Skip to main content

Get App-embedded Profiles



x-prisma-cloud-target-env: {"permission":"monitorRuntimeServerless","saas":true,"self-hosted":true}
x-public: true

Retrieves the app-embedded observations.

cURL Request

Refer to the following example cURL command that lists all the app-embedded runtime:

$ curl -k \
-u <USER> \
-H 'Content-Type: application/json' \
-X GET \


Query Parameters

    offset integer

    Offsets the result to a specific report count. Offset starts from 0.

    limit integer

    Number of reports to retrieve in a page. For PCCE, the maximum limit is 250. For PCEE, the maximum limit is 50. The default value is 50.

    search string

    Retrieves the result for a search term.

    sort string

    Sorts the result using a key. Refer to the columns in the relevant Prisma Cloud Compute user interface to use them as sort keys.

    reverse boolean

    Sorts the result in reverse order.

    collections string[]

    Filters the result based on collection names that you have defined in Prisma Cloud Compute.

    provider string[]

    Scopes the query by cloud provider.

    accountIDs string[]

    Filters the result based on cloud account IDs.

    resourceIDs string[]

    Scopes the query by resource ID.

    region string[]

    Scopes the query by cloud region.

    fields string[]

    Retrieves the fields that you need in a report. Use the list of fields you want to retrieve. By default, the result shows all fields of data.

    id string[]

    IDs is the runtime profile id filter.

    appID string[]

    AppIDs is the app embedded profile app IDs filter.

    container string[]

    Containers is the app embedded container filter.

    image string[]

    Images is the app embedded images filter.

    cluster string[]

    Clusters is the app embedded clusters filter.

    imageID string[]

    ImageIDs is the app embedded image IDs filter.


  • Array [
  • _id string

    ID is the profile ID.

    appID string

    AppID is the app embedded defender name.

    cloudMetadata object

    CloudMetadata is the metadata for an instance running in a cloud provider (AWS/GCP/Azure)

    accountID string

    Cloud account ID.

    awsExecutionEnv string

    AWS execution environment (e.g. EC2/Fargate).

    image string

    Image name.

    labels object[]

    Cloud provider metadata labels.

  • Array [
  • key string

    Label key.

    sourceName string

    Source name (e.g., for a namespace, the source name can be 'twistlock').

    sourceType common.ExternalLabelSourceType

    Possible values: [namespace,deployment,aws,azure,gcp,oci]

    ExternalLabelSourceType indicates the source of the labels

    timestamp date-time

    Time when the label was fetched.

    value string

    Value of the label.

  • ]
  • name string

    Instance name.

    provider common.CloudProvider

    Possible values: [aws,azure,gcp,alibaba,oci,others]

    CloudProvider represents the cloud provider

    region string

    Instance region.

    resourceID string

    Unique ID of the resource.

    resourceURL string

    Server-defined URL for the resource.

    type string

    Instance type.

    vmID string

    Azure unique vm ID.

    vmImageID string

    VMImageID holds the VM image ID.

    cluster string

    Cluster is the ECS Fargate cluster name.

    clusterType common.ClusterType

    Possible values: [AKS,ECS,EKS,GKE,Kubernetes]

    ClusterType is the cluster type

    collections string[]

    Collections are collections to which this profile applies.

    container string

    Container is the app embedded container name.

    image string

    Image is the image name.

    imageID string

    ImageID is the image ID.

    startTime date-time

    StartTime is the time when the defender starts.

  • ]