Palo Alto Networks

Palo Alto Networks Policies API

The Policies API from Palo Alto Networks — 82 operation(s) for policies.

GitHub OpenAPI
Business capability
Security Strategy & Governance Management BC-620.10

Operations 166

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

POST /code/api/v1/policies/definition/{queryId} Validate a YAML code policy definition · Validate Policies - Code-based #
Ask an LLM
“Can I check that my YAML build policy definition is valid before saving it?”
“What happens if my policy-as-code query has a syntax error?”
Tell an agent
Validate the YAML policy definition for query {queryId}.
Check whether code policy query {queryId} is well formed.
POST /code/api/v1/policies Save a new custom code policy · Save New Policy #
Ask an LLM
“How do I save a new YAML-based build policy in Prisma Cloud Application Security?”
“Can I add my own attribute or connection check as a custom code policy?”
Tell an agent
Save this YAML definition as a new custom build policy.
Create a new policy-as-code rule from my composite check.
GET /code/api/v1/policies/table/data List custom code policies as a table · Get Custom Policies Table Data #
Ask an LLM
“Where can I see all the custom build policies I've written?”
“Which policy-as-code rules exist in my Application Security tenant?”
Tell an agent
Show the custom code policies table.
List every custom build policy with its table data.
PUT /code/api/v1/policies/{policyId} Update a custom YAML code policy · Update Policy #
Ask an LLM
“Can I edit the YAML of a custom build policy I already saved?”
“How do I change the definition of an existing policy-as-code rule?”
Tell an agent
Update custom code policy {policyId} with my revised YAML.
Replace the build policy definition of {policyId}.
DELETE /code/api/v1/policies/{policyId} Delete a custom code policy · Delete Policy #
Ask an LLM
“How do I remove a custom build policy I no longer need?”
“Is deleting a policy-as-code rule permanent?”
Tell an agent destructive · confirm first
Delete custom code policy {policyId}.
Remove build policy {policyId} from Application Security.
POST /code/api/v1/policies/preview Preview results of a code policy · Policy Preview #
Ask an LLM
“Can I see which resources a YAML build policy would flag before I save it?”
“What results would a Checkov check return if I previewed it?”
Tell an agent
Preview the results of this code policy, showing {resultsNumber} results.
Run a preview of Checkov check {checkovCheckId}.
POST /code/api/v1/policies/clone/{policyId} Clone an existing code policy · Policy Clone #
Ask an LLM
“Can I copy an existing build policy and tweak it as my own?”
“How do I duplicate a code policy with a different severity?”
Tell an agent
Clone code policy {policyId} as a new custom policy.
Clone build policy {policyId} with title {title} and severity {severity}.
GET /api/v34.03/policies/compliance/ci/images Get the CI image compliance policy (v34.03) · Get Continuous Integration (CI) Image Compliance Policy #
Ask an LLM
“What compliance rules apply to images scanned in CI under API v34.03?”
“Can I read the continuous integration image compliance policy with the v34.03 API?”
Tell an agent
Get the CI image compliance policy using v34.03.
Show the v34.03 compliance rules for CI-scanned images.
PUT /api/v34.03/policies/compliance/ci/images Update the CI image compliance policy (v34.03) · Update Continuous Integration (CI) Image Compliance Policy #
Ask an LLM
“How do I change the compliance rules for CI image scans through v34.03?”
“Does the v34.03 update replace every CI image compliance rule at once?”
Tell an agent
Update the CI image compliance policy via v34.03 with these rules.
Replace the v34.03 CI image compliance rules with {rules}.
GET /api/v34.03/policies/compliance/ci/serverless Get the CI serverless compliance policy (v34.03) · Get Continuous Integration (CI) Serverless Compliance Policy #
Ask an LLM
“Which compliance checks run on serverless functions in CI under v34.03?”
“Can I read the CI serverless compliance policy from the v34.03 endpoint?”
Tell an agent
Get the v34.03 CI serverless compliance policy.
Show compliance rules for functions scanned in CI (v34.03).
PUT /api/v34.03/policies/compliance/ci/serverless Update the CI serverless compliance policy (v34.03) · Update Continuous Integration (CI) Serverless Compliance Policy #
Ask an LLM
“How do I edit the CI serverless compliance rules with the v34.03 API?”
“Can I push a new rule set for serverless CI compliance using v34.03?”
Tell an agent
Update the CI serverless compliance policy through v34.03.
Set the v34.03 CI serverless compliance rules to {rules}.
GET /api/v34.03/policies/compliance/container Get the container compliance policy (v34.03) · Get Container Compliance Policy #
Ask an LLM
“What compliance rules are enforced on running containers in v34.03?”
“Can I fetch the container compliance policy via the v34.03 API?”
Tell an agent
Get the container compliance policy with v34.03.
Show my v34.03 container compliance rules.
PUT /api/v34.03/policies/compliance/container Update the container compliance policy (v34.03) · Update Container Compliance Policy #
Ask an LLM
“How do I change container compliance rules using v34.03?”
“Will a v34.03 container compliance update overwrite existing rules?”
Tell an agent
Update the container compliance policy via v34.03.
Replace v34.03 container compliance rules with {rules}.
GET /api/v34.03/policies/compliance/container/impacted List containers impacted by a compliance rule (v34.03) · Get Impacted Container Compliance Policy #
Ask an LLM
“Which containers are affected by a given compliance rule in v34.03?”
“Can I page through containers impacted by a compliance rule on v34.03?”
Tell an agent
List containers impacted by compliance rule {rule} using v34.03.
Show the first {limit} containers hit by compliance rule {rule} (v34.03).
GET /api/v34.03/policies/compliance/host Get the host compliance policy (v34.03) · Get Host Compliance Policy #
Ask an LLM
“What compliance rules apply to my hosts under v34.03?”
“Can I read the host compliance policy through the v34.03 API?”
Tell an agent
Get the v34.03 host compliance policy.
Show host compliance rules from v34.03.
PUT /api/v34.03/policies/compliance/host Update the host compliance policy (v34.03) · Update Host Compliance Policy #
Ask an LLM
“How do I update host compliance rules with v34.03?”
“Can I replace the whole host compliance rule set on v34.03?”
Tell an agent
Update the host compliance policy via v34.03.
Set v34.03 host compliance rules to {rules}.
GET /api/v34.03/policies/compliance/serverless Get the serverless compliance policy (v34.03) · Get Serverless Compliance Policy #
Ask an LLM
“Which compliance rules apply to deployed serverless functions in v34.03?”
“Can I fetch the serverless compliance policy on v34.03?”
Tell an agent
Get the serverless compliance policy using v34.03.
Show v34.03 compliance rules for deployed functions.
PUT /api/v34.03/policies/compliance/serverless Update the serverless compliance policy (v34.03) · Update Serverless Compliance Policy #
Ask an LLM
“How do I change serverless function compliance rules via v34.03?”
“Can I overwrite the deployed-function compliance rules on v34.03?”
Tell an agent
Update the v34.03 serverless compliance policy.
Replace serverless compliance rules with {rules} on v34.03.
GET /api/v34.03/policies/compliance/vms/impacted List VMs impacted by a compliance rule (v34.03) · Get Impacted VMs Compliance Policy #
Ask an LLM
“Which virtual machine images are affected by a compliance rule in v34.03?”
“Can I sort the VMs impacted by a compliance rule on v34.03?”
Tell an agent
List VMs impacted by compliance rule {rule} via v34.03.
Show {limit} VMs hit by compliance rule {rule} using v34.03.
GET /api/v34.03/policies/firewall/app/agentless Get the agentless app firewall policy (v34.03) · Get Agentless App Firewall Policy #
Ask an LLM
“What does my agentless WAAS app firewall policy look like under v34.03?”
“Can I read the agentless app firewall rules through v34.03?”
Tell an agent
Get the agentless app firewall policy with v34.03.
Show the v34.03 agentless WAAS rules.
PUT /api/v34.03/policies/firewall/app/agentless Set the agentless app firewall policy (v34.03) · Set Agentless App Firewall Policy #
Ask an LLM
“How do I set the agentless WAAS policy rules via v34.03?”
“Can I limit the agentless app firewall to a port range on v34.03?”
Tell an agent
Set the agentless app firewall policy through v34.03.
Set the v34.03 agentless firewall port range from {minPort} to {maxPort}.
GET /api/v34.03/policies/firewall/app/agentless/impacted List resources impacted by an agentless WAAS rule (v34.03) · Get Agentless App Firewall Policy Impacted #
Ask an LLM
“Which resources does an agentless app firewall rule cover in v34.03?”
“Can I page through agentless WAAS impacted resources on v34.03?”
Tell an agent
List resources impacted by agentless firewall rule {rule} via v34.03.
