CloudGuard Intelligence API

Cloud intelligence and CDR - account onboarding for the Intelligence (Magellan) service, usage quota notification rates and intelligence views over cloud activity logs.

Operations 20

POST /v2/view/magellan/disable-magellan-for-cloud-account Offboard Account #
PUT /v2/view/magellan/usage-notification-rate Set Usage Notification Rate #
PUT /v2/view/magellan/usage-notification-update-ancestors Set Usage Notification Ancestors Update #
POST /v2/view/magellan/magellan-flowlogs-onboarding Aws Network Traffic Onboarding #
POST /v2/view/magellan/magellan-cloudtrail-onboarding Aws Account Activity Onboarding #
POST /v2/view/magellan/magellan-custom-onboarding Aws Custom Onboarding #
POST /v2/view/magellan/magellan-alibaba-actiontrail-onboarding Alibaba Accoount Activity Onboarding #
POST /v2/view/magellan/provide-azure-storage-details Azure Network Traffic New Storage Onboarding #
POST /v2/view/magellan/magellan-gcp-onboarding Gcp Onboarding #
POST /v2/intelligence/azure/onboarding-account-activity Azure Account Activity New Storage Onboarding #
POST /v2/intelligence/azure/onboarding-network-traffic Azure Network Traffic New Centralized Storage Onboarding #
POST /v2/intelligence/azure/get-arm-to-onboard-resources-network-traffic-centralized Get Arm To Onboard Resources Network Traffic Centralized #
POST /v2/intelligence/azure/get-arm-to-onboard-resources-account-activity Get Arm To Onboard Resources Account Activity #
POST /v2/intelligence/azure/magellan-azure-flowlogs-onboarding-with-arm Azure Network Traffic Nsg Onboarding With Arm #
POST /v2/remediation/trigger Post Trigger Remediation #
GET /v2/remediation/status/{executionId} Get Status Remediation #
GET /v2/reports Get Reports #
POST /v2/reports Create Report #
DELETE /v2/reports Delete Reports #
PUT /v2/reports/{reportId} Update Report #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/cloudguard-intelligence-api"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

