CloudGuard

CloudGuard Workload Protection (CWPP) API

Workload protection - Kubernetes image assurance, admission control, runtime protection, agentless workload posture, serverless function protection and ShiftLeft/Code Security accounts. 168 operations across 124 paths.

GitHub OpenAPI

Operations 168

POST /v2/workload/agentless/aws/accounts/{id}/enable Enable Aws Account #
POST /v2/workload/agentless/azure/accounts/{id}/enable Enable Azure Account #
POST /v2/workload/agentless/aws/accounts/{id}/enableCentralizedAccount Add Aws Centralized Account #
POST /v2/workload/agentless/azure/accounts/{id}/enableCentralizedAccount Add Azure Centralized Account #
POST /v2/workload/agentless/aws/accounts/{id}/enableSubAccount Add Aws Sub Account #
POST /v2/workload/agentless/azure/accounts/{id}/enableSubAccount Add Azure Sub Account #
GET /v2/workload/agentless/{cloudProvider}/accounts/states Get Accounts States #
GET /v2/workload/agentless/{cloudProvider}/accounts/states/{id} Get Account State #
GET /v2/workload/agentless/{cloudProvider}/accounts/{id} Get Account #
PATCH /v2/workload/agentless/{cloudProvider}/accounts/{id}/settings Modify Account Settings #
PATCH /v2/workload/agentless/{cloudProvider}/accounts/{id}/centralizedAccountSettings Modify Centralized Account Settings #
DELETE /v2/workload/agentless/aws/accounts/{id} Disable Aws Account #
DELETE /v2/workload/agentless/azure/accounts/{id} Disable Azure Account #
GET /v2/workload/agentless/aws/instances/{id} Get Workload #
POST /v2/workload/agentless/aws/accounts/{id}/generate-onboarding-data Generate Aws Onboarding Data #
POST /v2/workload/agentless/azure/accounts/{id}/generate-onboarding-data Generate Azure Onboarding Data #
GET /v2/workload/agentless/azure/accounts/{id}/offboarding Get Azure Offboarding Data #
GET /v2/workload/agentless/{cloudProvider}/accounts/{id}/onboarding/checkForUpdate Check For Onboarding Update #
GET /v2/workload/agentless/azure/accounts/{id}/centralizedAccounts Get Azure Centralized Accounts #
GET /v2/workload/agentless/accountSettings Get Tenant Settings #
PATCH /v2/workload/agentless/accountSettings Modify Tenant Settings #
GET /v2/protegoStatistics/invocations Get #
POST /v2/serverless/accounts Post Account #
GET /v2/serverless/accounts/{cloudAccountId} Get Account #
PATCH /v2/serverless/accounts/{cloudAccountId} Put Account #
PATCH /v2/serverless/{cloudProvider}/accounts/{cloudAccountId} Put Account #
GET /v2/serverless/accounts/states Get Accounts State #
GET /v2/serverless/{cloudProvider}/accounts/states Get Accounts State #
GET /v2/serverless/accounts/states/{cloudAccountId} Get Account State #
GET /v2/serverless/{cloudProvider}/accounts/states/{cloudAccountId} Get Account State #
GET /v2/serverless/accounts/{cloudAccountId}/exclusions Get Account Exclusions #
POST /v2/serverless/accounts/{cloudAccountId}/exclusions Post Exclusion #
GET /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/exclusions Get Account Exclusions #
POST /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/exclusions Post Exclusion #
GET /v2/serverless/accounts/{cloudAccountId}/rules Get Account Rules #
POST /v2/serverless/accounts/{cloudAccountId}/rules Post Rule #
GET /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/rules Get Account Rules #
POST /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/rules Post Rule #
GET /v2/serverless/accounts/{cloudAccountId}/rules/{ruleId} Get Rule #
PUT /v2/serverless/accounts/{cloudAccountId}/rules/{ruleId} Put Rule #
DELETE /v2/serverless/accounts/{cloudAccountId}/rules/{ruleId} Delete Rule #
GET /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/rules/{ruleId} Get Rule #
PUT /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/rules/{ruleId} Put Rule #
DELETE /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/rules/{ruleId} Delete Rule #
GET /v2/serverless/accounts/{cloudAccountId}/exclusions/{exclusionId} Get Exclusion #
PUT /v2/serverless/accounts/{cloudAccountId}/exclusions/{exclusionId} Put Exclusion #
DELETE /v2/serverless/accounts/{cloudAccountId}/exclusions/{exclusionId} Delete Exclusion #
GET /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/exclusions/{exclusionId} Get Exclusion #
PUT /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/exclusions/{exclusionId} Put Exclusion #
DELETE /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/exclusions/{exclusionId} Delete Exclusion #
