Palo Alto Networks

Palo Alto Networks Data Security Dashboard API

The Data Security capabilities on Prisma Cloud enable you to discover and classify data stored in AWS S3 buckets and protect accidental exposure, misuse, or sharing of sensitive data. The data dashboard provides visibility into your S3 storage. To get started with data security, see [Prisma Cloud Data Security](https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-data-security.html).

GitHub OpenAPI
Business capability
Cybersecurity Management BC-620

Operations 7

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /dlp/api/v1/dashboard/alerts/aggregate Summarize total, public, sensitive and malware objects · Get Dashboard Alerts #
Ask an LLM
“How many of my cloud storage objects are public, sensitive, or malware?”
“What headline object counts does the data security dashboard show?”
Tell an agent
Get dashboard totals of public, sensitive and malware objects for accounts {accountIds} over {timeRange}.
Show the malware and sensitive object summary for account groups {accountGroupIds}.
POST /dlp/api/v1/dashboard/objects/aggregate/by-classification Top public object counts by classification · Get Dashboard Objects By Classification #
Ask an LLM
“Which data classifications have the most publicly exposed objects?”
“Can I limit how many classifications the public-object breakdown returns?”
Tell an agent
Show the top {limit} classifications by public object count for accounts {accountIds}.
Break down public objects by classification for {classifications} over {timeRange}.
POST /dlp/api/v1/dashboard/objects/aggregate/by-owner Object exposure counts per owner · Get Dashboard Objects By Owner #
Ask an LLM
“Which owners have the most exposed objects in my cloud storage?”
“What does object exposure look like per owner?”
Tell an agent
Show object exposure counts per owner for accounts {accountIds}.
List the top {limit} owners by exposed objects over {timeRange}.
POST /dlp/api/v1/dashboard/objects/aggregate/by-region Object counts by region and classification · Get Dashboard Objects By Region #
Ask an LLM
“Which cloud regions hold the most classified objects?”
“Can I see object counts by region split by classification?”
Tell an agent
Show object counts by region for account group {accountGroupNames}.
Break down objects per region by classification for accounts {accountIds}.
POST /dlp/api/v1/dashboard/objects/aggregate/sensitive-exposed Count sensitive objects by exposure · Get Dashboard Sensitive Objects #
Ask an LLM
“How many sensitive objects are exposed publicly versus kept private?”
“What's the count of sensitive-and-exposed objects on the dashboard?”
Tell an agent
Count sensitive objects by exposure for accounts {accountIds} over {timeRange}.
Show sensitive exposed object counts for classifications {classifications}.
POST /dlp/api/v1/dashboard/resources/aggregate/by-exposure Count resources and objects by exposure · Get Dashboard Resource Aggregate By Exposure #
Ask an LLM
“How many storage resources do I have, and how exposed are their objects?”
“What's the total resource count on the data security dashboard?”
Tell an agent
Get total resources and object exposure counts for accounts {accountIds}.
Show resource exposure totals for account groups {accountGroupIds} over {timeRange}.
POST /dlp/api/v1/dashboard/violations/aggregate List data security dashboard violations · Get Dashboard Violations #
Ask an LLM
“What data security policy violations show on my dashboard?”
“Can I see violations for just one account group in a time window?”
Tell an agent
List dashboard violations for accounts {accountIds} over {timeRange}.
Show the top {limit} data security violations for account group {accountGroupNames}.

Specifications

⚙
OpenAPI
https://artifacts.apis.io/palo-alto-networks/openapi/palo-alto-networks-data-security-dashboard-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-data-security-dashboard-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-data-security-dashboard-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  contact: {}
  description: 'Access Keys are a secure way to enable programmatic access to the Prisma Cloud API. By default, only

    the System Admin has API access and can enable API access for other administrators. If you have API access,

    you can create up to two access keys. Create an access key for a limited time period and regenerate your API

    keys periodically to minimize exposure and follow security best practices.'
  title: Prisma Cloud Access Keys API Overview Data Security…
  version: Latest
servers:
- url: https://api.prismacloud.io
- url: https://api2.prismacloud.io
- url: https://api3.prismacloud.io
- url: https://api4.prismacloud.io
tags:
- description: 'The Data Security capabilities on Prisma Cloud enable you to discover and classify data stored

    in AWS S3 buckets and protect accidental exposure, misuse, or sharing of sensitive data. The

    data dashboard provides visibility into your S3 storage.