cloudguard-intelligence-openapi.yml Raw ↑
info:
  title: Intelligence
  version: v2
openapi: 3.0.0
servers:
- url: https://api.dome9.com/
  description: US region
- url: https://api.{region}.dome9.com/
  description: Other regions
  variables:
    region:
      enum:
      - eu1
      - ap1
      - ap2
      - ap3
      - cace1
      default: eu1
paths:
  /v2/view/magellan/disable-magellan-for-cloud-account:
    post:
      tags:
      - Intelligence
      summary: Offboard Account
      operationId: Intelligence_OffboardAccount_post_/v2/view/magellan/disable-magellan-for-cloud-account
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                enum:
                - Continue
                - SwitchingProtocols
                - OK
                - Created
                - Accepted
                - NonAuthoritativeInformation
                - NoContent
                - ResetContent
                - PartialContent
                - MultipleChoices
                - Ambiguous
                - MovedPermanently
                - Moved
                - Found
                - Redirect
                - SeeOther
                - RedirectMethod
                - NotModified
                - UseProxy
                - Unused
                - TemporaryRedirect
                - RedirectKeepVerb
                - BadRequest
                - Unauthorized
                - PaymentRequired
                - Forbidden
                - NotFound
                - MethodNotAllowed
                - NotAcceptable
                - ProxyAuthenticationRequired
                - RequestTimeout
                - Conflict
                - Gone
                - LengthRequired
                - PreconditionFailed
                - RequestEntityTooLarge
                - RequestUriTooLong
                - UnsupportedMediaType
                - RequestedRangeNotSatisfiable
                - ExpectationFailed
                - UpgradeRequired
                - InternalServerError
                - NotImplemented
                - BadGateway
                - ServiceUnavailable
                - GatewayTimeout
                - HttpVersionNotSupported
                type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Falconetix.Model.Magellan.MagellanAccountOffboardingModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Falconetix.Model.Magellan.MagellanAccountOffboardingModel'
        description: Block indicating cloud account id and vendor to be offboarded from Intelligence
        required: true
      description: Offboard cloud account from Intelligence. The cloud account must already be onboarded to Intelligence.
  /v2/view/magellan/usage-notification-rate:
    put:
      tags:
      - Intelligence
      summary: Set Usage Notification Rate
      operationId: Intelligence_SetUsageNotificationRate_put_/v2/view/magellan/usage-notification-rate
      parameters:
      - name: rate
        in: query
        description: Emails will be sent every {rate} % reached.
        required: true
        schema:
          type: integer
          format: int32
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                enum:
                - Continue
                - SwitchingProtocols
                - OK
                - Created
                - Accepted
                - NonAuthoritativeInformation
                - NoContent
                - ResetContent
                - PartialContent
                - MultipleChoices
                - Ambiguous
                - MovedPermanently
                - Moved
                - Found
                - Redirect
                - SeeOther
                - RedirectMethod
                - NotModified
                - UseProxy
                - Unused
                - TemporaryRedirect
                - RedirectKeepVerb
                - BadRequest
                - Unauthorized
                - PaymentRequired
                - Forbidden
                - NotFound
                - MethodNotAllowed
                - NotAcceptable
                - ProxyAuthenticationRequired
                - RequestTimeout
                - Conflict
                - Gone
                - LengthRequired
                - PreconditionFailed
                - RequestEntityTooLarge
                - RequestUriTooLong
                - UnsupportedMediaType
                - RequestedRangeNotSatisfiable
                - ExpectationFailed
                - UpgradeRequired
                - InternalServerError
                - NotImplemented
                - BadGateway
                - ServiceUnavailable
                - GatewayTimeout
                - HttpVersionNotSupported
                type: string
      description: "Set usage notification emails rate.\r\nBy default, the system will send an email notification when Intelligence\
        \ usage reaches 80%, 90% and 100% of your allowed quota. \r\nUse this API call to configure sending an email notification\
        \ every time you consumed the defined % of your quota."
  /v2/view/magellan/usage-notification-update-ancestors:
    put:
      tags:
      - Intelligence
      summary: Set Usage Notification Ancestors Update
      operationId: Intelligence_SetUsageNotificationAncestorsUpdate_put_/v2/view/magellan/usage-notification-update-ancestors
      parameters:
      - name: shouldUpdate
        in: query
        description: Indicating if emails should be sent to ancestors.
        required: true
        schema:
          type: boolean
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                enum:
                - Continue
                - SwitchingProtocols
                - OK
                - Created
                - Accepted
                - NonAuthoritativeInformation
                - NoContent
                - ResetContent
                - PartialContent
                - MultipleChoices
                - Ambiguous
                - MovedPermanently
                - Moved
                - Found
                - Redirect
                - SeeOther
                - RedirectMethod
                - NotModified
                - UseProxy
                - Unused
                - TemporaryRedirect
                - RedirectKeepVerb
                - BadRequest
                - Unauthorized
                - PaymentRequired
                - Forbidden
                - NotFound
                - MethodNotAllowed
                - NotAcceptable
                - ProxyAuthenticationRequired
                - RequestTimeout
                - Conflict
                - Gone
                - LengthRequired
                - PreconditionFailed
                - RequestEntityTooLarge
                - RequestUriTooLong
                - UnsupportedMediaType
