Unable to Access Prisma Cloud DSPM (Data Security) APIs – 403 Forbidden Error

[N.Modi]

I am encountering a 403 Forbidden error when trying to access Prisma Cloud Data Security (DSPM) APIs, such as:
POST https://api.ind.prismacloud.io/dlp/api/v1/inventory/objects/aggregate
However, I am able to successfully access CSPM APIs (for example, /compliance/standards).

DSPM is enabled on my tenant, and I have checked by assigning a custom role with full Data Security permissions and used an admin token, but still see the issue.

Could any one please help me on this?

[JCalloway1]

Hi N.Modi

Note that the process for authentication for the DSPM API is different than the process for authenticating to the CSPM API.  It requires yout o create a separate key etc.  Take a look at this link which explains this in more detail and see if it helps. 

Thanks! 

[N.Modi]

We are trying to access the following API endpoint:

https://api.ind.prismacloud.io/dlp/api/v1/inventory/objects/aggregate
Reference documentation: https://pan.dev/prisma-cloud/api/cspm/get-inventory-resources/
Authentication method used:

Authorization: x-redlock-auth
However, we are encountering access issues while calling this API.

[JCalloway1]

Hello
I guess I'm confused here, because you stated that you are trying to use one API endpoint, but you are suplying documentation for a different endpoint.  

Maybe you're trying to do this?

https://api.ind.prismacloud.io/dlp/api/v1/inventory/objects/aggregate

[N.Modi]

Yes, we’re trying to call the following API: https://api.ind.prismacloud.io/dlp/api/v1/inventory/objects/aggregate

Here’s the cURL command for your reference:

curl --location 'https://api.ind.prismacloud.io/dlp/api/v1/inventory/objects/aggregate' \
--header 'Content-Type: application/json' \
--header 'x-redlock-auth: <token>' \
--data '{
  "tableLevel": 1
}'