Skip to main content

Get App-embedded Profiles



x-prisma-cloud-target-env: {"permission":"monitorRuntimeServerless","saas":true,"self-hosted":true}
x-public: true

Retrieves the app-embedded observations.

cURL Request

Refer to the following example cURL command that lists all the app-embedded runtime:

$ curl -k \
-u <USER> \
-H 'Content-Type: application/json' \
-X GET \


Query Parameters

    offset integer

    Offsets the result to a specific report count. Offset starts from 0.

    limit integer

    Limit is the amount to fix.

    sort string

    Sorts the result using a key.

    reverse boolean

    Sorts the result in reverse order.

    id string[]

    IDs is the runtime profile id filter.

    appID string[]

    AppIDs is the app embedded profile app IDs filter.

    container string[]

    Containers is the app embedded container filter.

    image string[]

    Images is the app embedded images filter.

    cluster string[]

    Clusters is the app embedded clusters filter.

    imageID string[]

    ImageIDs is the app embedded image IDs filter.


  • Array [
  • _id string

    ID is the profile ID.

    appID string

    AppID is the app embedded defender name.

    cloudMetadata object

    CloudMetadata is the metadata for a cloud provider managed asset (e.g., as part of AWS/GCP/Azure/OCI)

    accountID string

    Cloud account ID.

    awsExecutionEnv string

    AWS execution environment (e.g. EC2/Fargate).

    image string

    The name of the image the cloud managed host or container is based on.

    labels object[]

    Cloud provider metadata labels.

  • Array [
  • key string

    Label key.

    sourceName string

    Source name (e.g., for a namespace, the source name can be 'twistlock').

    sourceType common.ExternalLabelSourceType (string)

    Possible values: [namespace,deployment,aws,azure,gcp,oci]

    ExternalLabelSourceType indicates the source of the labels

    timestamp date-time

    Time when the label was fetched.

    value string

    Value of the label.

  • ]
  • name string

    Resource name.

    provider common.CloudProvider (string)

    Possible values: [aws,azure,gcp,alibaba,oci,others]

    CloudProvider specifies the cloud provider name

    region string

    Resource's region.

    resourceID string

    Unique ID of the resource.

    resourceURL string

    Server-defined URL for the resource.

    type string

    Instance type.

    vmID string

    Azure unique vm ID.

    vmImageID string

    VMImageID holds the VM instance's image ID.

    cluster string

    Cluster is the ECS Fargate cluster name.

    clusterType common.ClusterType (string)

    Possible values: [AKS,ECS,EKS,GKE,Kubernetes]

    ClusterType is the cluster type

    collections string (string)[]

    Collections are collections to which this profile applies.

    container string

    Container is the app embedded container name.

    image string

    Image is the image name.

    imageID string

    ImageID is the image ID.

    startTime date-time

    StartTime is the time when the defender starts.

  • ]