                - RequestedRangeNotSatisfiable
                - ExpectationFailed
                - UpgradeRequired
                - InternalServerError
                - NotImplemented
                - BadGateway
                - ServiceUnavailable
                - GatewayTimeout
                - HttpVersionNotSupported
                type: string
      description: Enable sending usage notification updates to parent accounts (all levels).
  /v2/view/magellan/magellan-flowlogs-onboarding:
    post:
      tags:
      - Intelligence
      summary: Aws Network Traffic Onboarding
      operationId: Intelligence_AwsNetworkTrafficOnboarding_post_/v2/view/magellan/magellan-flowlogs-onboarding
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Views.Magellan.AwsLogicLogViewModel'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Falconetix.Model.Magellan.MagellanOnboardingModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Falconetix.Model.Magellan.MagellanOnboardingModel'
        description: Block indicating cloud account id and bucket name to be onboarded to Intelligence Network Traffic
        required: true
      description: "Onboard an account for Network Traffic. The account must already be onboarded to CloudGuard\r\nPlease\
        \ follow the Intelligence onboarding \"Prerequisites\" screen and the \"Prepare IAM Policy for CloudGuard Intelligence\"\
        \ screen on the CloudGuard portal."
  /v2/view/magellan/magellan-cloudtrail-onboarding:
    post:
      tags:
      - Intelligence
      summary: Aws Account Activity Onboarding
      operationId: Intelligence_AwsAccountActivityOnboarding_post_/v2/view/magellan/magellan-cloudtrail-onboarding
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Views.Magellan.AwsLogicLogViewModel'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Falconetix.Model.Magellan.MagellanOnboardingModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Falconetix.Model.Magellan.MagellanOnboardingModel'
        description: Block indicating cloud account id and bucket name to be onboarded to Intelligence Account Activity
        required: true
      description: "Onboard an account for Account Activity. The account must already be onboarded to CloudGuard.\r\nPlease\
        \ follow the Intelligence onboarding \"Prerequisites\" screen and the \"Prepare IAM Policy for CloudGuard Intelligence\"\
        \ screen on the CloudGuard portal."
  /v2/view/magellan/magellan-custom-onboarding:
    post:
      tags:
      - Intelligence
      summary: Aws Custom Onboarding
      operationId: Intelligence_AwsCustomOnboarding_post_/v2/view/magellan/magellan-custom-onboarding
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                enum:
                - Continue
                - SwitchingProtocols
                - OK
                - Created
                - Accepted
                - NonAuthoritativeInformation
                - NoContent
                - ResetContent
                - PartialContent
                - MultipleChoices
                - Ambiguous
                - MovedPermanently
                - Moved
                - Found
                - Redirect
                - SeeOther
                - RedirectMethod
                - NotModified
                - UseProxy
                - Unused
                - TemporaryRedirect
                - RedirectKeepVerb
                - BadRequest
                - Unauthorized
                - PaymentRequired
                - Forbidden
                - NotFound
                - MethodNotAllowed
                - NotAcceptable
                - ProxyAuthenticationRequired
                - RequestTimeout
                - Conflict
                - Gone
                - LengthRequired
                - PreconditionFailed
                - RequestEntityTooLarge
                - RequestUriTooLong
                - UnsupportedMediaType
                - RequestedRangeNotSatisfiable
                - ExpectationFailed
                - UpgradeRequired
                - InternalServerError
                - NotImplemented
                - BadGateway
                - ServiceUnavailable
                - GatewayTimeout
                - HttpVersionNotSupported
                type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Falconetix.Model.Magellan.MagellanCustomOnboardingModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Falconetix.Model.Magellan.MagellanCustomOnboardingModel'
        description: Block indicating custom onboarding data to be onboarded to Intelligence
        required: true
      description: "Custom onboard Account Activity or Network Traffic of your cloud environment to Intelligence.\r\nThe cloud\
        \ accounts must already be onboarded to CloudGuard.\r\nPlease follow the Intelligence onboarding \"Prerequisites\"\
        \ screen and the \"Prepare IAM Policy for CloudGuard Intelligence\" screen on the CloudGuard portal."
  /v2/view/magellan/magellan-alibaba-actiontrail-onboarding:
    post:
      tags:
      - Intelligence
      summary: Alibaba Accoount Activity Onboarding
      operationId: Intelligence_AlibabaAccoountActivityOnboarding_post_/v2/view/magellan/magellan-alibaba-actiontrail-onboarding
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                enum:
                - Continue
                - SwitchingProtocols
                - OK
                - Created
                - Accepted
                - NonAuthoritativeInformation
                - NoContent
                - ResetContent
                - PartialContent
                - MultipleChoices
                - Ambiguous
                - MovedPermanently
                - Moved
                - Found
                - Redirect
                - SeeOther
                - RedirectMethod
                - NotModified
                - UseProxy
                - Unused
                - TemporaryRedirect
                - RedirectKeepVerb
                - BadRequest
                - Unauthorized
                - PaymentRequired
                - Forbidden
                - NotFound
                - MethodNotAllowed
                - NotAcceptable
                - ProxyAuthenticationRequired
                - RequestTimeout
                - Conflict
                - Gone
                - LengthRequired
                - PreconditionFailed
                - RequestEntityTooLarge
                - RequestUriTooLong
                - UnsupportedMediaType
                - RequestedRangeNotSatisfiable
                - ExpectationFailed
                - UpgradeRequired
                - InternalServerError
                - NotImplemented
                - BadGateway
                - ServiceUnavailable
                - GatewayTimeout