Show {limit} resources hit by agentless WAAS rule {rule} (v34.03).
GET /api/v34.03/policies/firewall/app/agentless/resources List agentless app firewall resources (v34.03) · Get Agentless App Firewall Policy Resources #
Ask an LLM
“What resources are protected by the agentless app firewall under a given config in v34.03?”
“Can I filter agentless WAAS resources by config ID on v34.03?”
Tell an agent
List agentless app firewall resources for config {configID} using v34.03.
Show the v34.03 agentless WAAS resource list.
GET /api/v34.03/policies/firewall/app/agentless/state Get agentless app firewall policy state (v34.03) · Get Agentless App Firewall Policy State #
Ask an LLM
“Is my agentless app firewall policy deployed and in sync under v34.03?”
“What state is the agentless WAAS policy in on v34.03?”
Tell an agent
Get the agentless app firewall policy state via v34.03.
Check the v34.03 agentless WAAS deployment state.
POST /api/v34.03/policies/firewall/app/apispec Generate a WAAS API specification object (v34.03) · Generate a WAAS API Specification Object #
Ask an LLM
“Can WAAS generate an API specification object for me in v34.03?”
“How do I produce a WAAS API spec object via the v34.03 API?”
Tell an agent
Generate a WAAS API specification object using v34.03.
Build a v34.03 WAAS API spec object.
GET /api/v34.03/policies/firewall/app/app-embedded Get the WAAS app-embedded policy (v34.03) · Get WAAS App-embedded Policy #
Ask an LLM
“What WAAS rules protect my app-embedded defenders under v34.03?”
“Can I read the app-embedded web application firewall policy on v34.03?”
Tell an agent
Get the WAAS app-embedded policy via v34.03.
Show v34.03 app-embedded WAAS rules.
PUT /api/v34.03/policies/firewall/app/app-embedded Update the WAAS app-embedded policy (v34.03) · Update WAAS App-embedded Policy #
Ask an LLM
“How do I update WAAS rules for app-embedded defenders with v34.03?”
“Can I set the port range of the app-embedded WAAS policy on v34.03?”
Tell an agent
Update the app-embedded WAAS policy through v34.03.
Set app-embedded WAAS ports {minPort} to {maxPort} using v34.03.
GET /api/v34.03/policies/firewall/app/container Get the WAAS container policy (v34.03) · Get WAAS Container Policy #
Ask an LLM
“Which WAAS rules protect my containerized web apps under v34.03?”
“Can I fetch the container WAAS policy with v34.03?”
Tell an agent
Get the WAAS container policy via v34.03.
Show v34.03 container web app firewall rules.
PUT /api/v34.03/policies/firewall/app/container Update the WAAS container policy (v34.03) · Update WAAS Container Policy #
Ask an LLM
“How do I change WAAS protection for containers through v34.03?”
“Can I replace the container WAAS rules on v34.03?”
Tell an agent
Update the container WAAS policy using v34.03.
Replace v34.03 container WAAS rules with {rules}.
GET /api/v34.03/policies/firewall/app/container/impacted List containers impacted by a WAAS rule (v34.03) · Container App Firewall Policy Impacted #
Ask an LLM
“Which containers are covered by a container app firewall rule in v34.03?”
“Can I sort containers impacted by a WAAS rule on v34.03?”
Tell an agent
List containers impacted by WAAS rule {rule} via v34.03.
Show {limit} containers under container firewall rule {rule} (v34.03).
GET /api/v34.03/policies/firewall/app/host Get the WAAS host policy (v34.03) · Get WAAS Host Policy #
Ask an LLM
“What WAAS rules protect web apps running directly on hosts in v34.03?”
“Can I read the host WAAS policy on v34.03?”
Tell an agent
Get the WAAS host policy with v34.03.
Show v34.03 host web app firewall rules.
PUT /api/v34.03/policies/firewall/app/host Update the WAAS host policy (v34.03) · Update WAAS Host Policy #
Ask an LLM
“How do I update host WAAS rules through v34.03?”
“Can I change the host app firewall port range on v34.03?”
Tell an agent
Update the host WAAS policy via v34.03.
Set host WAAS ports {minPort} to {maxPort} using v34.03.
GET /api/v34.03/policies/firewall/app/host/impacted List hosts impacted by a WAAS rule (v34.03) · Host App Firewall Policy Impacted #
Ask an LLM
“Which hosts does a host app firewall rule apply to in v34.03?”
“Can I page through hosts impacted by a WAAS rule on v34.03?”
Tell an agent
List hosts impacted by WAAS rule {rule} using v34.03.
Show {limit} hosts under host firewall rule {rule} (v34.03).
GET /api/v34.03/policies/firewall/app/network-list List WAAS network lists (v34.03) · Get WAAS Network List #
Ask an LLM
“What IP network lists are defined for WAAS in v34.03?”
“Can I see the subnets in my WAAS network lists via v34.03?”
Tell an agent
List WAAS network lists using v34.03.
Show all v34.03 WAAS network lists and their subnets.
POST /api/v34.03/policies/firewall/app/network-list Add a WAAS network list (v34.03) · Add WAAS Network List #
Ask an LLM
“How do I create a new IP network list for WAAS with v34.03?”
“Can I add a WAAS network list of subnets on v34.03?”
Tell an agent
Add WAAS network list {name} with subnets {subnets} via v34.03.
Create a new v34.03 WAAS network list named {name}.
PUT /api/v34.03/policies/firewall/app/network-list Update a WAAS network list (v34.03) · Update WAAS Network List #
Ask an LLM
“How do I change the subnets in an existing WAAS network list on v34.03?”
“Can I rename a WAAS network list through v34.03?”
Tell an agent
Update WAAS network list {name} with subnets {subnets} via v34.03.
Rename WAAS network list {previousName} to {name} using v34.03.
DELETE /api/v34.03/policies/firewall/app/network-list/{id} Delete a WAAS network list (v34.03) · Delete WAAS Network List #
Ask an LLM
“How do I remove a WAAS network list using v34.03?”
“Can I delete a network list that WAAS rules reference on v34.03?”
Tell an agent destructive · confirm first
Delete WAAS network list {id} via v34.03.
Remove network list {id} from WAAS using v34.03.
GET /api/v34.03/policies/firewall/app/out-of-band Get the out-of-band WAAS policy (v34.03) · Get Out-of-Band WAAS Policy #
Ask an LLM
“What out-of-band WAAS rules inspect mirrored traffic in v34.03?”
“Can I read the out-of-band web app firewall policy on v34.03?”
Tell an agent
Get the out-of-band WAAS policy with v34.03.
Show v34.03 out-of-band WAAS rules.
PUT /api/v34.03/policies/firewall/app/out-of-band Update the out-of-band WAAS policy (v34.03) · Update Out-of-Band WAAS Policy #
Ask an LLM
“How do I update out-of-band WAAS rules through v34.03?”
“Can I set the port range for out-of-band WAAS on v34.03?”
Tell an agent
Update the out-of-band WAAS policy via v34.03.
Set out-of-band WAAS ports {minPort} to {maxPort} on v34.03.
GET /api/v34.03/policies/firewall/app/out-of-band/impacted List resources impacted by an out-of-band WAAS rule (v34.03) · Get Impacted Resources for Out-of-Band WAAS Policy #
Ask an LLM
“Which resources does an out-of-band WAAS rule cover in v34.03?”
“Can I page through out-of-band WAAS impacted resources on v34.03?”
Tell an agent
List resources impacted by out-of-band rule {rule} using v34.03.
Show {limit} resources under out-of-band WAAS rule {rule} (v34.03).
GET /api/v34.03/policies/firewall/app/serverless Get the WAAS serverless policy (v34.03) · Get WAAS Serverless Policy #
Ask an LLM
“What WAAS rules protect my serverless functions in v34.03?”
“Can I fetch the serverless web app firewall policy via v34.03?”
Tell an agent
Get the WAAS serverless policy with v34.03.
Show v34.03 serverless WAAS rules.
PUT /api/v34.03/policies/firewall/app/serverless Update the WAAS serverless policy (v34.03) · Update WAAS Serverless Policy #
Ask an LLM
“How do I change WAAS protection for functions through v34.03?”
“Can I replace the serverless WAAS rules on v34.03?”
Tell an agent
Update the serverless WAAS policy via v34.03.
Replace v34.03 serverless WAAS rules with {rules}.
GET /api/v34.03/policies/firewall/network Get the CNNS container and host policy (v34.03) · Get CNNS Container and Host Policy #
Ask an LLM
“What cloud native network segmentation rules apply to containers and hosts in v34.03?”
“Can I read the CNNS firewall policy on v34.03?”
Tell an agent
Get the CNNS container and host policy via v34.03.
