Cloud Security

The Cloud Security service collection provides operations for managing cloud risk visibility and Cloud Group organization in your CrowdStrike Falcon environment. Retrieve combined cloud risk details, query and manage Cloud Groups with full CRUD support, and organize cloud assets by selectors.

Language	Last Update
Python	v1.5.5
PowerShell	v2.2.9
Go	v0.20.0
TypeScript	v0.6.0
Rust	v0.7.0
Ruby	v1.2.0

Operation	Description
combined_cloud_risks `combined_cloud_risks`	Get cloud risks with full details based on filters and sort criteria.
ListCloudGroupsExternal `list_cloud_groups`	Query Cloud Groups and return entities with full details.
ListCloudGroupsByIDExternal `list_cloud_groups_by_id`	Retrieve Cloud Groups by their UUIDs.
CreateCloudGroupExternal `create_cloud_group`	Create a new Cloud Group with specified properties and selectors.
UpdateCloudGroupExternal `update_cloud_group`	Update an existing Cloud Group’s properties.
DeleteCloudGroupsExternal `delete_cloud_groups`	Delete Cloud Groups in batch by their UUIDs.
ListCloudGroupIDsExternal `list_group_ids`	Query Cloud Groups and return only their IDs.

combined_cloud_risks

Get cloud risks with full details based on filters and sort criteria.

GET /cloud-security-risks/combined/cloud-risks/v1

Scope Cloud Security Risks: READ Consumes · Produces application/json

PEP 8 combined_cloud_risks

Parameters

Name	Type	Data type	Description
filter	query	string	FQL string to filter results in Falcon Query Language (FQL). Supported fields: account_id, account_name, asset_gcrn, asset_id, asset_name, asset_region, asset_type, cloud_group, cloud_provider, first_seen, last_seen, resolved_at, risk_factor, rule_id, rule_name, service_category, severity, status, suppressed_by, suppressed_reason, tags
sort	query	string	The field to sort on. Use \|asc or \|desc suffix to specify sort direction. Supported fields: account_id, account_name, asset_id, asset_name, asset_region, asset_type, cloud_provider, first_seen, last_seen, resolved_at, rule_name, service_category, severity, status
limit	query	integer	The maximum number of items to return. When not specified or 0, 500 is used. When larger than 1000, 1000 is used.
offset	query	integer	Offset returned risks
parameters	query	dictionary	Full query string parameters payload in JSON format. Not required if using other keywords.

Code Examples

from falconpy import CloudSecurity

falcon = CloudSecurity(client_id=CLIENT_ID,
                       client_secret=CLIENT_SECRET
                       )

response = falcon.combined_cloud_risks(filter="string",
                                       sort="string",
                                       limit="string",
                                       offset=integer)
print(response)

from falconpy import CloudSecurity

falcon = CloudSecurity(client_id=CLIENT_ID,
                       client_secret=CLIENT_SECRET
                       )

response = falcon.combined_cloud_risks(filter="string",
                                       sort="string",
                                       limit="string",
                                       offset=integer)
print(response)

from falconpy import APIHarnessV2

falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

response = falcon.command("combined_cloud_risks",
                          filter="string",
                          sort="string",
                          limit=integer,
                          offset=integer)
print(response)

package main

import (
  "context"
  "fmt"
  "os"

  "github.com/crowdstrike/gofalcon/falcon"
  "github.com/crowdstrike/gofalcon/falcon/client/cloud_security"
)

func main() {
  client, err := falcon.NewClient(&falcon.ApiConfig{
    ClientId:     os.Getenv("FALCON_CLIENT_ID"),
    ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"),
    Context:      context.Background(),
  })
  if err != nil {
    panic(err)
  }

  filter := "string"
  sort := "string"
  limit := int64(0)
  offset := int64(0)

  response, err := client.CloudSecurity.CombinedCloudRisks(
    &cloud_security.CombinedCloudRisksParams{
      Filter: &filter,
      Sort: &sort,
      Limit: &limit,
      Offset: &offset,
      Context: context.Background(),
    },
  )
  if err != nil {
    panic(falcon.ErrorExplain(err))
  }

  fmt.Printf("%+v\n", response.Payload)
}

import { FalconClient } from "crowdstrike-falcon";

const client = new FalconClient({
  cloud: process.env.FALCON_CLOUD!,
  clientId: process.env.FALCON_CLIENT_ID!,
  clientSecret: process.env.FALCON_CLIENT_SECRET!,
});

const response = await client.cloudSecurity.combinedCloudRisks(
  "string",  // filter
  "string",  // sort
  integer,  // limit
  integer  // offset
);

console.log(response);

require "crimson-falcon"

