Palo Alto Networks

Palo Alto Networks Data Security Settings API

Prisma Cloud Data Security enables you to discover and classify data stored in AWS S3 buckets and protect accidental exposure, misuse, or sharing of sensitive data. You can use the data security settings APIs to manage data profiles, data patterns, and snippets. ### Error Handling As with other Prisma Cloud public API requests, Data Security Settings API requests return standard HTTP response codes. When more details are available, the error response includes the following: Property | Type | Description -----------| ---- | ----------- message | string | Error message name | string | Exception name detail | string | Exception details To get started with data security, see [Prisma Cloud Data Security](https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-data-security.html).

GitHub OpenAPI
Business capability
Cybersecurity Management BC-620

Operations 39

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /dlp/api/v1/resource-inventory/resources List S3 buckets in the data resource inventory · List Data Resources #
Ask an LLM
“Which of my onboarded AWS S3 buckets are in the Prisma Cloud data resource inventory?”
“How much data in each S3 bucket is eligible for a sensitive data scan?”
Tell an agent
List every S3 bucket resource in my data security resource inventory.
Show how much scan-eligible data each onboarded S3 bucket holds.
PUT /dlp/api/config/v2/resource Turn data scanning on or off for resources · Update Data Scan Config #
Ask an LLM
“Can I enable sensitive data scanning for a specific set of S3 resources through the v2 resource config?”
“How do I stop data security scans on buckets I no longer want scanned?”
Tell an agent
Set data scanning to {enableScanning} for resources {resources} using the v2 resource config.
Enable {scanType} scanning with scan option {scanOption} on resources {resources} via the older v2 endpoint.
PUT /dlp/api/v1/dss-api/data-pattern Filter my data patterns by mode and editor · List Data Patterns #
Ask an LLM
“Can I list only the custom data patterns someone updated in a given time range?”
“Which data patterns in my own tenant were last updated by a particular user?”
Tell an agent
List my data patterns filtered to mode {modeFilter}.
Show data patterns updated by {updatedByFilter} within {timeRange}.
POST /dlp/api/v1/dss-api/data-pattern Create a data pattern in my tenant · Add Data Pattern #
Ask an LLM
“How do I define a new regex-based data pattern for sensitive data detection?”
“Can a new data pattern use proximity keywords to cut false positives?”
Tell an agent
Create data pattern {name} described as {description} using regexes {regexes}.
Add a data pattern {name} with detection technique {detectionTechnique} and proximity keywords {proximityKeywords}.
POST /dlp/api/v1/dss-api/data-pattern/clone Clone a data pattern in my tenant · Clone Data Pattern #
Ask an LLM
“Can I copy an existing predefined data pattern so I can tweak its confidence levels?”
“What do I need to send to duplicate a data pattern under a new name?”
Tell an agent
Clone data pattern {id} as {name}.
Copy pattern {id} into a new pattern {name} with confidence levels {confidenceLevels}.
GET /dlp/api/v1/dss-api/data-pattern/id/{patternId} Get one data pattern's details · Get Data Pattern Details #
Ask an LLM
“What regexes and detection technique does a particular data pattern use?”
“How can I look up the full definition of a data pattern by its ID?”
Tell an agent
Show the details of data pattern {patternId}.
Get the regexes and keywords configured on pattern {patternId}.
GET /dlp/api/v1/dss-api/data-pattern/name List data pattern names and confidence levels · Get Data Pattern By Name #
Ask an LLM
“Which data pattern names exist in my tenant and what confidence levels does each support?”
“Is there a lightweight list of just the data pattern names?”
Tell an agent
List all data pattern names with their supported confidence levels.
Give me the names of every data pattern I can reference in a profile.
PUT /dlp/api/v1/dss-api/data-pattern/{patternId} Update a data pattern in my tenant · Update Data Pattern #
Ask an LLM
“Can I change the regexes on a custom data pattern I already created?”
“How do I rename or re-describe an existing data pattern?”
Tell an agent
Update data pattern {patternId} to use regexes {regexes}.
Rename data pattern {patternId} to {name} with description {description}.
DELETE /dlp/api/v1/dss-api/data-pattern/{patternId} Delete a data pattern from my tenant · Delete Data Pattern #
Ask an LLM
“How do I remove a custom data pattern I no longer need?”
“Does deleting a data pattern by ID remove it permanently?”
Tell an agent destructive · confirm first
Delete data pattern {patternId}.
Remove the data pattern with ID {patternId} from my tenant.
GET /dlp/api/v1/dss-api/data-profile List data profiles in my tenant · List Data Profiles #
Ask an LLM
“What data profiles are configured for my tenant?”