GET /v2/serverless/aws/accounts/{cloudAccountId}/missingPermissions Get Account Missing Permissions #
PUT /v2/serverless/aws/accounts/{cloudAccountId}/missingPermissions/validate Validate Account Missing Permissions #
GET /v2/serverless/functions/{id} Get Function #
GET /v2/serverless/aws/functions/{id} Get Function #
GET /v2/serverless/azure/functions/{id} Get Azure Function App #
GET /v2/serverless/kubernetes/functions/{id} Get Kubernetes Pod Group #
POST /v2/serverless/aws/functions/{id}/addLogSubscription Function Add Log Subscription #
PATCH /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/functions Put Functions #
PATCH /v2/serverless/{cloudProvider}/functions/{id} Put Function #
PATCH /v2/serverless/functions/{id}/fsp Put Function Auto Fsp #
PATCH /v2/serverless/functions/{id}/fspMode Put Function Fsp Block #
PATCH /v2/serverless/{cloudProvider}/functions/{id}/fspMode Put Function Fsp Block #
GET /v2/serverless/functions/{id}/whitelist Get Function Whitelist #
GET /v2/serverless/{cloudProvider}/functions/{id}/whitelist Get Function Whitelist #
GET /v2/serverless/azure/functions/{id}/whitelist/{functionName} Get Azure Function Whitelist #
GET /v2/serverless/functions/{id}/exclusions Get Function Exclusions #
GET /v2/serverless/{cloudProvider}/functions/{id}/exclusions Get Function Exclusions #
GET /v2/serverless/functions/{id}/rules Get Function Rules #
GET /v2/serverless/{cloudProvider}/functions/{id}/rules Get Function Rules #
GET /v2/serverless/fsp/versions Get Fsp Versions #
GET /v2/serverless/workloadProtection/runtimes Get Supported Runtimes #
GET /v2/serverless/policy/{id} Get #
DELETE /v2/serverless/policy/{id} Delete #
GET /v2/serverless/policy Get #
PUT /v2/serverless/policy Put #
POST /v2/serverless/policy Post #
GET /v2/ShiftLeft/{url} Get #
GET /v2/ShiftLeft/blades Get Blades #
GET /v2/ShiftLeft/blades/{os}/{arch} Get Blades Os #
GET /v2/workload/accountSetting Get Account Settings #
PUT /v2/workload/accountSetting Set Account Settings #
PATCH /v2/workload/accountSetting Update Account Settings #
GET /v2/kubernetes/podGroup/daemonSet/{id}/podList Get Daemon Set Pod List #
GET /v2/kubernetes/podGroup/deployment/{id}/podList Get Deployment Pod List #
GET /v2/kubernetes/podGroup/replicaSet/{id}/podList Get Replica Set Pod List #
GET /v2/kubernetes/podGroup/statefulSet/{id}/podList Get Stateful Set Pod List #
GET /v2/kubernetes/podGroup/pod/{id}/images Get Pod Images #
GET /v2/kubernetes/podGroup/cronJob/{id}/images Get Cron Job Images #
GET /v2/kubernetes/podGroup/daemonSet/{id}/images Get Daemon Set Images #
GET /v2/kubernetes/podGroup/deployment/{id}/images Get Deployment Images #
GET /v2/kubernetes/podGroup/replicaSet/{id}/images Get Replica Set Images #
GET /v2/kubernetes/podGroup/statefulSet/{id}/images Get Stateful Set Images #
GET /v2/kubernetes/imageAssurance/image Get Image #
GET /v2/kubernetes/imageAssurance/image/vulnerabilities Get Image Vulnerabilities #
GET /v2/kubernetes/imageAssurance/image/podGroups Get Pod Groups #
GET /v2/kubernetes/imageAssurance/account/{clusterId}/podsImages Get Cluster Pod And Images #
GET /v2/kubernetes/imageAssurance/policy/{id} Get #
DELETE /v2/kubernetes/imageAssurance/policy/{id} Delete #
GET /v2/kubernetes/imageAssurance/policy Get All #
POST /v2/kubernetes/imageAssurance/policy Post #
PUT /v2/kubernetes/imageAssurance/policy Put #
GET /v2/workload/imageAssurance/images Get Workload Images By Dome9 Id #
GET /v2/workload/imageAssurance/image Get Image #
GET /v2/workload/imageAssurance/image/workloads Get Image Workloads By Image Id #
GET /v2/workload/imageAssurance/EcsTask/Images Get Task Images #
GET /v2/workload/imageAssurance/EcsService/Images Get Service Images #
GET /v2/workload/imageAssurance/EcsCluster/Images Get Cluster Images #
POST /v2/workload/imageAssurance/scanImage Scan Image #
POST /v2/workload/imageAssurance/scanEnvironment/{environmentId}/all Scan Environment All #
POST /v2/workload/imageAssurance/scanEnvironment/{environmentId}/failed Scan Environment Failed #
GET /v2/ShiftLeftAccount Get All #
POST /v2/ShiftLeftAccount Post #
GET /v2/ShiftLeftAccount/{id} Get #
DELETE /v2/ShiftLeftAccount/{id} Delete #
PUT /v2/ShiftLeftAccount/{id}/AccountName Update Account Name #
PUT /v2/ShiftLeftAccount/{id}/accountDescription Update Account Description #
DELETE /v2/ShiftLeftAccount/{id}/DeleteForce Delete Force #
PUT /v2/ShiftLeftAccount/{id}/organizationalUnit Update Organizational Id #