Falcon.configure do |config|
  config.client_id = ENV["FALCON_CLIENT_ID"]
  config.client_secret = ENV["FALCON_CLIENT_SECRET"]
  config.cloud = ENV["FALCON_CLOUD"]
end

api = Falcon::CloudSecurity.new

response = api.combined_cloud_risks(filter: 'string',
                                    sort: 'string',
                                    limit: integer,
                                    offset: integer)

puts response

ListCloudGroupsExternal

Query Cloud Groups and return entities with full details.

GET /cloud-security/combined/cloud-groups/v1

Scope Asset Groups: READ Consumes · Produces application/json

PEP 8 list_cloud_groups

Parameters

Name	Type	Data type	Description
filter	query	string	A valid FQL filter. Supports filtering groups by: Group properties: name, description, created_at, updated_at. Selector properties: cloud_provider, account_id, region, cloud_provider_tag, image_registry, image_repository, image_tag. Group tags: business_unit, business_impact, environment
sort	query	string	A valid sort string.
offset	query	string	The starting position of the list operation.
limit	query	string	The maximum number of cloud groups to retrieve.
parameters	query	dictionary	Full query string parameters payload in JSON format. Not required if using other keywords.

Code Examples

from falconpy import CloudSecurity

falcon = CloudSecurity(client_id=CLIENT_ID,
                       client_secret=CLIENT_SECRET
                       )

response = falcon.list_cloud_groups(filter="string",
                                    sort="string",
                                    offset=integer,
                                    limit=integer)
print(response)

from falconpy import CloudSecurity

falcon = CloudSecurity(client_id=CLIENT_ID,
                       client_secret=CLIENT_SECRET
                       )

response = falcon.ListCloudGroupsExternal(filter="string",
                                          sort="string",
                                          offset=integer,
                                          limit=integer)
print(response)

from falconpy import APIHarnessV2

falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

response = falcon.command("ListCloudGroupsExternal",
                          filter="string",
                          sort="string",
                          offset="string",
                          limit="string")
print(response)

package main

import (
  "context"
  "fmt"
  "os"

  "github.com/crowdstrike/gofalcon/falcon"
  "github.com/crowdstrike/gofalcon/falcon/client/cloud_security"
)

func main() {
  client, err := falcon.NewClient(&falcon.ApiConfig{
    ClientId:     os.Getenv("FALCON_CLIENT_ID"),
    ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"),
    Context:      context.Background(),
  })
  if err != nil {
    panic(err)
  }

  filter := "string"
  sort := "string"
  offset := "string"
  limit := "string"

  response, err := client.CloudSecurity.ListCloudGroupsExternal(
    &cloud_security.ListCloudGroupsExternalParams{
      Filter: &filter,
      Sort: &sort,
      Offset: &offset,
      Limit: &limit,
      Context: context.Background(),
    },
  )
  if err != nil {
    panic(falcon.ErrorExplain(err))
  }

  fmt.Printf("%+v\n", response.Payload)
}

import { FalconClient } from "crowdstrike-falcon";

const client = new FalconClient({
  cloud: process.env.FALCON_CLOUD!,
  clientId: process.env.FALCON_CLIENT_ID!,
  clientSecret: process.env.FALCON_CLIENT_SECRET!,
});

const response = await client.cloudSecurity.listCloudGroupsExternal(
  "string",  // filter
  "string",  // sort
  "string",  // offset
  "string"  // limit
);

console.log(response);

require "crimson-falcon"

Falcon.configure do |config|
  config.client_id = ENV["FALCON_CLIENT_ID"]
  config.client_secret = ENV["FALCON_CLIENT_SECRET"]
  config.cloud = ENV["FALCON_CLOUD"]
end

api = Falcon::CloudSecurity.new

response = api.list_cloud_groups_external(filter: 'string',
                                          sort: 'string',
                                          offset: 'string',
                                          limit: 'string')

puts response

ListCloudGroupsByIDExternal

Retrieve Cloud Groups by their UUIDs.