Show v34.03 CNNS network firewall rules.
PUT /api/v34.03/policies/firewall/network Update the CNNS container and host policy (v34.03) · Update CNNS Container and Host Policy #
Ask an LLM
“How do I turn CNNS on for containers but off for hosts with v34.03?”
“Can I update the CNNS network entities and rules through v34.03?”
Tell an agent
Update the CNNS policy via v34.03 with container rules {containerRules}.
Set CNNS host enforcement to {hostEnabled} using v34.03.
GET /api/v34.03/policies/runtime/app-embedded Get the runtime app-embedded policy (v34.03) · Get Runtime App-embedded Policy #
Ask an LLM
“What runtime defense rules apply to app-embedded defenders in v34.03?”
“Can I read the app-embedded runtime policy on v34.03?”
Tell an agent
Get the runtime app-embedded policy with v34.03.
Show v34.03 app-embedded runtime rules.
POST /api/v34.03/policies/runtime/app-embedded Add an app-embedded runtime rule (v34.03) · Add Runtime App-embedded Policy #
Ask an LLM
“How do I add a single app-embedded runtime rule with v34.03?”
“Can a new app-embedded runtime rule turn on WildFire analysis in v34.03?”
Tell an agent
Add app-embedded runtime rule {name} via v34.03.
Add v34.03 app-embedded runtime rule {name} scoped to collections {collections}.
PUT /api/v34.03/policies/runtime/app-embedded Replace the runtime app-embedded policy (v34.03) · Update Runtime App-embedded Policy #
Ask an LLM
“How do I replace all app-embedded runtime rules at once with v34.03?”
“Can I overwrite the full app-embedded runtime rule set on v34.03?”
Tell an agent
Replace the app-embedded runtime policy via v34.03 with {rules}.
Overwrite all v34.03 app-embedded runtime rules.
GET /api/v34.03/policies/runtime/container Get the runtime container policy (v34.03) · Get Runtime Container Policy #
Ask an LLM
“What runtime defense rules protect my containers in v34.03?”
“Can I fetch the container runtime policy through v34.03?”
Tell an agent
Get the runtime container policy using v34.03.
Show v34.03 container runtime defense rules.
POST /api/v34.03/policies/runtime/container Add or update a container runtime rule (v34.03) · Update Runtime Container Policy #
Ask an LLM
“How do I add one container runtime rule without replacing the rest in v34.03?”
“Can a single container runtime rule skip exec sessions on v34.03?”
Tell an agent
Add container runtime rule {name} via v34.03.
Update v34.03 container runtime rule {name} with processes {processes}.
PUT /api/v34.03/policies/runtime/container Set the container runtime policy (v34.03) · Set Container Runtime Policy #
Ask an LLM
“How do I replace the whole container runtime rule set with v34.03?”
“Can I disable runtime learning for containers on v34.03?”
Tell an agent
Set the container runtime policy via v34.03 with {rules}.
Set container runtime learning disabled to {learningDisabled} using v34.03.
GET /api/v34.03/policies/runtime/container/impacted List containers impacted by a runtime rule (v34.03) · Update Runtime Impacted Container Policy #
Ask an LLM
“Which containers are affected by a runtime rule in v34.03?”
“Can I page through containers impacted by runtime rule changes on v34.03?”
Tell an agent
List containers impacted by runtime rule {rule} using v34.03.
Show {limit} containers under runtime rule {rule} (v34.03).
GET /api/v34.03/policies/runtime/host Get the runtime host policy (v34.03) · Get Runtime Host Policy #
Ask an LLM
“What runtime defense rules protect my hosts in v34.03?”
“Can I read the host runtime policy through v34.03?”
Tell an agent
Get the runtime host policy with v34.03.
Show v34.03 host runtime defense rules.
POST /api/v34.03/policies/runtime/host Add or update a host runtime rule (v34.03) · Update Runtime Host Policy #
Ask an LLM
“How do I add a single host runtime rule with anti-malware settings in v34.03?”
“Can one host runtime rule define file integrity and log inspection rules on v34.03?”
Tell an agent
Add host runtime rule {name} via v34.03.
Update v34.03 host runtime rule {name} with anti-malware {antiMalware}.
PUT /api/v34.03/policies/runtime/host Set the host runtime policy (v34.03) · Set Host Runtime Policy #
Ask an LLM
“How do I replace every host runtime rule in one call with v34.03?”
“Can I set the owner of the host runtime policy on v34.03?”
Tell an agent
Set the host runtime policy via v34.03 with {rules}.
Overwrite all v34.03 host runtime rules.
GET /api/v34.03/policies/runtime/serverless Get the runtime serverless policy (v34.03) · Get Runtime Serverless Policy #
Ask an LLM
“What runtime defense rules protect my functions in v34.03?”
“Can I fetch the serverless runtime policy with v34.03?”
Tell an agent
Get the runtime serverless policy via v34.03.
Show v34.03 serverless runtime defense rules.
POST /api/v34.03/policies/runtime/serverless Add or update a serverless runtime rule (v34.03) · Update Runtime Serverless Policy #
Ask an LLM
“How do I add one serverless runtime rule without touching the others in v34.03?”
“Can a single serverless runtime rule enforce DNS restrictions on v34.03?”
Tell an agent
Add serverless runtime rule {name} via v34.03.
Update v34.03 serverless runtime rule {name} with DNS settings {dns}.
PUT /api/v34.03/policies/runtime/serverless Set the serverless runtime policy (v34.03) · Set Serverless Runtime Policy #
Ask an LLM
“Can I swap out every function runtime rule in one call on v34.03?”
“Can I turn off runtime learning for functions on v34.03?”
Tell an agent
Set the serverless runtime policy via v34.03 with {rules}.
Set serverless runtime learning disabled to {learningDisabled} using v34.03.
GET /api/v34.03/policies/vulnerability/base-images List base image rules (v34.03) · Get Base Images Rules #
Ask an LLM
“Which base images are defined so their vulnerabilities are excluded in v34.03?”
“Can I list my base images rules through v34.03?”
Tell an agent
List base images rules using v34.03.
Show all v34.03 base image rules.
POST /api/v34.03/policies/vulnerability/base-images Add a base image rule (v34.03) · Add Base Images Rule #
Ask an LLM
“How do I register a base image rule with v34.03?”
“Can I add a description to a new base image rule on v34.03?”
Tell an agent
Add a base images rule for {images} via v34.03.
Add v34.03 base image rule {images} described as {description}.
GET /api/v34.03/policies/vulnerability/base-images/download Download base image rules (v34.03) · Download Base Images Rules #
Ask an LLM
“Can I export my base images rules as a file with v34.03?”
“Where do I download base image rules on v34.03?”
Tell an agent
Download the base images rules via v34.03.
Export v34.03 base image rules.
DELETE /api/v34.03/policies/vulnerability/base-images/{id} Delete a base image rule (v34.03) · Delete Base Images Rule #
Ask an LLM
“How do I remove a base image rule using v34.03?”
“Is deleting a base image rule on v34.03 reversible?”
Tell an agent destructive · confirm first
Delete base images rule {id} via v34.03.
Remove v34.03 base image rule {id}.
GET /api/v34.03/policies/vulnerability/ci/images Get the CI image vulnerability policy (v34.03) · Get CI Image Vulnerability Policy #
Ask an LLM
“What vulnerability thresholds fail images scanned in CI under v34.03?”
“Can I read the CI image vulnerability policy on v34.03?”
Tell an agent
Get the CI image vulnerability policy with v34.03.
Show v34.03 vulnerability rules for CI image scans.
PUT /api/v34.03/policies/vulnerability/ci/images Update the CI image vulnerability policy (v34.03) · Update CI Image Vulnerability Policy #
Ask an LLM
“How do I change the vulnerability rules that gate CI image builds with v34.03?”
“Can I replace CI image vulnerability rules on v34.03?”
Tell an agent
Update the CI image vulnerability policy via v34.03.
Set v34.03 CI image vulnerability rules to {rules}.
GET /api/v34.03/policies/vulnerability/ci/serverless Get the CI serverless vulnerability policy (v34.03) · Get CI Serverless Vulnerability Policy #
Ask an LLM
“Which vulnerability rules apply to functions scanned in CI in v34.03?”
“Can I fetch the CI serverless vulnerability policy via v34.03?”
Tell an agent
Get the CI serverless vulnerability policy using v34.03.
Show v34.03 vulnerability rules for CI function scans.
PUT /api/v34.03/policies/vulnerability/ci/serverless Update the CI serverless vulnerability policy (v34.03) · Update CI Serverless Vulnerability Policy #
Ask an LLM
“How do I update CI serverless vulnerability rules through v34.03?”
