Using Rest API to delete an AWS Monitoring Definition in Panorama

BobbyWilloughby — Wed, 07 Apr 2021 13:06:01 GMT

I am trying to automate the addition/deletion of AWS Monitoring Definitions for the AWS Plug in for Panorama. I am able to add Monitoring Definitions using the following in Postman:

https://{{panorama}}/api?key={{key}}&type=config&action=set&xpath=/config/devices/entry[@name='localhost.localdomain']/plugins/aws/monitoring-definition&element=<entry name='BobbyTest'><vpc-ids><member>vpc-xxxxxxxxxxx</member></vpc-ids><role-arn>arn:aws:iam::111111111111:role/panorama</role-arn><iam-role>panorama-ec2-RO</iam-role><description>gatewayTESTTESTTEST</description><endpoint-url>ec2.eu-west-1.amazonaws.com</endpoint-url><notify-group>Inspection_Firewall_DGs</notify-group><enable>yes</enable></entry>

But when I try to delete an individual VPC from a monitoring definition or delete a definition for a specific Account/Region, the API deletes ALL the monitoring definitions. The Postman URL I am trying to use is:

https://{{panorama}}/api?key={{key}}&type=config&action=delete&xpath=/config/devices/entry[@name='localhost.localdomain']/plugins/aws/monitoring-definition&element=<entry name='BobbyTest'><vpc-ids><member>vpc-xxxxxxxxxxx</member></vpc-ids><role-arn>arn:aws:iam::111111111111:role/panorama</role-arn><iam-role>panorama-ec2-RO</iam-role><description>gatewayTESTTESTTEST</description><endpoint-url>ec2.eu-west-1.amazonaws.com</endpoint-url><notify-group>Inspection_Firewall_DGs</notify-group><enable>yes</enable></entry>

But is seems that no matter what information I provide in the "element", the action deletes all the definitions.

How do I delete a VPC from the list of VPCs in a specific Account/Region definition?

How do I delete a specific Account/Region definition?

Thanks in advance, Bobby

Re: Using Rest API to delete an AWS Monitoring Definition in Panorama

BobbyWilloughby — Wed, 07 Apr 2021 14:20:21 GMT

figured out how to delete the Monitoring Definition for an Account/Region

https://{{panorama}}/api?key={{key}}&type=config&action=delete&xpath=/config/devices/entry[@name='localhost.localdomain']/plugins/aws/monitoring-definition/entry[@name='BobbyTest']

and how to delete all VPCs associated with an Account/Region

https://{{panorama}}/api?key={{key}}&type=config&action=delete&xpath=/config/devices/entry[@name='localhost.localdomain']/plugins/aws/monitoring-definition/entry[@name='BobbyTest']/vpc-ids/member

But still need to be able to delete an individual VPC member from the Monitoring Definition

topic Using Rest API to delete an AWS Monitoring Definition in Panorama in General Topics

Using Rest API to delete an AWS Monitoring Definition in Panorama

Re: Using Rest API to delete an AWS Monitoring Definition in Panorama