    To get started with data security, see

    Prisma Cloud Data Security.'
  name: Data Security Dashboard
paths:
  /dlp/api/v1/dashboard/alerts/aggregate:
    post:
      description: Returns counts of total objects, public objects, sensitive objects, and malware.
      operationId: get-dashboard-alerts
      requestBody:
        content:
          application/json; charset=UTF-8:
            schema:
              $ref: '#/components/schemas/DLPDashboardFilterModel'
      responses:
        '200':
          content:
            application/json; charset=UTF-8:
              schema:
                items:
                  $ref: '#/components/schemas/KeyAndCountPair'
                type: array
          description: success
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Get Dashboard Alerts
      tags:
      - Data Security Dashboard
  /dlp/api/v1/dashboard/objects/aggregate/by-classification:
    post:
      description: Returns the top public object counts by classification, where the data profiles determine classification. The limit that you specify determines the number of objects.
      operationId: get-dashboard-object-by-classification
      requestBody:
        content:
          application/json; charset=UTF-8:
            schema:
              $ref: '#/components/schemas/DLPDashboardFilterModel'
      responses:
        '200':
          content:
            application/json; charset=UTF-8:
              schema:
                items:
                  $ref: '#/components/schemas/KeyAndCountPair'
                type: array
          description: success
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Get Dashboard Objects By Classification
      tags:
      - Data Security Dashboard
  /dlp/api/v1/dashboard/objects/aggregate/by-owner:
    post:
      description: Returns object counts by exposure for each owner.
      operationId: get-dashboard-object-by-owner
      requestBody:
        content:
          application/json; charset=UTF-8:
            schema:
              $ref: '#/components/schemas/DLPDashboardFilterModel'
      responses:
        '200':
          content:
            application/json; charset=UTF-8:
              schema:
                items:
                  $ref: '#/components/schemas/DLPTopNObjectsByOwnerViewModel'
                type: array
          description: success
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Get Dashboard Objects By Owner
      tags:
      - Data Security Dashboard
  /dlp/api/v1/dashboard/objects/aggregate/by-region:
    post:
      description: Lists regions with object counts and identifies object counts by classification. Data profiles determine classification.
      operationId: get-dashboard-object-by-region
      requestBody:
        content:
          application/json; charset=UTF-8:
            schema:
              $ref: '#/components/schemas/DLPDashboardFilterModel'
      responses:
        '200':
          content:
            application/json; charset=UTF-8:
              schema:
                items:
                  $ref: '#/components/schemas/DLPTopNObjectsByRegionViewModel'
                type: array
          description: success
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Get Dashboard Objects By Region
      tags:
      - Data Security Dashboard
  /dlp/api/v1/dashboard/objects/aggregate/sensitive-exposed:
    post:
      description: Lists object counts filtered by exposure and sensitivity.
      operationId: get-dashboard-object-sensitive
      requestBody:
        content:
          application/json; charset=UTF-8:
            schema:
              $ref: '#/components/schemas/DLPDashboardFilterModel'
      responses:
        '200':
          content:
            application/json; charset=UTF-8:
              schema:
                $ref: '#/components/schemas/DLPTotalSensitiveExposedObjectsViewModel'
          description: success
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Get Dashboard Sensitive Objects
      tags:
      - Data Security Dashboard
  /dlp/api/v1/dashboard/resources/aggregate/by-exposure:
    post:
      description: Returns the total number of resources as well as object counts filtered by exposure.
      operationId: get-dashboard-resource-by-exposure
      requestBody:
        content:
          application/json; charset=UTF-8:
            schema:
              $ref: '#/components/schemas/DLPDashboardFilterModel'
      responses:
        '200':
          content:
            application/json; charset=UTF-8:
              schema:
                $ref: '#/components/schemas/DLPTotalResourceByExposureViewModel'
          description: success
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Get Dashboard Resource Aggregate By Exposure
      tags:
      - Data Security Dashboard
  /dlp/api/v1/dashboard/violations/aggregate:
    post:
      description: List violations for the dashboard.
      operationId: get-dashboard-violations
      requestBody:
        content:
          application/json; charset=UTF-8:
            schema:
              $ref: '#/components/schemas/DLPDashboardFilterModel'
      responses:
        '200':
          content:
            application/json; charset=UTF-8:
              schema:
                items:
                  $ref: '#/components/schemas/KeyAndCountPair'
                type: array
          description: success
        '500':
          description: internal_error
      security:
      - x-redlock-auth: []
      summary: Get Dashboard Violations
      tags:
      - Data Security Dashboard
components:
  schemas:
    DLPObject:
      description: Model for DLPObject
      properties:
        classification:
          description: Key and count data
          items:
            $ref: '#/components/schemas/KeyAndCountPair'
          type: array
        total:
          description: Total
          format: int32
          type: integer
      type: object
    DLPTotalResourceByExposureViewModel:
      description: Model for DLP Resource Exposure
      properties:
        resources:
          allOf:
          - $ref: '#/components/schemas/DLPResource'
          - description: Resource Data
      type: object
    DLPDashboardFilterModel:
      description: Model for DLP Dashboard filters
      properties:
        accountGroupIds:
          description: List of cloud account group ids
          items:
            type: string
          type: array
        accountGroupNames:
          description: List of AWS account group names
          items:
            type: string
          type: array
        accountIds:
          description: List of cloud account ids
          items:
            type: string
          type: array
        classifications:
          description: List of Data classifications
          items:
            type: string
          type: array
        limit:
          description: Limit the records returned
          format: int32
          type: integer
        timeRange:
          allOf:
          - $ref: '#/components/schemas/TimeRangeConfigModel'
          - description: Time Range
      required:
      - accountGroupIds
      - accountGroupNames
      - accountIds
      - classifications
      - limit
      - timeRange
      type: object
    AbsoluteTimeRangeConfigModel:
      allOf:
      - $ref: '#/components/schemas/TimeRangeConfigModel'
      - description: Model for AbsoluteTimeRangeConfig
        properties:
          type:
            example: absolute
            type: string
          value:
            allOf:
            - $ref: '#/components/schemas/TimeModel'
            - description: Time range object
        required:
        - value
        type: object
    DLPResource:
      description: Model for DLP Resource
      properties:
        exposure:
          description: List of exposures and count
          items:
            $ref: '#/components/schemas/KeyAndCountPair'
          type: array
        total:
          description: Total number of resources
          format: int32
          type: integer
      type: object
    CountByExposure:
      description: Model for DLP Exposure count
      properties:
        conditional:
          description: Conditional exposure count
          format: int64
          type: integer
        private:
          description: Private exposure count
          format: int64
          type: integer
        public:
          description: Public exposure count
          format: int64
          type: integer
      type: object
    RelativeTimeDurationModel:
      description: Model for RelativeTimeDuration
      properties:
        amount:
          description: Number of time units
          format: int32
          type: integer
        unit:
          description: Time unit
          enum:
          - minute
          - hour
          - day
          - week
          - month
          - year
          type: string
      type: object
    DLPTotalSensitiveExposedObjectsViewModel:
      description: Model for Sensitive Exposed Objects
      properties:
        objects:
          allOf:
          - $ref: '#/components/schemas/DLPObject'
          - description: DLP Object data
      type: object
    DLPTopNObjectsByRegionViewModel:
      description: Model for DLP Object Region
      properties:
        classification:
          description: List of classification
          items:
            $ref: '#/components/schemas/KeyAndCountPair'
          type: array
        cloudType:
          description: Cloud Type
          type: string
        latitude:
          description: Latitude
          format: double
          type: number
        longitude:
          description: Longitude
          format: double
          type: number
        regionCode:
          description: Cloud region
          type: string
        regionName:
          description: Cloud region name
          type: string
      type: object
    ToNowTimeRangeConfigModel:
      allOf:
      - $ref: '#/components/schemas/TimeRangeConfigModel'
      - description: Model for ToNowTimeRangeConfig
        properties:
          value:
            description: Time range object
            enum:
            - MINUTE
            - HOUR
            - DAY
            - WEEK
            - MONTH
            - YEAR
            - EPOCH
            - LOGIN
            type: string
        type: object
    TimeRangeConfigModel:
      description: 'See the [Time Range Model](/prisma-cloud/api/cspm/api-time-range-model) for details.