                - HttpVersionNotSupported
                type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Falconetix.Model.Magellan.MagellanOnboardingAzurePricingStorage.MagellanAlibabaActionTrailOnboardingModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Falconetix.Model.Magellan.MagellanOnboardingAzurePricingStorage.MagellanAlibabaActionTrailOnboardingModel'
        description: Block indicating data to be onboarded to Intelligence Event Activity
        required: true
      description: "Onboard Alibaba account for Account Activity. The account must already be onboarded to CloudGuard.\r\n\
        Please follow Intelligence onboarding \"Prerequisites\" screen on CloudGuard portal."
  /v2/view/magellan/provide-azure-storage-details:
    post:
      tags:
      - Intelligence
      summary: Azure Network Traffic New Storage Onboarding
      operationId: Intelligence_AzureNetworkTrafficNewStorageOnboarding_post_/v2/view/magellan/provide-azure-storage-details
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                enum:
                - Continue
                - SwitchingProtocols
                - OK
                - Created
                - Accepted
                - NonAuthoritativeInformation
                - NoContent
                - ResetContent
                - PartialContent
                - MultipleChoices
                - Ambiguous
                - MovedPermanently
                - Moved
                - Found
                - Redirect
                - SeeOther
                - RedirectMethod
                - NotModified
                - UseProxy
                - Unused
                - TemporaryRedirect
                - RedirectKeepVerb
                - BadRequest
                - Unauthorized
                - PaymentRequired
                - Forbidden
                - NotFound
                - MethodNotAllowed
                - NotAcceptable
                - ProxyAuthenticationRequired
                - RequestTimeout
                - Conflict
                - Gone
                - LengthRequired
                - PreconditionFailed
                - RequestEntityTooLarge
                - RequestUriTooLong
                - UnsupportedMediaType
                - RequestedRangeNotSatisfiable
                - ExpectationFailed
                - UpgradeRequired
                - InternalServerError
                - NotImplemented
                - BadGateway
                - ServiceUnavailable
                - GatewayTimeout
                - HttpVersionNotSupported
                type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Falconetix.Model.Magellan.MagellanOnboardingAzurePricingStorage.MagellanAzureNewStorageDetailsAfterArmModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Falconetix.Model.Magellan.MagellanOnboardingAzurePricingStorage.MagellanAzureNewStorageDetailsAfterArmModel'
        description: Block indicating data of storage keys to be onboarded to Intelligence Network Traffic
        required: true
      description: After calling AzureNetworkTrafficOnboardingWithArm and creating the required resources in Azure using the
        ARM template, Intelligence needs access to the storage keys.
  /v2/view/magellan/magellan-gcp-onboarding:
    post:
      tags:
      - Intelligence
      summary: Gcp Onboarding
      operationId: Intelligence_GcpOnboarding_post_/v2/view/magellan/magellan-gcp-onboarding
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                enum:
                - Continue
                - SwitchingProtocols
                - OK
                - Created
                - Accepted
                - NonAuthoritativeInformation
                - NoContent
                - ResetContent
                - PartialContent
                - MultipleChoices
                - Ambiguous
                - MovedPermanently
                - Moved
                - Found
                - Redirect
                - SeeOther
                - RedirectMethod
                - NotModified
                - UseProxy
                - Unused
                - TemporaryRedirect
                - RedirectKeepVerb
                - BadRequest
                - Unauthorized
                - PaymentRequired
                - Forbidden
                - NotFound
                - MethodNotAllowed
                - NotAcceptable
                - ProxyAuthenticationRequired
                - RequestTimeout
                - Conflict
                - Gone
                - LengthRequired
                - PreconditionFailed
                - RequestEntityTooLarge
                - RequestUriTooLong
                - UnsupportedMediaType
                - RequestedRangeNotSatisfiable
                - ExpectationFailed
                - UpgradeRequired
                - InternalServerError
                - NotImplemented
                - BadGateway
                - ServiceUnavailable
                - GatewayTimeout
                - HttpVersionNotSupported
                type: string
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Falconetix.Model.Magellan.MagellanGcpOnboardingModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Falconetix.Model.Magellan.MagellanGcpOnboardingModel'
        description: Block indicating data to be onboarded to Intelligence
        required: true
      description: "Onboard Gcp project. The project must already be onboarded to CloudGuard.\r\nFor network traffic please\
        \ follow the Intelligence onboarding \"Prerequisites\" screen on the CloudGuard portal.\r\nThis is the API for onboarding\
        \ your gcp project in CloudGuard side. In addition, you need to create some\r\nresources in GCP as part of the onboarding.\
        \ The following GIT contains a code that you can run on your computer.\r\nThe code creates the needed resources and\
        \ makes an API call to CloudGuard:\r\nhttps://github.com/dome9/gcp-onboarding/tree/main/onboarding-api"
  /v2/intelligence/azure/onboarding-account-activity:
    post:
      tags:
      - Azure
      summary: Azure Account Activity New Storage Onboarding
      operationId: Azure_AzureAccountActivityNewStorageOnboarding_post_/v2/intelligence/azure/onboarding-account-activity
      requestBody:
        x-name: model
        description: All required details to be onboarded to Intelligence Account Activity
        content:
          application/json:
            schema:
              type: object
        required: true
        x-position: 1
      responses:
        '200':
          description: Http status code 200 if onboarding succeeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HttpStatusCode'
      description: 'After calling get-arm-to-onboard-resources-account-activity API and creating the