“Can I overwrite vulnerability rules for CI function scans on v34.03?”
Tell an agent
Update the CI serverless vulnerability policy via v34.03.
Set v34.03 CI serverless vulnerability rules to {rules}.
GET /api/v34.03/policies/vulnerability/host Get the host vulnerability policy (v34.03) · Get Host Vulnerability Policy #
Ask an LLM
“What vulnerability rules apply to my hosts in v34.03?”
“Can I read the host vulnerability policy with v34.03?”
Tell an agent
Get the host vulnerability policy via v34.03.
Show v34.03 host vulnerability rules.
PUT /api/v34.03/policies/vulnerability/host Update the host vulnerability policy (v34.03) · Update Host Vulnerability Policy #
Ask an LLM
“How do I change host vulnerability rules using v34.03?”
“Can I replace the host vulnerability rule set on v34.03?”
Tell an agent
Update the host vulnerability policy via v34.03.
Set v34.03 host vulnerability rules to {rules}.
GET /api/v34.03/policies/vulnerability/host/impacted List hosts impacted by a vulnerability rule (v34.03) · Get Impacted Host Vulnerability Policy #
Ask an LLM
“Which hosts are affected by a host vulnerability rule in v34.03?”
“Is there a paged list of hosts exposed by a host vulnerability rule in v34.03?”
Tell an agent
List hosts impacted by vulnerability rule {rule} using v34.03.
Show {limit} hosts under vulnerability rule {rule} (v34.03).
GET /api/v34.03/policies/vulnerability/images Get the image vulnerability policy (v34.03) · Get Image Vulnerability Policy #
Ask an LLM
“What vulnerability rules apply to deployed images in v34.03?”
“Can I read the image vulnerability policy through the v34.03 API?”
Tell an agent
Get the vulnerability policy for deployed images with v34.03.
Show v34.03 deployed-image vulnerability rules.
PUT /api/v34.03/policies/vulnerability/images Update the image vulnerability policy (v34.03) · Update Image Vulnerability Policy #
Ask an LLM
“How do I change deployed-image vulnerability rules via v34.03?”
“Can I overwrite the image vulnerability rules on v34.03?”
Tell an agent
Update vulnerability rules for deployed images via v34.03.
Replace deployed-image vulnerability rules with {rules} on v34.03.
GET /api/v34.03/policies/vulnerability/images/impacted List images impacted by a vulnerability rule (v34.03) · Get Impacted Image Vulnerability Policy #
Ask an LLM
“Which images are affected by an image vulnerability rule in v34.03?”
“Can I sort images impacted by a vulnerability rule on v34.03?”
Tell an agent
List images impacted by vulnerability rule {rule} using v34.03.
Show {limit} images under vulnerability rule {rule} (v34.03).
GET /api/v34.03/policies/vulnerability/serverless Get the serverless vulnerability policy (v34.03) · Get Serverless Vulnerability Policy #
Ask an LLM
“What vulnerability rules apply to deployed functions in v34.03?”
“Can I fetch the serverless vulnerability policy with v34.03?”
Tell an agent
Get the serverless vulnerability policy via v34.03.
Show v34.03 function vulnerability rules.
PUT /api/v34.03/policies/vulnerability/serverless Update the serverless vulnerability policy (v34.03) · Update Serverless Vulnerability Policy #
Ask an LLM
“How do I update serverless vulnerability rules with v34.03?”
“Can I replace deployed-function vulnerability rules on v34.03?”
Tell an agent
Update vulnerability rules for deployed functions via v34.03.
Replace deployed-function vulnerability rules with {rules} on v34.03.
GET /api/v34.04/policies/compliance/ci/images Get the CI image compliance policy (v34.04) · Get Continuous Integration (CI) Image Compliance Policy #
Ask an LLM
“Which compliance checks does the 34.04 API apply to images built in CI?”
“Is there a way to view the CI image compliance policy on version 34.04?”
Tell an agent
Fetch the CI image compliance policy from the 34.04 API.
Read the continuous integration image compliance rules on 34.04.
PUT /api/v34.04/policies/compliance/ci/images Update the CI image compliance policy (v34.04) · Update Continuous Integration (CI) Image Compliance Policy #
Ask an LLM
“Can I edit which compliance checks block CI image builds on 34.04?”
“What gets replaced when I update the CI image compliance policy in 34.04?”
Tell an agent
Change the CI image compliance policy on the 34.04 API.
Apply compliance rules {rules} to CI image scans on 34.04.
GET /api/v34.04/policies/compliance/ci/serverless Get the CI serverless compliance policy (v34.04) · Get Continuous Integration (CI) Serverless Compliance Policy #
Ask an LLM
“What compliance checks does 34.04 run on functions in the CI pipeline?”
“Is the CI serverless compliance policy readable on version 34.04?”
Tell an agent
Fetch the CI serverless compliance policy from 34.04.
Read compliance rules for CI function scans on the 34.04 API.
PUT /api/v34.04/policies/compliance/ci/serverless Update the CI serverless compliance policy (v34.04) · Update Continuous Integration (CI) Serverless Compliance Policy #
Ask an LLM
“Can I change CI serverless compliance rules on the 34.04 API?”
“What does a 34.04 CI serverless compliance update overwrite?”
Tell an agent
Change the CI serverless compliance policy on 34.04.
Apply compliance rules {rules} to CI function scans on 34.04.
GET /api/v34.04/policies/compliance/container Get the container compliance policy (v34.04) · Get Container Compliance Policy #
Ask an LLM
“Which compliance checks run against my containers on 34.04?”
“Is there a 34.04 call to read container compliance rules?”
Tell an agent
Fetch the container compliance policy from the 34.04 API.
Read my container compliance rules on 34.04.
PUT /api/v34.04/policies/compliance/container Update the container compliance policy (v34.04) · Update Container Compliance Policy #
Ask an LLM
“Can I edit container compliance rules through the 34.04 API?”
“What happens to existing container compliance rules when I update them on 34.04?”
Tell an agent
Change the container compliance policy on 34.04.
Apply container compliance rules {rules} on the 34.04 API.
GET /api/v34.04/policies/compliance/container/impacted List containers impacted by a compliance rule (v34.04) · Get Impacted Container Compliance Policy #
Ask an LLM
“Which containers fall under a specific compliance rule on 34.04?”
“Can I reverse-sort containers impacted by a compliance rule on 34.04?”
Tell an agent
Find containers affected by compliance rule {rule} on the 34.04 API.
Return {limit} containers impacted by compliance rule {rule} on 34.04.
GET /api/v34.04/policies/compliance/host Get the host compliance policy (v34.04) · Get Host Compliance Policy #
Ask an LLM
“Which compliance checks apply to my hosts on the 34.04 API?”
“Is the host compliance policy available to read on 34.04?”
Tell an agent
Fetch the host compliance policy from 34.04.
Read host compliance rules on the 34.04 API.
PUT /api/v34.04/policies/compliance/host Update the host compliance policy (v34.04) · Update Host Compliance Policy #
Ask an LLM
“Can I edit the host compliance rules on 34.04?”
“What does updating the host compliance policy on 34.04 replace?”
Tell an agent
Change the host compliance policy on the 34.04 API.
Apply host compliance rules {rules} on 34.04.
GET /api/v34.04/policies/compliance/serverless Get the serverless compliance policy (v34.04) · Get Serverless Compliance Policy #
Ask an LLM
“Which compliance checks run on my deployed functions on 34.04?”
“Is there a 34.04 endpoint for the serverless compliance policy?”
Tell an agent
Fetch the deployed-function compliance policy from 34.04.
Read compliance rules for deployed functions on the 34.04 API.
PUT /api/v34.04/policies/compliance/serverless Update the serverless compliance policy (v34.04) · Update Serverless Compliance Policy #
Ask an LLM
“Can I edit deployed-function compliance rules on the 34.04 API?”
“What changes when I update the serverless compliance policy on 34.04?”
Tell an agent
Change compliance policy for deployed functions on 34.04.
Apply serverless compliance rules {rules} on the 34.04 API.
GET /api/v34.04/policies/compliance/vms/impacted List VMs impacted by a compliance rule (v34.04) · Get Impacted VMs Compliance Policy #
Ask an LLM
“Which VMs fall under a given compliance rule on the 34.04 API?”
“Can I page through compliance-impacted VMs on 34.04?”
Tell an agent
Find VMs affected by compliance rule {rule} on 34.04.
Return {limit} VMs impacted by compliance rule {rule} on the 34.04 API.
GET /api/v34.04/policies/firewall/app/agentless Get the agentless app firewall policy (v34.04) · Get Agentless App Firewall Policy #
Ask an LLM
“Which agentless WAAS rules are in place on the 34.04 API?”