        '
      discriminator:
        mapping:
          absolute: '#/components/schemas/AbsoluteTimeRangeConfigModel'
          relative: '#/components/schemas/RelativeTimeRangeConfigModel'
          to_now: '#/components/schemas/ToNowTimeRangeConfigModel'
        propertyName: type
      oneOf:
      - $ref: '#/components/schemas/RelativeTimeRangeConfigModel'
      - $ref: '#/components/schemas/AbsoluteTimeRangeConfigModel'
      - $ref: '#/components/schemas/ToNowTimeRangeConfigModel'
      properties:
        type:
          description: Time type
          type: string
      required:
      - type
      type: object
    RelativeTimeRangeConfigModel:
      allOf:
      - $ref: '#/components/schemas/TimeRangeConfigModel'
      - description: Model for RelativeTimeRangeConfig
        properties:
          relativeTimeType:
            description: Direction in which to count time. Default = BACKWARD
            enum:
            - BACKWARD
            - FORWARD
            type: string
          type:
            example: relative
            type: string
          value:
            allOf:
            - $ref: '#/components/schemas/RelativeTimeDurationModel'
            - description: Time range object
        required:
        - value
        type: object
    DLPTopNObjectsByOwnerViewModel:
      description: Model for DLP Object Owner
      properties:
        exposure:
          allOf:
          - $ref: '#/components/schemas/CountByExposure'
          - description: Object Exposure
        name:
          description: Object Name
          type: string
      type: object
    TimeModel:
      description: Model for Time
      properties:
        endTime:
          description: End timestamp
          format: int64
          type: integer
        startTime:
          description: Start timestamp
          format: int64
          type: integer
      type: object
    KeyAndCountPair:
      description: Model for Exposure
      properties:
        count:
          description: Count
          format: int32
          type: integer
        name:
          description: Name
          type: string
      type: object
  securitySchemes:
    x-redlock-auth:
      description: The x-redlock-auth value is a JSON Web Token (JWT).
      in: header
      name: x-redlock-auth
      type: apiKey