PUT /v2/ShiftLeftAccount/organizationalUnit/move Move Cloud Accounts To Organizational Unit #
PUT /v2/ShiftLeftAccount/organizationalUnit/moveAll Move All Cloud Accounts To Organizational Unit #
POST /v2/ShiftLeftAccount/organizationalUnit/attach Post Attach Multi #
GET /v2/ShiftLeftPolicy/{id} Get #
GET /v2/ShiftLeftPolicy Get All #
POST /v2/ShiftLeftPolicy Post #
PUT /v2/ShiftLeftPolicy Put #
DELETE /v2/ShiftLeftPolicy Delete #
GET /v2/kubernetes/admissionControl/policy/{id} Get Policy #
DELETE /v2/kubernetes/admissionControl/policy/{id} Delete Policy #
GET /v2/kubernetes/admissionControl/policy Get Policy All #
POST /v2/kubernetes/admissionControl/policy Post Policy #
PUT /v2/kubernetes/admissionControl/policy Put Policy #
GET /v2/kubernetes/admissionControl/policiesSummary/{id} Get Agent Policies Summary #
POST /v2/kubernetes/admissionControl/validation/validateAssessment Validate Assessment #
POST /v2/kubernetes/admissionControl/validation/validateRule Validate Rule #
POST /v2/kubernetes/admissionControl/validation/validateHistorical Validate Historical #
GET /v2/kubernetes/admissionControl/exclusions Get Exclusions #
POST /v2/kubernetes/admissionControl/exclusions Post Exclusion #
DELETE /v2/kubernetes/admissionControl/exclusions Delete Exclusion #
PUT /v2/kubernetes/admissionControl/exclusions Put Exclusion #
GET /v2/kubernetes/admissionControl/exclusions/{id} Get Exclusion #
GET /v2/kubernetes/admissionControl/imageAdmissionExclusion/{id} Get #
DELETE /v2/kubernetes/admissionControl/imageAdmissionExclusion/{id} Delete #
GET /v2/kubernetes/admissionControl/imageAdmissionExclusion Get All #
PUT /v2/kubernetes/admissionControl/imageAdmissionExclusion Put #
POST /v2/kubernetes/admissionControl/imageAdmissionExclusion Post #
GET /v2/kubernetes/imageAssurance/admissionExclusion/{id} Get #
DELETE /v2/kubernetes/imageAssurance/admissionExclusion/{id} Delete #
GET /v2/kubernetes/imageAssurance/admissionExclusion Get All #
PUT /v2/kubernetes/imageAssurance/admissionExclusion Put #
POST /v2/cloudAccount/ecs/{cloudAccountId} Enable Or Disable Ecs Image Scan #
GET /v2/cloudAccount/ecs/{cloudAccountId} Get Ecs Image Scan Config #
GET /v2/vulnerability/policy/{id} Get #
GET /v2/vulnerability/policy Get All #
POST /v2/vulnerability/policy Post #
PUT /v2/vulnerability/policy Put #
DELETE /v2/vulnerability/policy Delete #
GET /v2/sbom/formats SBOM Format Versions #
GET /v2/sbom/export ExportSBOM #
GET /v2/vulnerability/scan-results Get Scan Results #
GET /v2/vulnerability/scan-results-metadata Get Scan Results Metadata #
GET /v2/vulnerability/scan-metadata Get Scan Metadata #
GET /v2/vulnerability/scan Get Scan #
GET /v2/vulnerability/scan-results-export-csvs Export Scan Results To Csv #
GET /v2/vulnerability/scan-export-csvs Export Scan To Csv #
GET /v2/vulnerability/exclusions Get All Exclusions Vulnerabilities #
POST /v2/vulnerability/exclusions Create Exclusions Vulnerabilities #
PUT /v2/vulnerability/exclusions Update Exclusion #
POST /v2/vulnerability/exclusions/bulk-delete Delete Exclusions #

Documentation

📖
Documentation
https://docs.cgn.portal.checkpoint.com/reference
📖
APIReference
https://docs.cgn.portal.checkpoint.com/reference/introduction
📖
Authentication
https://docs.cgn.portal.checkpoint.com/reference/authentication

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/cloudguard/refs/heads/main/openapi/cloudguard-workload-protection-openapi.yml

Other Resources

🔗
Overlay
https://raw.githubusercontent.com/api-evangelist/cloudguard/refs/heads/main/overlays/cloudguard-workload-protection-overlay.yaml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/cloudguard-workload-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

cloudguard-workload-protection-openapi.yml Raw ↑ 
info:
  title: Workload Protection
  version: v2
openapi: 3.0.0
servers:
- url: https://api.dome9.com/
  description: US region
- url: https://api.{region}.dome9.com/
  description: Other regions
  variables:
    region:
      enum:
      - eu1
      - ap1
      - ap2
      - ap3
      - cace1
      default: eu1
paths:
  /v2/workload/agentless/aws/accounts/{id}/enable:
    post:
      tags:
      - Agentless
      summary: Enable Aws Account
      operationId: Agentless_EnableAwsAccount_post_/v2/workload/agentless/aws/accounts/{id}/enable
      parameters:
      - name: id
        in: path