GET /cloud-security/entities/cloud-groups/v1

Scope Asset Groups: READ Consumes · Produces application/json

PEP 8 list_cloud_groups_by_id

Parameters

Name	Type	Data type	Description
ids	query	string or list of strings	Cloud Groups UUIDs to retrieve
parameters	query	dictionary	Full query string parameters payload in JSON format. Not required if using other keywords.

Code Examples

from falconpy import CloudSecurity

falcon = CloudSecurity(client_id=CLIENT_ID,
                       client_secret=CLIENT_SECRET
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.list_cloud_groups_by_id(ids=id_list)
print(response)

from falconpy import CloudSecurity

falcon = CloudSecurity(client_id=CLIENT_ID,
                       client_secret=CLIENT_SECRET
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.ListCloudGroupsByIDExternal(ids=id_list)
print(response)

from falconpy import APIHarnessV2

falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("ListCloudGroupsByIDExternal",
                          ids=id_list)
print(response)

package main

import (
  "context"
  "fmt"
  "os"

  "github.com/crowdstrike/gofalcon/falcon"
  "github.com/crowdstrike/gofalcon/falcon/client/cloud_security"
)

func main() {
  client, err := falcon.NewClient(&falcon.ApiConfig{
    ClientId:     os.Getenv("FALCON_CLIENT_ID"),
    ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"),
    Context:      context.Background(),
  })
  if err != nil {
    panic(err)
  }

  response, err := client.CloudSecurity.ListCloudGroupsByIDExternal(
    &cloud_security.ListCloudGroupsByIDExternalParams{
      Ids: []string{"ID1", "ID2", "ID3"},
      Context: context.Background(),
    },
  )
  if err != nil {
    panic(falcon.ErrorExplain(err))
  }

  fmt.Printf("%+v\n", response.Payload)
}

import { FalconClient } from "crowdstrike-falcon";

const client = new FalconClient({
  cloud: process.env.FALCON_CLOUD!,
  clientId: process.env.FALCON_CLIENT_ID!,
  clientSecret: process.env.FALCON_CLIENT_SECRET!,
});

const response = await client.cloudSecurity.listCloudGroupsByIDExternal(["ID1", "ID2", "ID3"]);  // ids

console.log(response);

require "crimson-falcon"

Falcon.configure do |config|
  config.client_id = ENV["FALCON_CLIENT_ID"]
  config.client_secret = ENV["FALCON_CLIENT_SECRET"]
  config.cloud = ENV["FALCON_CLOUD"]
end

api = Falcon::CloudSecurity.new

response = api.list_cloud_groups_by_id_external(ids: ['ID1', 'ID2', 'ID3'])

puts response

CreateCloudGroupExternal

Create a new Cloud Group with specified properties and selectors.

POST /cloud-security/entities/cloud-groups/v1

Scope Asset Groups: WRITE Consumes · Produces application/json

PEP 8 create_cloud_group

Parameters

Name	Type	Data type	Description
body	body	dictionary	Full body payload in JSON format. Not required if using other keywords.
business_impact	body	string	Business impact.
business_unit	body	string	Business unit.
description	body	string	Description.
environment	body	string	Environment.
name	body	string	Name.
owners	body	list of strings	Owners.
selectors	body	dictionary	Selectors.

Code Examples

from falconpy import CloudSecurity

falcon = CloudSecurity(client_id=CLIENT_ID,
                       client_secret=CLIENT_SECRET
                       )

selectors = {
    "cloud_resources": [
        {
            "account_ids": [
                "string"
            ],
            "cloud_provider": "aws",
            "filters": {
                "region": [
                    "string"
                ],
                "tags": [
                    "string"
                ]
            }
        }
    ],
    "images": [
        {
            "filters": {
                "repository": [
                    "string"
                ],
                "tag": [
                    "string"
                ]
            },
            "registry": "string"
        }
    ]
}

response = falcon.create_cloud_group(business_impact="string",
                                     business_unit="string",
                                     description="string",
                                     environment="string",
                                     name="string",
                                     owners=["string"],
                                     selectors=selectors)
print(response)

from falconpy import CloudSecurity

falcon = CloudSecurity(client_id=CLIENT_ID,
                       client_secret=CLIENT_SECRET
                       )

