Wiz

Wiz is a unified cloud security that enables prevention, active detection and response. Wiz is used by security and development teams that includes to reduce risk, gain unmatched visibility, prioritization risk and enable business agility.

Integration Capabilities

DataBee connects to Wiz APIs for the purpose of retrieving the security information. Wiz uses the Graph API, which means the API endpoint will be same for all the events. The GraphQL query and variables will vary.

Integration Method: API

Tables: Vulnerability Finding, Detection Finding, Data Security Finding, Device Inventory, Scan Activity

This integration has been tested against Wiz GraphQL API v1.0.

Wiz Configuration

1. Login to wiz platform.

2. Navigate to Settings > Access Management > Service Accounts.
   

3. Click Add Service Account.
   

4. Enter the Name and Description for the service account.

5. Select the Type as a Custom Integration (GraphQL API)
   

6. Under API     Scopes, the following permissions need to be granted to fetch all the     events.  DataBee requires read permissions

7. Click on Save.

8. Copy your secret credentials as they will only be shown once.

Wiz API URL

To get the API tenant, go to Tenant Info

Copy the API URL info. This will be used when configuring DataBee datasource.

DataBee Configuration

1. Log into the DataBee console, navigate to Dataand click on Add New Data Source.

   

2. Search for Wiz

   

3. Select API Ingest

   

4. While configuring data source in Databee UI,select the Token Url Auth option from the Authorization Methoddropdown.

   

   Use the following URLs

   Authorization URL: https://auth.app.wiz.io/oauth/token

   API: https://api.<wiz_datacenter_id>.app.wiz.io/graphql Replace <wiz_datacenter_id> with your own domain instance. Steps to retrieve this was in the previous step.

5. Provide the saved Client Key and ClientSecret in the Key Id and Secret Key text boxes respectively.Leave the others blank.