        description: Cloud account Id (CloudGuard/external Id)
        required: true
        schema:
          type: string
      - name: shouldCreatePolicy
        in: query
        description: A flag indicating weather to create a default policy
        required: false
        schema:
          type: boolean
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAwsAccountRequestBody'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAwsAccountRequestBody'
        required: true
      description: Enable AWP AWS account
  /v2/workload/agentless/azure/accounts/{id}/enable:
    post:
      tags:
      - Agentless
      summary: Enable Azure Account
      operationId: Agentless_EnableAzureAccount_post_/v2/workload/agentless/azure/accounts/{id}/enable
      parameters:
      - name: id
        in: path
        description: Cloud account Id (CloudGuard/subscription Id)
        required: true
        schema:
          type: string
      - name: shouldCreatePolicy
        in: query
        description: A flag indicating weather to create a default policy
        required: false
        schema:
          type: boolean
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAzureAccountRequestBody'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAzureAccountRequestBody'
        required: true
      description: Enable AWP Azure account
  /v2/workload/agentless/aws/accounts/{id}/enableCentralizedAccount:
    post:
      tags:
      - Agentless
      summary: Add Aws Centralized Account
      operationId: Agentless_AddAwsCentralizedAccount_post_/v2/workload/agentless/aws/accounts/{id}/enableCentralizedAccount
      parameters:
      - name: id
        in: path
        description: Cloud account Id (CloudGuard/external Id)
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAwsCentralizedAccountRequestBody'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAwsCentralizedAccountRequestBody'
        required: true
      description: Add AWP AWS Centralized account
  /v2/workload/agentless/azure/accounts/{id}/enableCentralizedAccount:
    post:
      tags:
      - Agentless
      summary: Add Azure Centralized Account
      operationId: Agentless_AddAzureCentralizedAccount_post_/v2/workload/agentless/azure/accounts/{id}/enableCentralizedAccount
      parameters:
      - name: id
        in: path
        description: Cloud account Id (CloudGuard/external Id)
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAzureCentralizedAccountRequestBody'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAzureCentralizedAccountRequestBody'
        required: true
      description: Add AWP Azure Centralized account
  /v2/workload/agentless/aws/accounts/{id}/enableSubAccount:
    post:
      tags:
      - Agentless
      summary: Add Aws Sub Account
      operationId: Agentless_AddAwsSubAccount_post_/v2/workload/agentless/aws/accounts/{id}/enableSubAccount
      parameters:
      - name: id
        in: path
        description: Cloud account Id (CloudGuard/external Id)
        required: true
        schema:
          type: string
      - name: shouldCreatePolicy
        in: query
        description: A flag indicating weather to create a default policy
        required: false
        schema:
          type: boolean
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAwsSubAccountRequestBody'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAwsSubAccountRequestBody'
        required: true
      description: Add AWP AWS Sub account
  /v2/workload/agentless/azure/accounts/{id}/enableSubAccount:
    post:
      tags:
      - Agentless
      summary: Add Azure Sub Account
      operationId: Agentless_AddAzureSubAccount_post_/v2/workload/agentless/azure/accounts/{id}/enableSubAccount
      parameters:
      - name: id
        in: path
        description: Cloud account Id (CloudGuard/external Id)
        required: true
        schema:
          type: string
      - name: shouldCreatePolicy
        in: query
        description: A flag indicating weather to create a default policy
        required: false
        schema:
          type: boolean
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAzureSubAccountRequestBody'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AddAgentlessAzureSubAccountRequestBody'
        required: true
      description: Add AWP Azure Sub account
  /v2/workload/agentless/{cloudProvider}/accounts/states:
    get:
      tags:
