How to Retrieve the JSON Web Token (JWT) using Prisma Cloud Access Key ID and Secret Key?
14168
Created On 11/27/21 14:54 PM - Last Modified 04/30/22 06:57 AM
Question
- How to Retrieve the JSON Web Token (JWT) using Prisma Cloud Access Key ID and Secret Key?
Environment
- Prisma Cloud
Answer
- Prisma Cloud has a REST API that enables configuration of custom integrations for cloud security needs.
- This can, for example, be used to automate sending alert notifications to an in-house tool to extend the DevOps security capabilities or for host defender automation.
- Prisma Cloud requires an API Access Key to enable programmatic access to the REST API.
- Access Key is made up of Two Parts : an Access Key ID and a Secret Key.
- Prisma Cloud also requires a JSON Web Token (JWT) or an Auth Token used to authenticate all subsequent REST API requests on Prisma Cloud.
- Follow the steps below to retrieve the Auth Token from Access Key ID and Secret Key.
- Create an Access Key i.e. an Access Key ID and Secret Key : Create and Manage Access Keys
- Using the generated Access Key ID and Secret Key, run the following curl call to retrieve the JSON Web Token (JWT) or Auth Token.
curl -X POST \
https://api.prismacloud.io/login \
-H 'Content-Type: application/json' \
-d '{"username":"Access-Key","password":"Secret-key"}'
3. The following shows the response of a successful request.
{
"token": "<JWT>",
"message": "login_successful",
"customerNames": [
{
"customerName": "Test",
"tosAccepted": true
}
]
}
Let us consider the following example.
- The Prisma Cloud Admin Console URL used is https://app.sg.prismacloud.io
- Hence, the corresponding Prisma Cloud API URL is https://api.sg.prismacloud.io
- Following Access Key (Access Key ID + Secret Key) is created.
Secret Key : rDkB36hahN8IReoUwJXICS2vf9w=
2. Use the generated Access Key to run the following curl call to retrieve the JWT.
curl -X POST \
https://api.sg.prismacloud.io/login \
-H 'Content-Type: application/json' \
-d '{"username":"da3ab08b-c969-4db1-8f62-
2a9b55f378cb","password":"rDkB36hahN8IReoUwJXICS2vf9w="}'
3. The value for token in the response is the JWT used to authorize subsequent REST APIs.
Additional Information
- For more information, refer : Access the Prisma Cloud REST API