“Which DLP data profiles exist right now, both predefined and custom?”
Tell an agent
List all data profiles for my tenant.
Show every data profile I have configured.
POST /dlp/api/v1/dss-api/data-profile Create a data profile in my tenant · Add Data Profile #
Ask an LLM
“How do I build a data profile that groups several data patterns into one rule?”
“What fields does a new custom data profile require?”
Tell an agent
Create data profile {name} with pattern rule {dataPatternsRule1}.
Add a {profileType} data profile named {name} with status {profileStatus}.
PUT /dlp/api/v1/dss-api/data-profile Enable or disable data profiles · Update Data Profile Status #
Ask an LLM
“Can I switch several data profiles off at once without deleting them?”
“How do I re-enable a data profile I disabled earlier?”
Tell an agent
Disable the data profiles I no longer want applied.
Enable the selected data profiles again in my tenant.
GET /dlp/api/v1/dss-api/data-profile/id/{profileId} Get one data profile's details · Get Data Profile Details #
Ask an LLM
“Which data patterns are included in a particular data profile?”
“How can I see the rules of a data profile by its ID?”
Tell an agent
Show the details of data profile {profileId}.
Get the pattern rules inside profile {profileId}.
PUT /dlp/api/v1/dss-api/data-profile/id/{profileId} Update a data profile in my tenant · Update Data Profile #
Ask an LLM
“Can I add more data patterns to an existing data profile's rule?”
“How do I change the name or status of a data profile I already have?”
Tell an agent
Update data profile {profileId} to use pattern rule {dataPatternsRule1}.
Rename data profile {profileId} to {name}.
POST /dlp/api/v1/dss-api/data-profile/id/{profileId} Clone a data profile in my tenant · Clone Data Profile #
Ask an LLM
“Can I duplicate a predefined data profile to customize it?”
“Is there a quick way to copy a data profile by its ID?”
Tell an agent
Clone data profile {profileId}.
Make a copy of profile {profileId} that I can edit.
DELETE /dlp/api/v1/dss-api/data-profile/id/{profileId} Delete a data profile from my tenant · Delete Data Profile #
Ask an LLM
“How do I get rid of a custom data profile?”
“What happens when I delete a data profile by ID?”
Tell an agent destructive · confirm first
Delete data profile {profileId}.
Remove profile {profileId} from my tenant.
GET /dlp/api/v1/dss-api/snippets Get my snippet masking settings · Get Snippet Configuration #
Ask an LLM
“Are data snippets enabled for my tenant, and at what masking level?”
“What is my current snippet masking configuration?”
Tell an agent
Show my tenant's snippet masking configuration.
Check whether sensitive data snippets are enabled for me.
POST /dlp/api/v1/dss-api/snippets Change my snippet masking settings · Update Snippet Configuration #
Ask an LLM
“Can I turn off sensitive data snippets entirely for my tenant?”
“How do I switch snippets to full masking?”
Tell an agent
Set snippets enabled to {snippetsEnabled} with mask level {maskLevel}.
Change my snippet mask level to {maskLevel} and keep snippets enabled {snippetsEnabled}.
POST /config/v3/dss-api/data-pattern/clone/dssTenantId/{dssTenantId} Clone a data pattern for a DSS tenant · Clone Data Pattern #
Ask an LLM
“Can I clone a data pattern inside a specific DSS tenant using the v3 config API?”
“How is a data pattern copied when I address the tenant by its DSS tenant ID?”
Tell an agent
Clone a data pattern in DSS tenant {dssTenantId}.
Duplicate a pattern under DSS tenant {dssTenantId} with the v3 endpoint.
GET /config/v3/dss-api/data-pattern/dssTenantId/{dssTenantId} List data patterns for a DSS tenant · List Data Patterns #
Ask an LLM
“Which data patterns does a given DSS tenant ID have?”
“Can I fetch every data pattern for a tenant by passing its DSS tenant ID?”
Tell an agent
List all data patterns in DSS tenant {dssTenantId}.
Show the v3 data pattern list for tenant {dssTenantId}.
POST /config/v3/dss-api/data-pattern/dssTenantId/{dssTenantId} Create a data pattern for a DSS tenant · Add Data Pattern #
Ask an LLM
“How do I add a new data pattern to a specific DSS tenant with the v3 API?”
“Can I create data patterns for a tenant other than the one in my token?”
Tell an agent
Create a new data pattern in DSS tenant {dssTenantId}.
Add a v3 data pattern for tenant {dssTenantId}.