      - Agentless
      summary: Get Accounts States
      operationId: Agentless_GetAccountsStates_get_/v2/workload/agentless/{cloudProvider}/accounts/states
      parameters:
      - name: cloudProvider
        in: path
        description: Cloud provider
        required: true
        schema:
          type: string
          enum:
          - aws
          - azure
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AccountStateViewModel'
      description: Get current AWP accounts states
  /v2/workload/agentless/{cloudProvider}/accounts/states/{id}:
    get:
      tags:
      - Agentless
      summary: Get Account State
      operationId: Agentless_GetAccountState_get_/v2/workload/agentless/{cloudProvider}/accounts/states/{id}
      parameters:
      - name: id
        in: path
        description: Cloud account Id (CloudGuard/external Id)
        required: true
        schema:
          type: string
      - name: cloudProvider
        in: path
        description: Cloud provider
        required: true
        schema:
          type: string
          enum:
          - aws
          - azure
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AccountStateViewModel'
      description: Get AWP account state
  /v2/workload/agentless/{cloudProvider}/accounts/{id}:
    get:
      tags:
      - Agentless
      summary: Get Account
      operationId: Agentless_GetAccount_get_/v2/workload/agentless/{cloudProvider}/accounts/{id}
      parameters:
      - name: id
        in: path
        description: Cloud account Id (CloudGuard/external Id)
        required: true
        schema:
          type: string
      - name: cloudProvider
        in: path
        description: Cloud provider
        required: true
        schema:
          type: string
          enum:
          - aws
          - azure
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AccountViewModel'
      description: Get AWP account scanner configuration
  /v2/workload/agentless/{cloudProvider}/accounts/{id}/settings:
    patch:
      tags:
      - Agentless
      summary: Modify Account Settings
      operationId: Agentless_ModifyAccountSettings_patch_/v2/workload/agentless/{cloudProvider}/accounts/{id}/settings
      parameters:
      - name: id
        in: path
        description: Cloud account Id (CloudGuard/external Id)
        required: true
        schema:
          type: string
      - name: cloudProvider
        in: path
        description: Cloud provider
        required: true
        schema:
          type: string
          enum:
          - aws
          - azure
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessAccountSettingsViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessAccountSettingsViewModel'
        required: true
      description: Modify a single AWP account scanner settings (supported for inAccount and Saas scan mode)
  /v2/workload/agentless/{cloudProvider}/accounts/{id}/centralizedAccountSettings:
    patch:
      tags:
      - Agentless
      summary: Modify Centralized Account Settings
      operationId: Agentless_ModifyCentralizedAccountSettings_patch_/v2/workload/agentless/{cloudProvider}/accounts/{id}/centralizedAccountSettings
      parameters:
      - name: id
        in: path
        description: Cloud account Id (CloudGuard/external Id)
        required: true
        schema:
          type: string
      - name: cloudProvider
        in: path
        description: Cloud provider
        required: true
        schema:
          type: string
          enum:
          - aws
          - azure
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessCentralizedAccountSettingsViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessCentralizedAccountSettingsViewModel'
        required: true
      description: Modify a single AWP centralized account scanner settings
  /v2/workload/agentless/aws/accounts/{id}:
    delete:
      tags:
      - Agentless
      summary: Disable Aws Account
      operationId: Agentless_DisableAwsAccount_delete_/v2/workload/agentless/aws/accounts/{id}
      parameters:
      - name: id
        in: path
        description: Cloud account Id (CloudGuard/external Id)
        required: true
        schema:
          type: string
      - name: forceDelete
        in: query
        description: If 'True', AWP will be disabled and the API will skip validating resource removal from the customer account.