selectors = {
    "cloud_resources": [
        {
            "account_ids": [
                "string"
            ],
            "cloud_provider": "aws",
            "filters": {
                "region": [
                    "string"
                ],
                "tags": [
                    "string"
                ]
            }
        }
    ],
    "images": [
        {
            "filters": {
                "repository": [
                    "string"
                ],
                "tag": [
                    "string"
                ]
            },
            "registry": "string"
        }
    ]
}

response = falcon.CreateCloudGroupExternal(business_impact="string",
                                           business_unit="string",
                                           description="string",
                                           environment="string",
                                           name="string",
                                           owners=["string"],
                                           selectors=selectors)
print(response)

from falconpy import APIHarnessV2

falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

body_payload = {
    "business_impact": "string",
    "business_unit": "string",
    "description": "string",
    "environment": "string",
    "name": "string",
    "owners": ["string"],
    "selectors": {
        "cloud_resources": [
            {
                "account_ids": ["string"],
                "cloud_provider": "string",
                "filters": {}
            }
        ],
        "images": [
            {
                "filters": {},
                "registry": "string"
            }
        ],
        "kubernetes_resources": [
            {
                "cluster": ["string"],
                "namespace": ["string"]
            }
        ]
    }
}

response = falcon.command("CreateCloudGroupExternal", body=body_payload)
print(response)

package main

import (
  "context"
  "fmt"
  "os"

  "github.com/crowdstrike/gofalcon/falcon"
  "github.com/crowdstrike/gofalcon/falcon/client/cloud_security"
  "github.com/crowdstrike/gofalcon/falcon/models"
)

func main() {
  client, err := falcon.NewClient(&falcon.ApiConfig{
    ClientId:     os.Getenv("FALCON_CLIENT_ID"),
    ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"),
    Context:      context.Background(),
  })
  if err != nil {
    panic(err)
  }

  business_impact := "string"
  business_unit := "string"
  description := "string"
  environment := "string"
  name := "string"

  response, err := client.CloudSecurity.CreateCloudGroupExternal(
    &cloud_security.CreateCloudGroupExternalParams{
      Body: &models.AssetgroupmanagerV1CreateCloudGroupRequest{
        BusinessImpact: &business_impact,
        BusinessUnit: &business_unit,
        Description: &description,
        Environment: &environment,
        Name: &name,
        Owners: []string{"string"},
        Selectors: &struct{}{},
      },
      Context: context.Background(),
    },
  )
  if err != nil {
    panic(falcon.ErrorExplain(err))
  }

  fmt.Printf("%+v\n", response.Payload)
}

import { FalconClient } from "crowdstrike-falcon";

const client = new FalconClient({
  cloud: process.env.FALCON_CLOUD!,
  clientId: process.env.FALCON_CLIENT_ID!,
  clientSecret: process.env.FALCON_CLIENT_SECRET!,
});

const response = await client.cloudSecurity.createCloudGroupExternal(
  {
    businessImpact: "string",
    businessUnit: "string",
    description: "string",
    environment: "string",
    name: "string",
    owners: [],
    selectors: {
      cloudResources: [{
          accountIds: [],
          cloudProvider: "string",
          filters: {}
        }],
      images: [{
          filters: {},
          registry: "string"
        }],
      kubernetesResources: [{
          cluster: [],
          namespace: []
        }]
    }
}  // body
);

console.log(response);

require "crimson-falcon"

Falcon.configure do |config|
  config.client_id = ENV["FALCON_CLIENT_ID"]
  config.client_secret = ENV["FALCON_CLIENT_SECRET"]
  config.cloud = ENV["FALCON_CLOUD"]
end

api = Falcon::CloudSecurity.new

body = Falcon::AssetgroupmanagerV1CreateCloudGroupRequest.new(
  business_impact: 'string',
  business_unit: 'string',
  description: 'string',
  environment: 'string',
  name: 'string',
  owners: [],
  selectors: {
    cloud_resources: [{
        account_ids: [],
        cloud_provider: 'string',
        filters: {}
      }],
    images: [{
        filters: {},
        registry: 'string'
      }],
    kubernetes_resources: [{
        cluster: [],
        namespace: []
      }]
  }
)

response = api.create_cloud_group_external(body)

puts response

UpdateCloudGroupExternal

Update an existing Cloud Group’s properties.