“Is the agentless app firewall policy readable on 34.04?”
Tell an agent
Fetch the agentless app firewall policy from 34.04.
Read agentless WAAS rules on the 34.04 API.
PUT /api/v34.04/policies/firewall/app/agentless Set the agentless app firewall policy (v34.04) · Set Agentless App Firewall Policy #
Ask an LLM
“Can I replace the agentless WAAS rules on 34.04?”
“What port range can the agentless app firewall be limited to on 34.04?”
Tell an agent
Change the agentless app firewall policy on the 34.04 API.
Limit the agentless firewall to ports {minPort}-{maxPort} on 34.04.
GET /api/v34.04/policies/firewall/app/agentless/impacted List resources impacted by an agentless WAAS rule (v34.04) · Get Agentless App Firewall Policy Impacted #
Ask an LLM
“Which resources are covered by a given agentless WAAS rule on 34.04?”
“Can I sort agentless firewall impacted resources on the 34.04 API?”
Tell an agent
Find resources affected by agentless WAAS rule {rule} on 34.04.
Return {limit} resources impacted by agentless rule {rule} on the 34.04 API.
GET /api/v34.04/policies/firewall/app/agentless/resources List agentless app firewall resources (v34.04) · Get Agentless App Firewall Policy Resources #
Ask an LLM
“Which resources does the agentless app firewall protect under one config on 34.04?”
“Is there a 34.04 call to list agentless WAAS resources by config?”
Tell an agent
Fetch agentless WAAS resources for config {configID} on 34.04.
Read the agentless app firewall resource list on the 34.04 API.
GET /api/v34.04/policies/firewall/app/agentless/state Get agentless app firewall policy state (v34.04) · Get Agentless App Firewall Policy State #
Ask an LLM
“Has my agentless WAAS policy finished deploying on 34.04?”
“What deployment state is the agentless app firewall in on the 34.04 API?”
Tell an agent
Check whether the agentless WAAS policy is deployed on 34.04.
Read agentless WAAS deployment status on the 34.04 API.
POST /api/v34.04/policies/firewall/app/apispec Generate a WAAS API specification object (v34.04) · Generate a WAAS API Specification Object #
Ask an LLM
“Is there a 34.04 call that generates a WAAS API specification object?”
“Can I get WAAS to produce an API spec object on the 34.04 API?”
Tell an agent
Produce a WAAS API specification object on 34.04.
Create a WAAS API spec object with the 34.04 API.
GET /api/v34.04/policies/firewall/app/app-embedded Get the WAAS app-embedded policy (v34.04) · Get WAAS App-embedded Policy #
Ask an LLM
“Which WAAS rules cover app-embedded defenders on 34.04?”
“Is the app-embedded web app firewall policy readable on the 34.04 API?”
Tell an agent
Fetch the app-embedded WAAS policy from 34.04.
Read app-embedded WAAS rules on the 34.04 API.
PUT /api/v34.04/policies/firewall/app/app-embedded Update the WAAS app-embedded policy (v34.04) · Update WAAS App-embedded Policy #
Ask an LLM
“Can I edit app-embedded WAAS rules on the 34.04 API?”
“What port range can the app-embedded WAAS policy use on 34.04?”
Tell an agent
Change the app-embedded WAAS policy on 34.04.
Limit app-embedded WAAS to ports {minPort}-{maxPort} on the 34.04 API.
GET /api/v34.04/policies/firewall/app/container Get the WAAS container policy (v34.04) · Get WAAS Container Policy #
Ask an LLM
“Which WAAS rules protect containerized web apps on 34.04?”
“Is the container web app firewall policy readable on the 34.04 API?”
Tell an agent
Fetch the container WAAS policy from 34.04.
Read container WAAS rules on the 34.04 API.
PUT /api/v34.04/policies/firewall/app/container Update the WAAS container policy (v34.04) · Update WAAS Container Policy #
Ask an LLM
“Can I change container WAAS protection on the 34.04 API?”
“What happens to existing container WAAS rules when I update on 34.04?”
Tell an agent
Change the container WAAS policy on 34.04.
Apply container WAAS rules {rules} on the 34.04 API.
GET /api/v34.04/policies/firewall/app/container/impacted List containers impacted by a WAAS rule (v34.04) · Container App Firewall Policy Impacted #
Ask an LLM
“Which containers does a container app firewall rule cover on 34.04?”
“Can I page through WAAS-impacted containers on the 34.04 API?”
Tell an agent
Find containers affected by container WAAS rule {rule} on 34.04.
Return {limit} containers impacted by WAAS rule {rule} on the 34.04 API.
GET /api/v34.04/policies/firewall/app/host Get the WAAS host policy (v34.04) · Get WAAS Host Policy #
Ask an LLM
“Which WAAS rules protect host-based web apps on 34.04?”
“Is the host web app firewall policy readable on the 34.04 API?”
Tell an agent
Fetch the host WAAS policy from 34.04.
Read host WAAS rules on the 34.04 API.
PUT /api/v34.04/policies/firewall/app/host Update the WAAS host policy (v34.04) · Update WAAS Host Policy #
Ask an LLM
“Can I edit host WAAS rules on the 34.04 API?”
“What port range can host WAAS be restricted to on 34.04?”
Tell an agent
Change the host WAAS policy on 34.04.
Limit host WAAS to ports {minPort}-{maxPort} on the 34.04 API.
GET /api/v34.04/policies/firewall/app/host/impacted List hosts impacted by a WAAS rule (v34.04) · Host App Firewall Policy Impacted #
Ask an LLM
“Which hosts does a host app firewall rule cover on 34.04?”
“Can I sort WAAS-impacted hosts on the 34.04 API?”
Tell an agent
Find hosts affected by host WAAS rule {rule} on 34.04.
Return {limit} hosts impacted by WAAS rule {rule} on the 34.04 API.
GET /api/v34.04/policies/firewall/app/network-list List WAAS network lists (v34.04) · Get WAAS Network List #
Ask an LLM
“Which IP network lists exist for WAAS on the 34.04 API?”
“Is there a 34.04 call to see WAAS network list subnets?”
Tell an agent
Fetch all WAAS network lists from 34.04.
Read WAAS network lists and subnets on the 34.04 API.
POST /api/v34.04/policies/firewall/app/network-list Add a WAAS network list (v34.04) · Add WAAS Network List #
Ask an LLM
“Can I create a new WAAS network list of subnets on 34.04?”
“What fields does a new WAAS network list take on the 34.04 API?”
Tell an agent
Create WAAS network list {name} with subnets {subnets} on 34.04.
Add a new WAAS network list named {name} on the 34.04 API.
PUT /api/v34.04/policies/firewall/app/network-list Update a WAAS network list (v34.04) · Update WAAS Network List #
Ask an LLM
“Can I change subnets in an existing WAAS network list on 34.04?”
“Is renaming a WAAS network list supported on the 34.04 API?”
Tell an agent
Change WAAS network list {name} to subnets {subnets} on 34.04.
Rename WAAS network list {previousName} as {name} on the 34.04 API.
DELETE /api/v34.04/policies/firewall/app/network-list/{id} Delete a WAAS network list (v34.04) · Delete WAAS Network List #
Ask an LLM
“Can I delete a WAAS network list on the 34.04 API?”
“What happens to WAAS rules when their network list is deleted on 34.04?”
Tell an agent destructive · confirm first
Delete WAAS network list {id} on 34.04.
Remove network list {id} from WAAS on the 34.04 API.
GET /api/v34.04/policies/firewall/app/out-of-band Get the out-of-band WAAS policy (v34.04) · Get Out-of-Band WAAS Policy #
Ask an LLM
“Which out-of-band WAAS rules inspect mirrored traffic on 34.04?”
“Is the out-of-band web app firewall policy readable on the 34.04 API?”
Tell an agent
Fetch the out-of-band WAAS policy from 34.04.
Read out-of-band WAAS rules on the 34.04 API.
PUT /api/v34.04/policies/firewall/app/out-of-band Update the out-of-band WAAS policy (v34.04) · Update Out-of-Band WAAS Policy #
Ask an LLM
“Can I edit out-of-band WAAS rules on the 34.04 API?”
“What port range can out-of-band WAAS inspect on 34.04?”
Tell an agent
Change the out-of-band WAAS policy on 34.04.
Limit out-of-band WAAS to ports {minPort}-{maxPort} on the 34.04 API.
GET /api/v34.04/policies/firewall/app/out-of-band/impacted List resources impacted by an out-of-band WAAS rule (v34.04) · Get Impacted Resources for Out-of-Band WAAS Policy #
Ask an LLM
“Which resources does an out-of-band WAAS rule cover on 34.04?”
“Can I sort out-of-band impacted resources on the 34.04 API?”