        required: false
        schema:
          type: boolean
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      description: Disable AWS account
  /v2/workload/agentless/azure/accounts/{id}:
    delete:
      tags:
      - Agentless
      summary: Disable Azure Account
      operationId: Agentless_DisableAzureAccount_delete_/v2/workload/agentless/azure/accounts/{id}
      parameters:
      - name: id
        in: path
        description: Cloud account Id (CloudGuard/external Id)
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      description: Disable Azure account
  /v2/workload/agentless/aws/instances/{id}:
    get:
      tags:
      - Agentless
      summary: Get Workload
      operationId: Agentless_GetWorkload_get_/v2/workload/agentless/aws/instances/{id}
      parameters:
      - name: id
        in: path
        description: Instance Id
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessInstanceViewModel'
      description: Get AWP workload scan details
  /v2/workload/agentless/aws/accounts/{id}/generate-onboarding-data:
    post:
      tags:
      - Agentless
      summary: Generate Aws Onboarding Data
      operationId: Agentless_GenerateAwsOnboardingData_post_/v2/workload/agentless/aws/accounts/{id}/generate-onboarding-data
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessAwsOnboardingDataViewModel'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.GenerateAgentlessAwsOnboardingDataRequest'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.GenerateAgentlessAwsOnboardingDataRequest'
        required: true
      description: Generate Aws onboarding data
  /v2/workload/agentless/azure/accounts/{id}/generate-onboarding-data:
    post:
      tags:
      - Agentless
      summary: Generate Azure Onboarding Data
      operationId: Agentless_GenerateAzureOnboardingData_post_/v2/workload/agentless/azure/accounts/{id}/generate-onboarding-data
      parameters:
      - name: id
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessAzureOnboardingDataViewModel'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.GenerateAgentlessAzureOnboardingDataRequest'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.GenerateAgentlessAzureOnboardingDataRequest'
        required: true
      description: Generate Azure onboarding data
  /v2/workload/agentless/azure/accounts/{id}/offboarding:
    get:
      tags:
      - Agentless
      summary: Get Azure Offboarding Data
      operationId: Agentless_GetAzureOffboardingData_get_/v2/workload/agentless/azure/accounts/{id}/offboarding
      parameters:
      - name: id
        in: path
        description: Cloud account Id (CloudGuard/external Id)
        required: true
        schema:
          type: string
      - name: centralizedId
        in: query
        description: In case of inAccountSub, the account id of the centralized account
        required: false
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessAzureOffboardingDataViewModel'
      description: Get Azure offboarding data
  /v2/workload/agentless/{cloudProvider}/accounts/{id}/onboarding/checkForUpdate:
    get:
      tags:
      - Agentless
      summary: Check For Onboarding Update
      operationId: Agentless_CheckForOnboardingUpdate_get_/v2/workload/agentless/{cloudProvider}/accounts/{id}/onboarding/checkForUpdate
      parameters:
      - name: id
        in: path
        description: Cloud account Id (CloudGuard/external Id)
        required: true
        schema:
          type: string
      - name: cloudProvider
        in: path
        description: Cloud provider
        required: true
        schema:
          type: string
          enum:
          - aws
          - azure
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessAwsValidateStackDataViewModel'
      description: Check if the AWP account needs to be updated
  /v2/workload/agentless/azure/accounts/{id}/centralizedAccounts:
    get:
      tags:
      - Agentless
      summary: Get Azure Centralized Accounts
      operationId: Agentless_GetAzureCentralizedAccounts_get_/v2/workload/agentless/azure/accounts/{id}/centralizedAccounts
      parameters:
      - name: id
        in: path
        description: Cloud account Id (CloudGuard/external Id)
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Dome9.Web.Api.Agentless.CentralizedAzureAccountViewModel'
      description: Get Azure centralized accounts data
  /v2/workload/agentless/accountSettings:
    get:
      tags:
      - Agentless
      summary: Get Tenant Settings
      operationId: Agentless_GetTenantSettings_get_/v2/workload/agentless/accountSettings
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessSettingsViewModel'
      description: Get all AWP accounts scanner settings
    patch:
      tags:
      - Agentless
      summary: Modify Tenant Settings
