Get App-embedded Profiles
GET/api/v30.00/profiles/app-embedded
x-prisma-cloud-target-env: {"permission":"monitorRuntimeServerless","saas":true,"self-hosted":true}
x-public: true
Retrieves the app-embedded observations.
cURL Request
Refer to the following example cURL command that lists all the app-embedded runtime:
$ curl -k \
-u <USER> \
-H 'Content-Type: application/json' \
-X GET \
'https://<CONSOLE>/api/v<VERSION>/profiles/app-embedded'
Request
Query Parameters
Offsets the result to a specific report count. Offset starts from 0.
Number of reports to retrieve in a page. For PCCE, the maximum limit is 250. For PCEE, the maximum limit is 50. The default value is 50.
Retrieves the result for a search term.
Sorts the result using a key. Refer to the columns in the relevant Prisma Cloud Compute user interface to use them as sort keys.
Sorts the result in reverse order.
Filters the result based on collection names that you have defined in Prisma Cloud Compute.
Scopes the query by cloud provider.
Filters the result based on cloud account IDs.
Scopes the query by resource ID.
Scopes the query by cloud region.
Retrieves the fields that you need in a report. Use the list of fields you want to retrieve. By default, the result shows all fields of data.
IDs is the runtime profile id filter.
AppIDs is the app embedded profile app IDs filter.
Containers is the app embedded container filter.
Images is the app embedded images filter.
Clusters is the app embedded clusters filter.
ImageIDs is the app embedded image IDs filter.
Responses
- 200
- default
- application/json
- Schema
- Example (from schema)
Schema
- Array [
- Array [
- ]
- ]
ID is the profile ID.
AppID is the app embedded defender name.
cloudMetadata object
CloudMetadata is the metadata for an instance running in a cloud provider (AWS/GCP/Azure)
Cloud account ID.
AWS execution environment (e.g. EC2/Fargate).
Image name.
labels object[]
Cloud provider metadata labels.
Label key.
Source name (e.g., for a namespace, the source name can be 'twistlock').
Possible values: [namespace,deployment,aws,azure,gcp,oci
]
ExternalLabelSourceType indicates the source of the labels
Time when the label was fetched.
Value of the label.
Instance name.
Possible values: [aws,azure,gcp,alibaba,oci,others
]
CloudProvider represents the cloud provider
Instance region.
Unique ID of the resource.
Server-defined URL for the resource.
Instance type.
Azure unique vm ID.
VMImageID holds the VM image ID.
Cluster is the ECS Fargate cluster name.
Possible values: [AKS,ECS,EKS,GKE,Kubernetes
]
ClusterType is the cluster type
Collections are collections to which this profile applies.
Container is the app embedded container name.
Image is the image name.
ImageID is the image ID.
StartTime is the time when the defender starts.
[
{
"_id": "string",
"appID": "string",
"cloudMetadata": {
"accountID": "string",
"awsExecutionEnv": "string",
"image": "string",
"labels": [
{
"key": "string",
"sourceName": "string",
"sourceType": [
"namespace",
"deployment",
"aws",
"azure",
"gcp",
"oci"
],
"timestamp": "2023-12-01T18:46:57.287Z",
"value": "string"
}
],
"name": "string",
"provider": [
"aws",
"azure",
"gcp",
"alibaba",
"oci",
"others"
],
"region": "string",
"resourceID": "string",
"resourceURL": "string",
"type": "string",
"vmID": "string",
"vmImageID": "string"
},
"cluster": "string",
"clusterType": [
"AKS",
"ECS",
"EKS",
"GKE",
"Kubernetes"
],
"collections": [
"string"
],
"container": "string",
"image": "string",
"imageID": "string",
"startTime": "2023-12-01T18:46:57.287Z"
}
]