-52d60d49730b",
"name": "test rule",
"parameters": {
"savedSearch": "true"
},
"type": "Config"
},
"severity": "low"
}

topic Re: Create IAM Policies in bundle using python in Prisma Cloud Discussions

Create IAM Policies in bundle using python

Re: Create IAM Policies in bundle using python