      operationId: Agentless_ModifyTenantSettings_patch_/v2/workload/agentless/accountSettings
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessSettingsViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Agentless.AgentlessSettingsViewModel'
        required: true
      description: Modify all AWP accounts scanner settings
  /v2/protegoStatistics/invocations:
    get:
      tags:
      - Protego Statistics
      operationId: ProtegoStatistics_Get_get_/v2/protegoStatistics/invocations
      parameters:
      - name: startDate
        in: query
        required: true
        schema:
          type: string
          format: date-time
      - name: endDate
        in: query
        required: true
        schema:
          type: string
          format: date-time
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Falconetix.Model.Serverless.Protego.ProtegoInvocationsEntity'
      description: ''
      summary: Get
  /v2/serverless/accounts:
    post:
      tags:
      - Serverless
      summary: Post Account
      operationId: Serverless_PostAccount_post_/v2/serverless/accounts
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
        '201':
          description: Created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessAccountViewModel'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessAddAccountRequest'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessAddAccountRequest'
        required: true
      description: Enable Serverless protection
  /v2/serverless/accounts/{cloudAccountId}:
    get:
      tags:
      - Serverless
      operationId: Serverless_GetAccount_get_/v2/serverless/accounts/{cloudAccountId}
      parameters:
      - name: cloudAccountId
        in: path
        required: true
        schema:
          type: string
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessAccountViewModel'
      description: ''
      summary: Get Account
    patch:
      tags:
      - Serverless
      summary: Put Account
      operationId: Serverless_PutAccount_patch_/v2/serverless/accounts/{cloudAccountId}
      parameters:
      - name: cloudAccountId
        in: path
        required: true
        schema:
          type: string
      - name: cloudProvider
        in: query
        required: false
        schema:
          type: string
          enum:
          - aws
          - azure
          - kubernetes
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessPutAccountViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessPutAccountViewModel'
        required: true
      description: Update policy config or add FSP for an AWS Cloud account
  /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}:
    patch:
      tags:
      - Serverless
      summary: Put Account
      operationId: Serverless_PutAccount_patch_/v2/serverless/{cloudProvider}/accounts/{cloudAccountId}
      parameters:
      - name: cloudAccountId
        in: path
        required: true
        schema:
          type: string
      - name: cloudProvider
        in: path
        required: true
        schema:
          type: string
          enum:
          - aws
          - azure
          - kubernetes
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessPutAccountViewModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessPutAccountViewModel'
        required: true
      description: Update policy config or add FSP for an AWS Cloud account
  /v2/serverless/accounts/states:
    get:
      tags:
      - Serverless
      operationId: Serverless_GetAccountsState_get_/v2/serverless/accounts/states
      parameters:
      - name: cloudProvider
        in: query
        required: false
        schema:
          type: string
          enum:
          - aws
          - azure
          - kubernetes
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessAccountStatusViewModel'
      description: ''
      summary: Get Accounts State
  /v2/serverless/{cloudProvider}/accounts/states:
    get:
      tags:
      - Serverless
      operationId: Serverless_GetAccountsState_get_/v2/serverless/{cloudProvider}/accounts/states
      parameters:
      - name: cloudProvider
        in: path
        required: true
        schema:
          type: string
          enum:
          - aws
          - azure
          - kubernetes
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessAccountStatusViewModel'
      description: ''
      summary: Get Accounts State
  /v2/serverless/accounts/states/{cloudAccountId}:
    get:
      tags:
      - Serverless
      operationId: Serverless_GetAccountState_get_/v2/serverless/accounts/states/{cloudAccountId}
      parameters:
      - name: cloudAccountId
        in: path
        required: true
        schema:
          type: string
      - name: cloudProvider
        in: query
        required: false
        schema:
