Update suppression by policy id and suppression id

Prisma Cloud Code Security supports advanced Suppression rule settings in order to make policy management easier by dismissing or snoozing errors (using time-bounded suppression rules) that are irrelevant in your cloud and code environments. Suppression can be applied at various levels: for all cases (Disable Policy), for a specific Source, for a Specific Resource or by tag.

To use the API request, add your token to the header.

Use this API function to update an existing Prisma Cloud Code Security Suppression rule for the given policyId and suppressionId mentioned in the path. The input includes comment (Justification for such rule), SuppressionType (Resources (by default), Accounts, Policy OR Tags) and expirationTime (in Unix epoch time).

• for Resources - resources - array of { id, accountId }
• for Accounts - accountIds - array of strings
• for Policy - nothing
• for Tags - tags - array of { key, value } The output will be -
• Success - 200, suppressionId
• Error - 400, Couldn't update suppression ${suppressionId}

Use the example below as a reference for configuring the API request body for saving new suppression rules.

Path Parameters

• policyId string required
• suppressionId string required

application/json

Request Body required

• anyOf
  • ResourcesSuppressionCreate
  • PolicySuppressionCreate
  • AccountsSuppressionCreate
  • TagsSuppressionCreate
  • LicenseSuppressionCreate
  • PackageSuppressionCreate

  ---
• comment string required
• expirationTime double
• origin string required
• resources object[] required

  Array [

  accountId string required

  id string required

  ]
• suppressionType string required

  Possible values: [Resources]

comment string required

expirationTime double

origin string required

suppressionType string required

Possible values: [Policy]

accountIds string[] required

comment string required

expirationTime double

origin string required

suppressionType string required

Possible values: [Accounts]

comment string required

expirationTime double

origin string required

suppressionType string required

Possible values: [Tags]

tags object[] required

Array [

key string required

value string required

]

comment string required

expirationTime double

licenseTypes string[] required

origin string required

suppressionType string required

Possible values: [LicenseType]

comment string required

expirationTime double

origin string required

packages object[] required

Array [

language PackageLang required

Possible values: [nodejs, ruby, python, jar, dotNet, go, os]

packageName string required

version string required

]

suppressionType string required

Possible values: [PackageLicense]