        required resources in Azure using the ARM template,

        need to onboard the storages and the subscriptions to Intelligence.'
  /v2/intelligence/azure/onboarding-network-traffic:
    post:
      tags:
      - Azure
      summary: Azure Network Traffic New Centralized Storage Onboarding
      operationId: Azure_AzureNetworkTrafficNewCentralizedStorageOnboarding_post_/v2/intelligence/azure/onboarding-network-traffic
      requestBody:
        x-name: model
        description: All required details to be onboarded to Intelligence Network Traffic
        content:
          application/json:
            schema:
              type: object
        required: true
        x-position: 1
      responses:
        '200':
          description: Http status code 200 if onboarding succeded
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/HttpStatusCode'
      description: After calling get-arm-to-onboard-resources-network-traffic-centralized API and creating the required resources
        in Azure using the ARM template, need to onboard the storages and the subscriptions to Intelligence.
  /v2/intelligence/azure/get-arm-to-onboard-resources-network-traffic-centralized:
    post:
      tags:
      - Azure
      summary: Get Arm To Onboard Resources Network Traffic Centralized
      operationId: Azure_GetArmToOnboardResourcesNetworkTrafficCentralized_post_/v2/intelligence/azure/get-arm-to-onboard-resources-network-traffic-centralized
      requestBody:
        x-name: data
        description: The data that going to be onboarded to Intelligence Network Traffic.
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CentralizedNetworkTrafficArmApiRequest'
        required: true
        x-position: 1
      responses:
        '200':
          description: Http status code 200, ARM URL if succeeded and warnings list
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ArmApiResponseDetails'
      description: 'Onboard Centralized Network Traffic for your Azure environment. The function creates an ARM template that
        you need to run in your Azure environment.

        The function returns the url of the ARM template.

        The Azure environment must already be onboarded to CloudGuard.

        Please follow the Intelligence onboarding "Prerequisites" screen on the CloudGuard portal.'
  /v2/intelligence/azure/get-arm-to-onboard-resources-account-activity:
    post:
      tags:
      - Azure
      summary: Get Arm To Onboard Resources Account Activity
      operationId: Azure_GetArmToOnboardResourcesAccountActivity_post_/v2/intelligence/azure/get-arm-to-onboard-resources-account-activity
      requestBody:
        x-name: data
        description: The data that going to be onboarded to Intelligence Account Activity.
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AccountActivityArmApiRequest'
        required: true
        x-position: 1
      responses:
        '200':
          description: Http status code 200, ARM URL if succeeded and warnings list
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ArmApiResponseDetails'
      description: 'Onboard Account Activity for your Azure environment.

        The function creates an ARM template that you need to run in your Azure environment.

        The Azure environment must already be onboarded to CloudGuard.

        Make the first call to get the ARM: https://docs.cgn.portal.checkpoint.com/reference/azure_getarmtoonboardresourcesaccountactivity_post_v2intelligenceazureget-arm-to-onboard-resources-account-activity.

        Make sure that {{returnJsonUrl }} is set to false.

        The function returns the URL of the ARM template.