Tell an agent
Find resources affected by out-of-band rule {rule} on 34.04.
Return {limit} resources impacted by out-of-band WAAS rule {rule} on the 34.04 API.
GET /api/v34.04/policies/firewall/app/serverless Get the WAAS serverless policy (v34.04) · Get WAAS Serverless Policy #
Ask an LLM
“Which WAAS rules protect my functions on the 34.04 API?”
“Is the serverless web app firewall policy readable on 34.04?”
Tell an agent
Fetch the serverless WAAS policy from 34.04.
Read serverless WAAS rules on the 34.04 API.
PUT /api/v34.04/policies/firewall/app/serverless Update the WAAS serverless policy (v34.04) · Update WAAS Serverless Policy #
Ask an LLM
“Can I change WAAS protection for functions on the 34.04 API?”
“Will updating WAAS for functions on 34.04 drop the function rules I already have?”
Tell an agent
Change the serverless WAAS policy on 34.04.
Apply serverless WAAS rules {rules} on the 34.04 API.
GET /api/v34.04/policies/firewall/network Get the CNNS container and host policy (v34.04) · Get CNNS Container and Host Policy #
Ask an LLM
“Which CNNS network segmentation rules apply to containers and hosts on 34.04?”
“Is the CNNS firewall policy readable on the 34.04 API?”
Tell an agent
Fetch the CNNS container and host policy from 34.04.
Read CNNS network firewall rules on the 34.04 API.
PUT /api/v34.04/policies/firewall/network Update the CNNS container and host policy (v34.04) · Update CNNS Container and Host Policy #
Ask an LLM
“Can I enable CNNS for hosts but not containers on 34.04?”
“What network entities can the CNNS policy define on the 34.04 API?”
Tell an agent
Change the CNNS policy on 34.04 with host rules {hostRules}.
Turn CNNS container enforcement to {containerEnabled} on the 34.04 API.
GET /api/v34.04/policies/runtime/app-embedded Get the runtime app-embedded policy (v34.04) · Get Runtime App-embedded Policy #
Ask an LLM
“Which runtime defense rules cover app-embedded defenders on 34.04?”
“Is the app-embedded runtime policy readable on the 34.04 API?”
Tell an agent
Fetch the app-embedded runtime policy from 34.04.
Read app-embedded runtime rules on the 34.04 API.
POST /api/v34.04/policies/runtime/app-embedded Add an app-embedded runtime rule (v34.04) · Add Runtime App-embedded Policy #
Ask an LLM
“Can I add one app-embedded runtime rule on the 34.04 API?”
“Does a new app-embedded runtime rule support WildFire analysis on 34.04?”
Tell an agent
Create app-embedded runtime rule {name} on 34.04.
Create app-embedded runtime rule {name} for collections {collections} on the 34.04 API.
PUT /api/v34.04/policies/runtime/app-embedded Replace the runtime app-embedded policy (v34.04) · Update Runtime App-embedded Policy #
Ask an LLM
“Can I swap in a whole new app-embedded runtime rule set on 34.04?”
“What does replacing the app-embedded runtime policy on 34.04 discard?”
Tell an agent
Replace the app-embedded runtime policy on 34.04 with {rules}.
Overwrite every app-embedded runtime rule on the 34.04 API.
GET /api/v34.04/policies/runtime/container Get the runtime container policy (v34.04) · Get Runtime Container Policy #
Ask an LLM
“Which runtime defense rules protect containers on the 34.04 API?”
“Is the container runtime policy readable on 34.04?”
Tell an agent
Fetch the container runtime policy from 34.04.
Read container runtime defense rules on the 34.04 API.
POST /api/v34.04/policies/runtime/container Add or update a container runtime rule (v34.04) · Update Runtime Container Policy #
Ask an LLM
“Can I add a single container runtime rule on 34.04 without replacing the rest?”
“Which effects can one container runtime rule set for Kubernetes enforcement on 34.04?”
Tell an agent
Create container runtime rule {name} on 34.04.
Change container runtime rule {name} network settings to {network} on the 34.04 API.
PUT /api/v34.04/policies/runtime/container Set the container runtime policy (v34.04) · Set Container Runtime Policy #
Ask an LLM
“Can I replace every container runtime rule at once on 34.04?”
“Is turning off container runtime learning possible on the 34.04 API?”
Tell an agent
Replace the container runtime policy on 34.04 with {rules}.
Switch container runtime learning disabled to {learningDisabled} on the 34.04 API.
GET /api/v34.04/policies/runtime/container/impacted List containers impacted by a runtime rule (v34.04) · Update Runtime Impacted Container Policy #
Ask an LLM
“Which containers fall under a container runtime rule on 34.04?”
“Can I sort runtime-impacted containers on the 34.04 API?”
Tell an agent
Find containers affected by runtime rule {rule} on 34.04.
Return {limit} containers impacted by runtime rule {rule} on the 34.04 API.
GET /api/v34.04/policies/runtime/host Get the runtime host policy (v34.04) · Get Runtime Host Policy #
Ask an LLM
“Which runtime defense rules protect hosts on the 34.04 API?”
“Is the host runtime policy readable on 34.04?”
Tell an agent
Fetch the host runtime policy from 34.04.
Read host runtime defense rules on the 34.04 API.
POST /api/v34.04/policies/runtime/host Add or update a host runtime rule (v34.04) · Update Runtime Host Policy #
Ask an LLM
“Can I add a single host runtime rule with forensic settings on 34.04?”
“Which checks can one host runtime rule include on the 34.04 API?”
Tell an agent
Create host runtime rule {name} on 34.04.
Change host runtime rule {name} file integrity rules to {fileIntegrityRules} on the 34.04 API.
PUT /api/v34.04/policies/runtime/host Set the host runtime policy (v34.04) · Set Host Runtime Policy #
Ask an LLM
“Can I replace every host runtime rule in one request on 34.04?”
“What does setting the host runtime policy on the 34.04 API overwrite?”
Tell an agent
Replace the host runtime policy on 34.04 with {rules}.
Overwrite every host runtime rule on the 34.04 API.
GET /api/v34.04/policies/runtime/serverless Get the runtime serverless policy (v34.04) · Get Runtime Serverless Policy #
Ask an LLM
“Which runtime defense rules protect functions on the 34.04 API?”
“Is the serverless runtime policy readable on 34.04?”
Tell an agent
Fetch the serverless runtime policy from 34.04.
Read serverless runtime defense rules on the 34.04 API.
POST /api/v34.04/policies/runtime/serverless Add or update a serverless runtime rule (v34.04) · Update Runtime Serverless Policy #
Ask an LLM
“Can I add a single serverless runtime rule on 34.04 without replacing the others?”
“Which filesystem controls can one serverless runtime rule set on the 34.04 API?”
Tell an agent
Create serverless runtime rule {name} on 34.04.
Change serverless runtime rule {name} filesystem settings to {filesystem} on the 34.04 API.
PUT /api/v34.04/policies/runtime/serverless Set the serverless runtime policy (v34.04) · Set Serverless Runtime Policy #
Ask an LLM
“Can I replace every serverless runtime rule at once on 34.04?”
“Is disabling serverless runtime learning possible on the 34.04 API?”
Tell an agent
Replace the serverless runtime policy on 34.04 with {rules}.
Switch serverless runtime learning disabled to {learningDisabled} on the 34.04 API.
GET /api/v34.04/policies/vulnerability/base-images List base image rules (v34.04) · Get Base Images Rules #
Ask an LLM
“Which base images are registered as rules on the 34.04 API?”
“Is there a 34.04 call to read base images rules?”
Tell an agent
Fetch base images rules from 34.04.
Read all base image rules on the 34.04 API.
POST /api/v34.04/policies/vulnerability/base-images Add a base image rule (v34.04) · Add Base Images Rule #
Ask an LLM
“Can I register a new base image rule on 34.04?”
“What fields does a base image rule take on the 34.04 API?”
Tell an agent
Create a base images rule for {images} on 34.04.
Create base image rule {images} with note {description} on the 34.04 API.
GET /api/v34.04/policies/vulnerability/base-images/download Download base image rules (v34.04) · Download Base Images Rules #
Ask an LLM
“Can I download base images rules as a file on 34.04?”
“Is there a 34.04 export for base image rules?”
Tell an agent
Fetch a download of the base images rules on 34.04.
Save base image rules as an export from the 34.04 API.
DELETE /api/v34.04/policies/vulnerability/base-images/{id} Delete a base image rule (v34.04) · Delete Base Images Rule #
Ask an LLM
“Can I delete a base image rule on the 34.04 API?”
“Is removing a base images rule on 34.04 permanent?”
Tell an agent destructive · confirm first
Delete base images rule {id} on 34.04.
