WAAS API Protection - error method are not defined in the API specification

Customer created WAAS - Container- In-line policy for API protection but they have configured a base path as /api/xxxx/xxxx and after they imported their API definition in API protection. But they are getting this events:

 

Attack started: Path "/aoi/ecommerce/image/3420849" and method "GET" are not defined in API specification.

• Prisma Cloud Runtime Security 
• Prisma Cloud Compute Edition (Self-Hosted)
• Prisma Cloud Compute Defenders
• Web Application and API Security (WAAS)

The issue here is the base path definition.
When applying API protection, WAAS expects base path + api path . So in this case the following path is expected:
/api/ecommerce/image/api/ecommerce/image/{ecommerceFile}/api/ecommerce/image/ + /api/ecommerce/image/{ecommerceFile}
 

 Keep the current API path definition and just change the base path to be "/*" (always end it with an *).

WAAS Deployment Documentation