Create new suppression by policy id

Prisma Cloud Code Security supports advanced Suppression rule settings in order to make policy management easier by dismissing or snoozing errors (using time-bounded suppression rules) that are irrelevant in your cloud and code environments. Suppression can be applied at various levels: for all cases (Disable Policy), for a specific Source,

To use the API request, add your token to the header. Use this API function to create a new Prisma Cloud Code Security Suppression rule that will be associated with the policyId included in the request. The input includes comment (Justification), SuppressionType (Resources (by default), Accounts, Policy, or Tags) and expirationTime (in Unix epoch time).

• for Resources - resources - array of { id, accountId }
• for Accounts - accountIds - array of strings
• for Policy - nothing
• for Tags - tags - array of { key, value } The output will be -
• success response - 200 , suppressionId
• error response - 400, “Couldn't save suppression”

Path Parameters

• policyId string required

application/json

Request Body required

• anyOf
  • ResourcesSuppressionCreate
  • PolicySuppressionCreate
  • AccountsSuppressionCreate
  • TagsSuppressionCreate
  • LicenseSuppressionCreate
  • PackageSuppressionCreate

  ---
• comment string required
• expirationTime double
• origin string required
• resources object[] required

  Array [

  accountId string required

  id string required

  ]
• suppressionType string required

  Possible values: [Resources]

comment string required

expirationTime double

origin string required

suppressionType string required

Possible values: [Policy]

accountIds string[] required

comment string required

expirationTime double

origin string required

suppressionType string required

Possible values: [Accounts]

comment string required

expirationTime double

origin string required

suppressionType string required

Possible values: [Tags]

tags object[] required

Array [

key string required

value string required

]

comment string required

expirationTime double

licenseTypes string[] required

origin string required

suppressionType string required

Possible values: [LicenseType]

comment string required

expirationTime double

origin string required

packages object[] required

Array [

language PackageLang required

Possible values: [nodejs, ruby, python, jar, dotNet, go, os]

packageName string required

version string required

]

suppressionType string required

Possible values: [PackageLicense]