Remove base image rule {id} on the 34.04 API.
GET /api/v34.04/policies/vulnerability/ci/images Get the CI image vulnerability policy (v34.04) · Get CI Image Vulnerability Policy #
Ask an LLM
“Which vulnerability rules gate CI image builds on 34.04?”
“Is the CI image vulnerability policy readable on the 34.04 API?”
Tell an agent
Fetch the CI image vulnerability policy from 34.04.
Read vulnerability rules for CI image scans on the 34.04 API.
PUT /api/v34.04/policies/vulnerability/ci/images Update the CI image vulnerability policy (v34.04) · Update CI Image Vulnerability Policy #
Ask an LLM
“Can I change the vulnerability thresholds for CI image scans on 34.04?”
“What gets replaced when I update the CI image vulnerability policy on the 34.04 API?”
Tell an agent
Change the CI image vulnerability policy on 34.04.
Apply CI image vulnerability rules {rules} on the 34.04 API.
GET /api/v34.04/policies/vulnerability/ci/serverless Get the CI serverless vulnerability policy (v34.04) · Get CI Serverless Vulnerability Policy #
Ask an LLM
“Which vulnerability rules apply to CI function scans on 34.04?”
“Is the CI serverless vulnerability policy readable on the 34.04 API?”
Tell an agent
Fetch the CI serverless vulnerability policy from 34.04.
Read vulnerability rules for CI function scans on the 34.04 API.
PUT /api/v34.04/policies/vulnerability/ci/serverless Update the CI serverless vulnerability policy (v34.04) · Update CI Serverless Vulnerability Policy #
Ask an LLM
“Can I edit CI serverless vulnerability rules on the 34.04 API?”
“What does updating the CI serverless vulnerability policy on 34.04 overwrite?”
Tell an agent
Change the CI serverless vulnerability policy on 34.04.
Apply CI serverless vulnerability rules {rules} on the 34.04 API.
GET /api/v34.04/policies/vulnerability/host Get the host vulnerability policy (v34.04) · Get Host Vulnerability Policy #
Ask an LLM
“Which vulnerability rules apply to hosts on the 34.04 API?”
“Is the host vulnerability policy readable on 34.04?”
Tell an agent
Fetch the host vulnerability policy from 34.04.
Read host vulnerability rules on the 34.04 API.
PUT /api/v34.04/policies/vulnerability/host Update the host vulnerability policy (v34.04) · Update Host Vulnerability Policy #
Ask an LLM
“Can I change host vulnerability rules on 34.04?”
“What happens to existing host vulnerability rules when I update on the 34.04 API?”
Tell an agent
Change the host vulnerability policy on 34.04.
Apply host vulnerability rules {rules} on the 34.04 API.
GET /api/v34.04/policies/vulnerability/host/impacted List hosts impacted by a vulnerability rule (v34.04) · Get Impacted Host Vulnerability Policy #
Ask an LLM
“Which hosts fall under a host vulnerability rule on 34.04?”
“Can I sort vulnerability-impacted hosts on the 34.04 API?”
Tell an agent
Find hosts affected by vulnerability rule {rule} on 34.04.
Return {limit} hosts impacted by vulnerability rule {rule} on the 34.04 API.
GET /api/v34.04/policies/vulnerability/images Get the image vulnerability policy (v34.04) · Get Image Vulnerability Policy #
Ask an LLM
“Which vulnerability rules apply to deployed images on the 34.04 API?”
“Is the deployed-image vulnerability policy readable on 34.04?”
Tell an agent
Fetch the deployed-image vulnerability policy from 34.04.
Read deployed-image vulnerability rules on the 34.04 API.
PUT /api/v34.04/policies/vulnerability/images Update the image vulnerability policy (v34.04) · Update Image Vulnerability Policy #
Ask an LLM
“Can I change deployed-image vulnerability rules on 34.04?”
“What does an image vulnerability policy update on the 34.04 API replace?”
Tell an agent
Revise vulnerability rules for deployed images on 34.04.
Overwrite deployed-image vulnerability rules with {rules} on the 34.04 API.
GET /api/v34.04/policies/vulnerability/images/impacted List images impacted by a vulnerability rule (v34.04) · Get Impacted Image Vulnerability Policy #
Ask an LLM
“Which images fall under an image vulnerability rule on 34.04?”
“Can I page through vulnerability-impacted images on the 34.04 API?”
Tell an agent
Find images affected by vulnerability rule {rule} on 34.04.
Return {limit} images impacted by vulnerability rule {rule} on the 34.04 API.
GET /api/v34.04/policies/vulnerability/serverless Get the serverless vulnerability policy (v34.04) · Get Serverless Vulnerability Policy #
Ask an LLM
“Which vulnerability rules apply to deployed functions on the 34.04 API?”
“Is the serverless vulnerability policy readable on 34.04?”
Tell an agent
Fetch the deployed-function vulnerability policy from 34.04.
Read function vulnerability rules on the 34.04 API.
PUT /api/v34.04/policies/vulnerability/serverless Update the serverless vulnerability policy (v34.04) · Update Serverless Vulnerability Policy #
Ask an LLM
“Can I change serverless vulnerability rules on 34.04?”
“Does a 34.04 update to function vulnerability rules discard the ones already set for deployed functions?”
Tell an agent
Revise vulnerability rules for deployed functions on 34.04.
Overwrite deployed-function vulnerability rules with {rules} on the 34.04 API.
GET /policy/recommendation Get IoT device policy recommendations · Palo Alto Networks Get Policy Recommendations #
Ask an LLM
“What firewall rules does IoT Security recommend based on how my devices behave?”
“Can I get microsegmentation recommendations for one specific IoT device?”
Tell an agent
Get IoT policy recommendations for tenant {customerid}.
Get recommended rules for device {deviceid} in tenant {customerid}.
GET /Policies/SecurityRules List firewall security rules · Palo Alto Networks List Security Rules #
Ask an LLM
“Which security rules are configured in my firewall rulebase?”
“Can I list the security rules for just one virtual system?”
Tell an agent
List all security rules in the {location} rulebase.
Show security rules for vsys {vsys}.
POST /Policies/SecurityRules Create a firewall security rule · Palo Alto Networks Create Security Rule #
Ask an LLM
“Can I add a new rule that allows traffic between two zones?”
“What do I define when creating a new security policy rule?”
Tell an agent
Create security rule {name} in the {location} rulebase.
Add a security rule named {name} with definition {entry}.
PUT /Policies/SecurityRules Replace an existing security rule · Palo Alto Networks Update Security Rule #
Ask an LLM
“How do I change an existing firewall security rule on a PAN-OS firewall?”
“Does updating a security rule require sending the whole rule definition?”
Tell an agent
Update security rule {name} with the full new definition.
Replace security rule {name} in vsys {vsys} with {entry}.
DELETE /Policies/SecurityRules Delete a firewall security rule · Palo Alto Networks Delete Security Rule #
Ask an LLM
“Can I remove a security rule from the rulebase by its name?”
“What happens to traffic when I delete a firewall security rule?”
Tell an agent destructive · confirm first
Delete security rule {name}.
Remove security rule {name} from vsys {vsys}.
GET /Policies/NATRules List NAT rules · Palo Alto Networks List NAT Rules #
Ask an LLM
“Which source and destination NAT rules are configured on my firewall?”
“Can I look up a single NAT rule by name?”
Tell an agent
List all NAT rules on the firewall.
Show NAT rule {name}.
POST /Policies/NATRules Create a NAT rule · Palo Alto Networks Create NAT Rule #
Ask an LLM
“How do I set up a new destination NAT rule on the firewall?”
“Which translation types can a new NAT rule use?”
Tell an agent
Create NAT rule {name}.
Add NAT rule {name} in vsys {vsys} with definition {entry}.
PUT /Policies/NATRules Update a NAT rule · Palo Alto Networks Update NAT Rule #
Ask an LLM
“Can I change the translation settings of an existing NAT rule?”
“Which NAT rule gets updated when I pass a rule name?”
Tell an agent
Update NAT rule {name}.
Change NAT rule {name} to {entry}.
DELETE /Policies/NATRules Delete a NAT rule · Palo Alto Networks Delete NAT Rule #
Ask an LLM
“Can I remove a NAT rule by its name?”
“What stops being translated after I delete a NAT rule?”
Tell an agent destructive · confirm first
Delete NAT rule {name}.
Remove NAT rule {name} from the {location} config.
GET /Policies/QoSRules List QoS rules · Palo Alto Networks List QoS Rules #
Ask an LLM
“Which QoS rules prioritize traffic on my firewall?”
“Can I filter QoS rules to one virtual system?”
Tell an agent
List all QoS rules.
Show QoS rules for vsys {vsys}.
