topic Re: Unable to Access Prisma Cloud DSPM (Data Security) APIs – 403 Forbidden Error in Prisma Cloud Discussions

Unable to Access Prisma Cloud DSPM (Data Security) APIs – 403 Forbidden Error

N.Modi — Thu, 06 Nov 2025 11:43:30 GMT

I am encountering a 403 Forbidden error when trying to access Prisma Cloud Data Security (DSPM) APIs, such as:
POST https://api.ind.prismacloud.io/dlp/api/v1/inventory/objects/aggregateHowever, I am able to successfully access CSPM APIs (for example, /compliance/standards).

DSPM is enabled on my tenant, and I have checked by assigning a custom role with full Data Security permissions and used an admin token, but still see the issue.

Could any one please help me on this?

Re: Unable to Access Prisma Cloud DSPM (Data Security) APIs – 403 Forbidden Error

JCalloway1 — Thu, 06 Nov 2025 14:05:33 GMT

Hi N.Modi

Note that the process for authentication for the DSPM API is different than the process for authenticating to the CSPM API. It requires yout o create a separate key etc. Take a look at this link which explains this in more detail and see if it helps.

Thanks!

Re: Unable to Access Prisma Cloud DSPM (Data Security) APIs – 403 Forbidden Error

N.Modi — Fri, 07 Nov 2025 05:53:06 GMT

We are trying to access the following API endpoint:

https://api.ind.prismacloud.io/dlp/api/v1/inventory/objects/aggregate
Reference documentation: https://pan.dev/prisma-cloud/api/cspm/get-inventory-resources/
Authentication method used:

Authorization: x-redlock-auth
However, we are encountering access issues while calling this API.

Re: Unable to Access Prisma Cloud DSPM (Data Security) APIs – 403 Forbidden Error

JCalloway1 — Fri, 07 Nov 2025 13:04:58 GMT

Hello
I guess I'm confused here, because you stated that you are trying to use one API endpoint, but you are suplying documentation for a different endpoint.

Maybe you're trying to do this?

https://api.ind.prismacloud.io/dlp/api/v1/inventory/objects/aggregate

Re: Unable to Access Prisma Cloud DSPM (Data Security) APIs – 403 Forbidden Error

N.Modi — Mon, 10 Nov 2025 06:11:35 GMT

Yes, we’re trying to call the following API: https://api.ind.prismacloud.io/dlp/api/v1/inventory/objects/aggregate

Here’s the cURL command for your reference:

curl --location 'https://api.ind.prismacloud.io/dlp/api/v1/inventory/objects/aggregate' \
--header 'Content-Type: application/json' \
--header 'x-redlock-auth: <token>' \
--data '{
  "tableLevel": 1
}'