PUT /config/v3/dss-api/data-pattern/dssTenantId/{dssTenantId}/pattern-id/{patternId} Update a data pattern in a DSS tenant · Update Data Pattern #
Ask an LLM
“Can I edit a data pattern by pattern ID inside a named DSS tenant?”
“What's the v3 way to modify a pattern for a specific tenant?”
Tell an agent
Update pattern {patternId} in DSS tenant {dssTenantId}.
Edit v3 data pattern {patternId} for tenant {dssTenantId}.
DELETE /config/v3/dss-api/data-pattern/dssTenantId/{dssTenantId}/pattern-id/{patternId} Delete a data pattern from a DSS tenant · Delete Data Pattern #
Ask an LLM
“How do I delete a pattern from a particular DSS tenant?”
“Can a v3 data pattern be removed by tenant ID and pattern ID together?”
Tell an agent destructive · confirm first
Delete pattern {patternId} from DSS tenant {dssTenantId}.
Remove v3 data pattern {patternId} in tenant {dssTenantId}.
GET /config/v3/dss-api/data-pattern/name/dssTenantId/{dssTenantId} List pattern names for a DSS tenant · Get Data Pattern By Name #
Ask an LLM
“What pattern names and confidence levels are available in a given DSS tenant?”
“Can I get only the data pattern names for a tenant by its DSS ID?”
Tell an agent
List data pattern names with confidence levels for DSS tenant {dssTenantId}.
Give me the v3 pattern name list for tenant {dssTenantId}.
GET /config/v3/dss-api/data-profile/dssTenantId/{dssTenantId} List data profiles for a DSS tenant · List Data Profiles #
Ask an LLM
“Which data profiles belong to a specific DSS tenant?”
“Can I list profiles for a tenant using its DSS tenant ID?”
Tell an agent
List all data profiles in DSS tenant {dssTenantId}.
Show the v3 data profiles for tenant {dssTenantId}.
PUT /config/v3/dss-api/data-profile/dssTenantId/{dssTenantId} Enable or disable profiles in a DSS tenant · Update Data Profile Status #
Ask an LLM
“Can I toggle data profiles on or off for a particular DSS tenant?”
“What's the v3 call to bulk-disable profiles for one tenant?”
Tell an agent
Disable the chosen data profiles in DSS tenant {dssTenantId}.
Enable data profiles again for tenant {dssTenantId}.
POST /config/v3/dss-api/data-profile/dssTenantId/{dssTenantId} Create a data profile for a DSS tenant · Add Data Profile #
Ask an LLM
“How do I create a data profile inside a specific DSS tenant?”
“Can a v3 data profile be created with a pattern rule and profile type?”
Tell an agent
Create data profile {name} in DSS tenant {dssTenantId}.
Add a {profileType} profile {name} with rule {rule} to tenant {dssTenantId}.
GET /config/v3/dss-api/data-profile/dssTenantId/{dssTenantId}/id/{profileId} Get a data profile in a DSS tenant · Get Data Profile Details #
Ask an LLM
“What does a given data profile contain in a specific DSS tenant?”
“Can I fetch one v3 profile by tenant ID and profile ID?”
Tell an agent
Show data profile {profileId} in DSS tenant {dssTenantId}.
Get the rules of v3 profile {profileId} for tenant {dssTenantId}.
PUT /config/v3/dss-api/data-profile/dssTenantId/{dssTenantId}/id/{profileId} Update a data profile in a DSS tenant · Update Data Profile #
Ask an LLM
“Can I change a data profile's status within a particular DSS tenant?”
“How do I edit a v3 data profile's pattern rule?”
Tell an agent
Update profile {profileId} in DSS tenant {dssTenantId} with rule {rule}.
Set the status of v3 profile {profileId} in tenant {dssTenantId} to {profileStatus}.
POST /config/v3/dss-api/data-profile/dssTenantId/{dssTenantId}/id/{profileId} Clone a data profile in a DSS tenant · Clone Data Profile #
Ask an LLM
“Can I duplicate a profile that lives in a specific DSS tenant?”
“What's the v3 call to copy a data profile by ID?”
Tell an agent
Clone profile {profileId} in DSS tenant {dssTenantId}.
Copy v3 data profile {profileId} for tenant {dssTenantId}.
DELETE /config/v3/dss-api/data-profile/dssTenantId/{dssTenantId}/id/{profileId} Delete a data profile from a DSS tenant · Delete Data Profile #
Ask an LLM
“How do I delete a profile from one particular DSS tenant?”
“Is a v3 data profile removed permanently when deleted?”
Tell an agent destructive · confirm first
Delete profile {profileId} from DSS tenant {dssTenantId}.