        Use the ARM URL to run the ARM deployment

        When the deployment is finished, make the second API call to onboard the account and the storages to the databases:

        https://docs.cgn.portal.checkpoint.com/reference/azure_azureaccountactivitynewstorageonboarding_post_v2intelligenceazureonboarding-account-activity

        Please follow the Intelligence onboarding "Prerequisites" screen on the CloudGuard portal.'
  /v2/intelligence/azure/magellan-azure-flowlogs-onboarding-with-arm:
    post:
      tags:
      - Azure
      summary: Azure Network Traffic Nsg Onboarding With Arm
      operationId: Azure_AzureNetworkTrafficNsgOnboardingWithArm_post_/v2/intelligence/azure/magellan-azure-flowlogs-onboarding-with-arm
      requestBody:
        x-name: model
        description: Block indicating the data to be onboarded to Intelligence Network Traffic
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/MagellanAzureNetworkActivityOnboardingArmModelForApi'
        required: true
        x-position: 1
      responses:
        '200':
          description: ARM url if onboarding succeded
          content:
            application/json:
              schema:
                type: string
      description: 'This API is for onboarding azure from the context of NSG, to onboard storage account use: /v2/intelligence/azure/get-arm-to-onboard-resources-network-traffic-centralized

        Onboard Network Traffic for your Azure environment. Using NSG information, the function creates an ARM template that
        you need to run in your Azure environment.

        The function returns the url of the ARM template.

        The Azure environment must already be onboarded to CloudGuard.

        Please follow the Intelligence onboarding "Prerequisites" screen on the CloudGuard portal.'
  /v2/remediation/trigger:
    post:
      tags:
      - Remediation
      summary: Post Trigger Remediation
      operationId: Remediation_PostTriggerRemediation_post_/v2/remediation/trigger
      requestBody:
        x-name: remediationModel
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/RemediationExecuteRequestModel'
        required: true
        x-position: 1
      responses:
        '200':
          description: Status of the batch report progress
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/RemediationExecuteResponseModel'
      description: External api execute command for remediation
  /v2/remediation/status/{executionId}:
    get:
      tags:
      - Remediation
      summary: Get Status Remediation
      operationId: Remediation_GetStatusRemediation_get_/v2/remediation/status/{executionId}
      parameters:
      - name: executionId
        in: path
        required: true
        schema:
          type: string
        x-position: 1
      responses:
        '200':
          description: Status of the Remediation progress
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/StatusGeneralDetails'
      description: Get status for remediation
  /v2/reports:
    get:
      tags:
      - Reports
      summary: Get Reports
      operationId: Reports_GetReports_get_/v2/reports
      responses:
        '200':
          description: Existing Reports Details
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/FullReportResponseModel'
      description: Get reports
    post:
      tags:
      - Reports
      summary: Create Report
      operationId: Reports_CreateReport_post_/v2/reports
      requestBody:
        x-name: item
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/BaseReportModel'
        required: true
        x-position: 1
      responses:
        '200':
          description: New Report Id
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ReportOperationResponse'
      description: Create Report
    delete:
      tags:
      - Reports
      summary: Delete Reports
      operationId: Reports_DeleteReports_delete_/v2/reports
      requestBody:
        x-name: item
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/DeleteReportRequest'
        required: true
        x-position: 1
      responses:
        '200':
          description: Deleted Count
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ReportOperationResponse'
      description: Delete Reports
  /v2/reports/{reportId}:
    put:
      tags:
      - Reports
      summary: Update Report
      operationId: Reports_UpdateReport_put_/v2/reports/{reportId}
      parameters:
      - name: reportId
        in: path
        required: true
        schema:
          type: integer
          format: int32
        x-position: 1
      requestBody:
        x-name: item
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/BaseReportModel'
        required: true
        x-position: 2
      responses:
        '200':
          description: New Report Id
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ReportOperationResponse'
      description: Update Report
tags:
- name: AccessLease
  description: Access Leases
- name: AccessLeaseInvitation
  description: Access Lease Invitations
- name: Account
- name: AccountLimitation
- name: AccountPollingInterval
- name: AccountRegistration
- name: AccountTrust
  description: "Allow you to define a trust between accounts in order to allow users in a certain account to make changes\
    \ and operation on another account.\nActions can be taken on a trustee account via a role which is defined on it. \nThe\
    \ role should be assumed by a user from the trusted account."
- name: Agent
- name: Agentless
  description: Agentless Workload Posture
- name: Alert
- name: AlibabaCloudAccount
  description: Alibaba Cloud Accounts
- name: Application
- name: Assessment
  description: Run and View Compliance Assessments
- name: AssessmentHistory
- name: AssessmentHistoryV2
  description: Compliance Assessment History
- name: Audit
  description: Audit logs
- name: Auth
- name: Aws Cloud Account
  description: Manage

# --- truncated at 32 KB (59 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cloudguard/refs/heads/main/openapi/cloudguard-intelligence-openapi.yml