          type: string
          enum:
          - aws
          - azure
          - kubernetes
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessAccountStatusViewModel'
      description: ''
      summary: Get Account State
  /v2/serverless/{cloudProvider}/accounts/states/{cloudAccountId}:
    get:
      tags:
      - Serverless
      operationId: Serverless_GetAccountState_get_/v2/serverless/{cloudProvider}/accounts/states/{cloudAccountId}
      parameters:
      - name: cloudAccountId
        in: path
        required: true
        schema:
          type: string
      - name: cloudProvider
        in: path
        required: true
        schema:
          type: string
          enum:
          - aws
          - azure
          - kubernetes
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessAccountStatusViewModel'
      description: ''
      summary: Get Account State
  /v2/serverless/accounts/{cloudAccountId}/exclusions:
    get:
      tags:
      - Serverless
      operationId: Serverless_GetAccountExclusions_get_/v2/serverless/accounts/{cloudAccountId}/exclusions
      parameters:
      - name: cloudAccountId
        in: path
        required: true
        schema:
          type: string
      - name: cloudProvider
        in: query
        required: false
        schema:
          type: string
          enum:
          - aws
          - azure
          - kubernetes
      - name: withPayloadObject
        in: query
        required: false
        schema:
          type: boolean
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionViewModel'
      description: ''
      summary: Get Account Exclusions
    post:
      tags:
      - Serverless
      operationId: Serverless_PostExclusion_post_/v2/serverless/accounts/{cloudAccountId}/exclusions
      parameters:
      - name: cloudAccountId
        in: path
        required: true
        schema:
          type: string
      - name: cloudProvider
        in: query
        required: false
        schema:
          type: string
          enum:
          - aws
          - azure
          - kubernetes
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionModel'
        required: true
      description: ''
      summary: Post Exclusion
  /v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/exclusions:
    get:
      tags:
      - Serverless
      operationId: Serverless_GetAccountExclusions_get_/v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/exclusions
      parameters:
      - name: cloudAccountId
        in: path
        required: true
        schema:
          type: string
      - name: cloudProvider
        in: path
        required: true
        schema:
          type: string
          enum:
          - aws
          - azure
          - kubernetes
      - name: withPayloadObject
        in: query
        required: false
        schema:
          type: boolean
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionViewModel'
      description: ''
      summary: Get Account Exclusions
    post:
      tags:
      - Serverless
      operationId: Serverless_PostExclusion_post_/v2/serverless/{cloudProvider}/accounts/{cloudAccountId}/exclusions
      parameters:
      - name: cloudAccountId
        in: path
        required: true
        schema:
          type: string
      - name: cloudProvider
        in: path
        required: true
        schema:
          type: string
          enum:
          - aws
          - azure
          - kubernetes
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: object
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionModel'
          application/x-www-form-urlencoded:
            schema:
              $ref: '#/components/schemas/Dome9.Web.Api.Serverless.ServerlessExclusionModel'
        required: true
      description: ''
      summary: Post Exclusion
  /v2/serverless/accounts/{cloudAccountId}/rules:
    get:
      tags:
      - Serverless
      operationId: Serverless_GetAccountRules_get_/v2/serverless/accounts/{cloudAccountId}/rules
      parameters:
      - name: cloudAccountId
        in: path
        required: true
        schema:
          type: string
      - name: cloudProvider
        in: query
        required: false
        schema:
          type: string
          enum:
          - aws
          - azure
          - kubernetes
      - name: withPayloadObject
        in: query
        required: false
        schema:
          type: boolean
      responses:
        '200':
          description: OK
          content:
            application/json:
              schema:
                type: array
                items:
                  $ref: '#/componen

# --- truncated at 32 KB (286 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/cloudguard/refs/heads/main/openapi/cloudguard-workload-protection-openapi.yml