Remove v3 data profile {profileId} in tenant {dssTenantId}.
GET /config/v3/dss-api/snippets/dssTenantId/{dssTenantId} Get snippet masking for a DSS tenant · Get Snippet Configuration #
Ask an LLM
“What snippet masking level is set for a specific DSS tenant?”
“Are snippets on for the tenant with a given DSS ID?”
Tell an agent
Show the snippet masking configuration for DSS tenant {dssTenantId}.
Check v3 snippet settings for tenant {dssTenantId}.
POST /config/v3/dss-api/snippets/dssTenantId/{dssTenantId} Change snippet masking for a DSS tenant · Update Snippet Configuration #
Ask an LLM
“Can I change snippet masking for a specific DSS tenant rather than my own?”
“How do I disable snippets for one tenant through the v3 API?”
Tell an agent
Set snippet mask level to {maskLevel} for DSS tenant {dssTenantId}.
Turn snippets {snippetsEnabled} for tenant {dssTenantId} via v3.
POST /config/v3/estimated-credits Estimate scan credits for resources · Perform a Credit Estimation For The Specified Resources #
Ask an LLM
“How many credits would scanning these cloud storage resources cost?”
“What's the total data volume of the resources I plan to scan?”
Tell an agent
Estimate the credits needed to scan resources {resources}.
Calculate data volume and credits for a {scanType} scan of {resources}.
PUT /config/v3/resource/configure Update resource scan settings (v3) · Update the Resources Scan Config #
Ask an LLM
“Can I change the scan type and option on many resources in one v3 configure call?”
“Which resource scan configs come back after I update them?”
Tell an agent
Configure resources {resources} with scan type {scanType} using the v3 configure endpoint.
Set scanning to {enableScanning} on {resources} through v3 resource configure.
GET /config/v3/resources List all resources for my PCDS tenant · Fetch All Resources For The Given PCDS Tenant #
Ask an LLM
“What resources are tied to my PCDS tenant across all clouds?”
“Can I pull every data security resource linked to the tenant in my access token?”
Tell an agent
Fetch all resources for my PCDS tenant.
List every resource attached to the PCDS tenant in my token.
GET /config/v3/tenant/acl-script Generate an Azure network ACL Terraform script · Generate an Azure Terraform Script for all Azure accounts under the specified… #
Ask an LLM
“Can I get a Terraform script that fixes network connectivity for my Azure accounts?”
“What Azure network ACL changes are needed so data scans can reach my storage?”
Tell an agent
Generate the Azure network ACL Terraform script for all my PCDS tenant's Azure accounts.
Give me a Terraform script to fix Azure network access for data scanning.
GET /config/v3/tenant/config Get the PCDS tenant configuration · Fetch The Tenant Config For The Given PCDS Tenant #
Ask an LLM
“What configuration is set on my PCDS tenant?”
“Can I look up tenant config details for a specific tenant ID?”
Tell an agent
Show my PCDS tenant configuration.
Get the tenant config for tenant {tenantId}.
PUT /config/v3/tenant/resource/sizing/configure Set the resource size reporting frequency · Update the PCDS Tenant Resource Report Frequency #
Ask an LLM
“How often does the tenant report resource sizes, and can I change it?”
“Can I set a global size reporting frequency for all tenant resources?”
Tell an agent
Set the resource size reporting frequency to {sizeReportingFrequency}.
Change how often my tenant's resource sizes are reported.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-data-security-settings-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-data-security-settings-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-data-security-settings-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Palo Alto Networks Data Security Settings API
  version: '1.0'
  description: 'Operations tagged Data Security Settings across 2 of this provider''s published API definitions: palo-alto-cspm-consolidated-spec-cspm-spec-openapi.json, palo-alto-cspm-datasecurityonboardingmicroservice-openapi.json. Each path carries the servers of the definition it was published in.'
servers:
- url: https://api.prismacloud.io
- url: https://api2.prismacloud.io
- url: https://api3.prismacloud.io
- url: https://api4.prismacloud.io
- url: https://api.anz.prismacloud.io
- url: https://api.eu.prismacloud.io
- url: https://api2.eu.prismacloud.io
- url: https://api.gov.prismacloud.io
- url: https://api.prismacloud.cn
- url: https://api.ca.prismacloud.io
- url: https://api.sg.prismacloud.io
- url: https://api.uk.prismacloud.io
- url: https://api.ind.prismacloud.io
- url: https://api.jp.prismacloud.io
- url: https://api.fr.prismacloud.io
tags:


# --- truncated at 32 KB (61 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-data-security-settings-api-openapi.yml