Qualys Cloud Platform 3.12.1 (AM) API notification 1

Jeff Leggett

A new release of Qualys Cloud Platform 13.12.1 (AM) includes an updated API which is targeted for release in July 2022. The specific day will differ depending on the platform. See platform release dates on the Qualys Status page. This API notification provides an early preview into the coming API, allowing you to identify use cases that can leverage this updated API.

What’s New
AM APIs: Enable Cloud Perimeter Scan for AWS Connector
AM APIs: Enable Cloud Perimeter Scan for Azure Connector

Securing publicly-exposed cloud assets has been a challenge. You can now secure publicly exposed cloud assets by enabling cloud perimeter scans for your connectors.

With the dynamic deployments on Cloud, the publicly-faced assets are getting deployed in the respective cloud. The security posture of such assets is not immediately assessed. They are assessed after you execute manually-configured scans or scheduled scans.

Cloud perimeter scans use Qualys External Scanners (Internet Remote Scanners), located at the Qualys Cloud Platform.

AM API: Global Scan Configuration (New API)
/qps/rest/3.0/create/am/globalscanconfiguration
/qps/rest/3.0/update/am/globalscanconfiguration
/qps/rest/3.0/search/am/globalscanconfiguration

Once you enable cloud perimeter scan for your connector, you need to provide scan configuration for the cloud perimeter scan. You can either choose to provide custom scan configuration or specify global scan configuration settings to be used.
You can use the new API to create global scan configuration to be used for the cloud perimeter scan. If the custom scan configuration is not specified for the cloud perimeter scan, then the global scan configuration is used.

The release notes are here: https://www.qualys.com/docs/release-notes/qualys-cloud-platform-3.12.1-api-release-notes.pdf

Share your Comments

Comments

Your email address will not be published.