Aqua CSPM

Aqua CSPM (Cloud Security Posture Management) is a cloud-native security solution by Aqua Security, designed to monitor and secure cloud environments by identifying and mitigating configuration risks, compliance gaps, and threats. It provides continuous visibility into cloud infrastructure security across multiple cloud platforms, including AWS, Azure, and Google Cloud.

Integration Method: API

Tables: Compliance Finding, Scan Activity, Detection Finding

This integration has been tested against the Aqua Enterprise API v2.

Aqua CSPM Configuration

Aqua user requirements

You need an Aqua user to authenticate with the REST API before using any of the API endpoints. This user must be configured as follows:

• Role: At least one of the user's roles includes one or more permission sets and application scopes, which meet the requirements defined below. There are no other requirements.

• Permission set(s): Your applications will generally require either read-only and/or write access to certain types of Aqua Platform objects (e.g., images or security policies). In your permission set(s), assign View Only and/or Edit permissions, respectively, to these types of objects. Refer to Permission Sets for information on creating and configuring permission sets.

• Application scope(s): Your applications will be able to access Aqua Platform objects within the application scope(s) associated with the user that has been authenticated. Refer to Application Scopes for information on creating and configuring application scopes.

Generate a CSPM API key and secret

1. Login to your Aqua Security dashboard account.

2. In Aqua Security UI, navigate to Account Management.

3. In the Account Management page, navigate to Settings > API Keys.

4. Click Generate Key.

5. Copy and save the API Key and Secret values before closing the pop-up window.

DataBee Configuration

1. Log into the DataBee console, navigate to the Data tab and click on the Add New Data Source button

2. Search for the Aqua CSPM option using the search bar in the Add New Data Source page.

3. Select the API Ingest option and enter appropriate details in the Configure Data source form. Click on Next button.

4. In the configuration details dialog, enter the following:

   • Authorization Method: HMAC Auth

   • Integration Key: Paste the generated API key

   • Secret Key: Paste the generated secret key

6. Click Submit