Skip to main content

Update Continuous Integration (CI) Serverless Compliance Policy

PUT 
/api/v31.02/policies/compliance/ci/serverless
x-prisma-cloud-target-env: {"permission":"policyServerless","saas":true,"self-hosted":true}
x-public: true

Updates the compliance policy for serverless functions built in your Continuous Integration (CI) pipeline. All rules in the policy are updated in a single shot.

The policy set in this endpoint is enforced by the scanners in the Jenkins plugin and the twistcli command line tool.

This endpoint maps to the policy table in Defend > Compliance > Functions > CI in the Console UI.

To construct an effective rule for this policy, specify at least one "check" and one effect value. See How to Construct a Compliance Policy for more info.

For a full list of checks, go to Defend > Compliance > Functions > CI in the Console UI and create a new rule. All prebuilt checks and their IDs are shown under Compliance actions.

cURL Request​

Refer to the following example cURL command that overwrites all rules in your current policy with a new policy that has a single rule:

$ curl 'https://<CONSOLE>/api/v<VERSION>/policies/compliance/ci/serverless' \
  -k \
  -X PUT \
  -u <USER> \
  -H 'Content-Type: application/json' \
  -d \
'{
  "rules": [
    {
      "name": "my-rule",
      "effect": "alert",
      "collections":[
         {
            "name":"All"
         }
      ],
      "condition": {
         "vulnerabilities": [
           {
             "id": 436,
             "block": false,
             "minSeverity": 1
           }
        ]
      }
    }
  ],
  "policyType": "ciServerlessCompliance"
}'

Note: No response will be returned upon successful execution.

Request​

Responses​

OK