POST /Policies/QoSRules Create a QoS rule · Palo Alto Networks Create QoS Rule #
Ask an LLM
“How do I prioritize bandwidth for a critical application with a new QoS rule?”
“What does a new QoS rule classify traffic into?”
Tell an agent
Create QoS rule {name}.
Add QoS rule {name} with definition {entry}.
PUT /Policies/QoSRules Update a QoS rule · Palo Alto Networks Update QoS Rule #
Ask an LLM
“Can I change which QoS class an existing QoS rule assigns?”
“Is a QoS rule updated by name or by ID?”
Tell an agent
Update QoS rule {name}.
Change QoS rule {name} to {entry}.
DELETE /Policies/QoSRules Delete a QoS rule · Palo Alto Networks Delete QoS Rule #
Ask an LLM
“Can I remove a QoS rule I no longer need?”
“What happens to traffic prioritization when a QoS rule is deleted?”
Tell an agent destructive · confirm first
Delete QoS rule {name}.
Remove QoS rule {name} from vsys {vsys}.
GET /v1/policies List browser security policies · Palo Alto Networks List Browser Security Policies #
Ask an LLM
“Which browser security policies are configured for my tenant?”
“Can I list only the enabled browser policies?”
Tell an agent
List browser security policies.
Show browser policies where enabled is {enabled}, up to {limit}.
POST /v1/policies Create a browser security policy · Palo Alto Networks Create Browser Security Policy #
Ask an LLM
“How do I create a Prisma Access Browser policy with web filtering and DLP?”
“Can a new browser policy control downloads and extensions?”
Tell an agent
Create browser security policy {name}.
Create browser policy {name} with DLP enabled set to {dlp_enabled}.
GET /v1/policies/{policy_id} Get a browser security policy · Palo Alto Networks Get Browser Security Policy #
Ask an LLM
“What settings does a specific browser security policy have?”
“Can I see the full details of one browser policy?”
Tell an agent
Get browser security policy {policy_id}.
Show the full configuration of browser policy {policy_id}.
PUT /v1/policies/{policy_id} Update a browser security policy · Palo Alto Networks Update Browser Security Policy #
Ask an LLM
“Can I change the download controls on an existing browser policy?”
“What do I need to send to update a browser security policy?”
Tell an agent
Update browser policy {policy_id} with name {name}.
Set browser policy {policy_id} ({name}) enabled to {enabled}.
DELETE /v1/policies/{policy_id} Delete a browser security policy · Palo Alto Networks Delete Browser Security Policy #
Ask an LLM
“Can I delete a browser policy that is still assigned to a deployment?”
“What must I do before removing a browser security policy?”
Tell an agent destructive · confirm first
Delete browser security policy {policy_id}.
Remove browser policy {policy_id}.
GET /policies/vulnerability/images Get the image vulnerability policy (unversioned) · Palo Alto Networks Get Image Vulnerability Policy #
Ask an LLM
“What block, alert and ignore rules apply to container image vulnerabilities on the unversioned endpoint?”
“Can I read image vulnerability rules by severity and CVE without a version in the path?”
Tell an agent
Get the image vulnerability policy from the unversioned endpoint.
Show image vulnerability block and alert rules without an API version.
PUT /policies/vulnerability/images Replace the image vulnerability policy (unversioned) · Palo Alto Networks Update Image Vulnerability Policy #
Ask an LLM
“Can I replace the image vulnerability policy enforced at container admission?”
“Does replacing the image vulnerability policy on the unversioned endpoint affect all image scans?”
Tell an agent
Replace the image vulnerability policy on the unversioned endpoint.
Replace the unversioned image vulnerability policy with rules {rules}.
GET /policies/compliance/images Get the image compliance policy · Palo Alto Networks Get Image Compliance Policy #
Ask an LLM
“Which CIS benchmark checks are applied to my container images?”
“Can I see the image compliance policy and its custom rules?”
Tell an agent
Get the image compliance policy.
Show CIS benchmark and custom compliance rules for container images.
GET /policies/runtime/container Get the container runtime policy (unversioned) · Palo Alto Networks Get Container Runtime Policy #
Ask an LLM
“What process, network and file system activity is allowed for running containers on the unversioned endpoint?”
“Can I read the container runtime defense policy without a version in the path?”
Tell an agent
Get the container runtime defense policy from the unversioned endpoint.
Show allowed container runtime activities without an API version.
GET /policy List policies (v1) · Palo Alto Networks List Policies #
Ask an LLM
“Which high-severity policies are enabled in Prisma Cloud?”
“Can I list policies mapped to a particular compliance standard with the original endpoint?”
Tell an agent
List every policy from the original v1 policy endpoint, built-in and custom.
Using the original policy list, show each policy's severity, cloud type and compliance mappings.
POST /policy Create a custom policy · Palo Alto Networks Create a Custom Policy #
Ask an LLM
“How do I create my own custom policy with a rule and severity?”
“Can I attach a remediation recommendation and cloud type to a new custom policy?”
Tell an agent
Create a {policyType} policy named {name} with severity {severity} and rule {rule}.
Add custom policy {name} for cloud type {cloudType} with recommendation {recommendation}.
GET /policy/{policyId} Get cloud security policy details · Palo Alto Networks Get Policy Details #
Ask an LLM
“What does a specific RQL cloud security policy check for?”
“Can I look up one cloud policy's details by its ID?”
Tell an agent
Get cloud security policy {policyId}.
Show details of RQL policy {policyId}.
PUT /policy/{policyId} Update a cloud security policy · Palo Alto Networks Update a Policy #
Ask an LLM
“Can I change the severity or RQL rule of an existing cloud security policy?”
“Which fields must I resend when updating a cloud policy?”
Tell an agent
Update cloud policy {policyId} to severity {severity}.
Update RQL policy {policyId} named {name} of type {policyType} with rule {rule}.
GET /dspm/api/v1/policies List data security (DSPM) policies · Palo Alto Networks List DSPM Policies #
Ask an LLM
“Which data security policies require encryption for sensitive data?”
“Can I search DSPM policies by name and show only enabled ones?”
Tell an agent
List DSPM policies.
Search DSPM policies for {search} where enabled is {enabled}.

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-policies-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/palo-alto-networks:palo-alto-networks-policies-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

palo-alto-networks-policies-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Palo Alto Networks Policies API
  x-refined-note:
  - x-description-source differs across the merged source definitions and was not carried
  version: '1.0'
  description: 'Operations tagged Policies across 10 of this provider''s published API definitions: palo-alto-code-policies-openapi.json, palo-alto-compute-34-03-openapi-34-03-138-sh-openapi.json, palo-alto-compute-openapi-34-04-145-sh-openapi.json, palo-alto-iot-security-api-openapi-original.yml, palo-alto-networks-policies-api-openapi.yml, palo-alto-pan-os-rest-api-openapi-original.yml, palo-alto-prisma-access-browser-api-openapi-original.yml, palo-alto-prisma-cloud-compute-api-openapi-original.yml…'
servers:
- url: https://api.prismacloud.io
- url: https://{customer}.iot.paloaltonetworks.com/pub/v4.0
  description: IoT Security API production server.
  variables:
    customer:
      description: Customer-specific tenant identifier.
      default: customer-tenant
- url: https://api.stratacloud.paloaltonetworks.com/aiops/bpa/v1
  description: AIOps for NGFW BPA API production server.
- url: https://{firewall}/restapi/v10.2
  description: PAN-OS firewall or Panorama REST API endpoint.
  variables:
    firewall:
      description: Hostname or IP address of the PAN-OS firewall or Panorama appliance.
      default: firewall.example.com
- url: https://api.sase.paloaltonetworks.com/browser-mgmt
  description: SASE Prisma Access Browser Management API production server.
- url: https://{console}/api/v1
  description: Prisma Cloud Compute Console API.
  variables:
    console:
      default: console.example.com
      description: Address of the Prisma Cloud Compute Console. For SaaS deployments, use the address provided in Prisma Cloud under Compute > Manage > System > Utilities.
- url: https://api2.prismacloud.io
  description: Prisma Cloud API (US region 2).
- url: https://api3.prismacloud.io
  description: Prisma Cloud API (US region 3).
- url: https://api.eu.prismacloud.io
  description: Prisma Cloud API (EU).
- url: https://api.anz.prismacloud.io
  description: Prisma Cloud API (ANZ).
- url: https://api.sg.prismacloud.io
  description: Prisma Cloud API (Singapore).
- url: https://api.ca.prismacloud.io
  description: Prisma Cloud API (Canada).
tags:


# --- truncated at 32 KB (586 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/palo-alto-networks/refs/heads/main/openapi/palo-alto-networks-policies-api-openapi.yml