Returns every CSPM integration configured for this tenant, across all app types. A tenant may have multiple integrations of the same app type (e.g. separate "Prod Wiz" and "Dev Wiz"), each distinguished by its own unique name.
Optional free-text search. Matches (case-insensitive, substring) if the text appears in the integration's name, description, or id (the id embedded in its ingestUrl -- useful since id isn't returned as its own field). Omit to return every integration.
List of CSPM integrations
Stored details for a single CSPM integration (token not included)
CSPM application type
Unique, tenant-wide name given to this integration at creation
Description of this integration
URL to which CSPM events should be sent (
Timestamp when the active token was created. Updated on each rotation -- it tracks the token, not the integration record -- so this reflects when the token was last rotated, not necessarily when the integration itself was first created.
The app's outbound webhook payload/action template (e.g. Wiz's Mustache-syntax action template), to be pasted as-is into the CSPM tool's own webhook/action configuration so the events it sends match the shape this integration ingests. Identical for every integration of a given app type -- not customized per integration. Absent if the app has no such template. Also always absent on List all CSPM integrations (the list response) -- it's only included when a single integration is returned (Get/Update CSPM integration details), since repeating an identical value on every list row would be wasted payload.