PATCH /cloud-security/entities/cloud-groups/v1

Scope Asset Groups: WRITE Consumes · Produces application/json

PEP 8 update_cloud_group

Parameters

Name	Type	Data type	Description
group	body	dictionary	Complete group payload to update.
business_impact	body	string	Business impact.
business_unit	body	string	Business unit.
description	body	string	Description.
environment	body	string	Environment.
name	body	string	Name.
owners	body	list of strings	Owners.
selectors	body	dictionary	Selectors.

Code Examples

from falconpy import CloudSecurity

falcon = CloudSecurity(client_id=CLIENT_ID,
                       client_secret=CLIENT_SECRET
                       )

selectors = {
    "cloud_resources": [
        {
            "account_ids": [
                "string"
            ],
            "cloud_provider": "aws",
            "filters": {
                "region": [
                    "string"
                ],
                "tags": [
                    "string"
                ]
            }
        }
    ],
    "images": [
        {
            "filters": {
                "repository": [
                    "string"
                ],
                "tag": [
                    "string"
                ]
            },
            "registry": "string"
        }
    ]
}

response = falcon.update_cloud_group(business_impact="string",
                                     business_unit="string",
                                     description="string",
                                     environment="string",
                                     name="string",
                                     owners=["string"],
                                     selectors=selectors)
print(response)

from falconpy import CloudSecurity

falcon = CloudSecurity(client_id=CLIENT_ID,
                       client_secret=CLIENT_SECRET
                       )

selectors = {
    "cloud_resources": [
        {
            "account_ids": [
                "string"
            ],
            "cloud_provider": "aws",
            "filters": {
                "region": [
                    "string"
                ],
                "tags": [
                    "string"
                ]
            }
        }
    ],
    "images": [
        {
            "filters": {
                "repository": [
                    "string"
                ],
                "tag": [
                    "string"
                ]
            },
            "registry": "string"
        }
    ]
}

response = falcon.UpdateCloudGroupExternal(business_impact="string",
                                           business_unit="string",
                                           description="string",
                                           environment="string",
                                           name="string",
                                           owners=["string"],
                                           selectors=selectors)
print(response)

from falconpy import APIHarnessV2

falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

body_payload = {
    "business_impact": "string",
    "business_unit": "string",
    "description": "string",
    "environment": "string",
    "id": "string",
    "name": "string",
    "owners": ["string"],
    "selectors": {
        "cloud_resources": [
            {
                "account_ids": ["string"],
                "cloud_provider": "string",
                "filters": {}
            }
        ],
        "images": [
            {
                "filters": {},
                "registry": "string"
            }
        ],
        "kubernetes_resources": [
            {
                "cluster": ["string"],
                "namespace": ["string"]
            }
        ]
    }
}

response = falcon.command("UpdateCloudGroupExternal", body=body_payload)
print(response)

package main

import (
  "context"
  "fmt"
  "os"

  "github.com/crowdstrike/gofalcon/falcon"
  "github.com/crowdstrike/gofalcon/falcon/client/cloud_security"
)

func main() {
  client, err := falcon.NewClient(&falcon.ApiConfig{
    ClientId:     os.Getenv("FALCON_CLIENT_ID"),
    ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"),
    Context:      context.Background(),
  })
  if err != nil {
    panic(err)
  }

  group := "string"

  response, err := client.CloudSecurity.UpdateCloudGroupExternal(
    &cloud_security.UpdateCloudGroupExternalParams{
      Group: &group,
      Context: context.Background(),
    },
  )
  if err != nil {
    panic(falcon.ErrorExplain(err))
  }

  fmt.Printf("%+v\n", response.Payload)
}

import { FalconClient } from "crowdstrike-falcon";

const client = new FalconClient({
  cloud: process.env.FALCON_CLOUD!,
  clientId: process.env.FALCON_CLIENT_ID!,
  clientSecret: process.env.FALCON_CLIENT_SECRET!,
});

const response = await client.cloudSecurity.updateCloudGroupExternal("string");  // group

console.log(response);

require "crimson-falcon"

Falcon.configure do |config|
  config.client_id = ENV["FALCON_CLIENT_ID"]
  config.client_secret = ENV["FALCON_CLIENT_SECRET"]
  config.cloud = ENV["FALCON_CLOUD"]
end

api = Falcon::CloudSecurity.new

response = api.update_cloud_group_external('string')

puts response

DeleteCloudGroupsExternal

Delete Cloud Groups in batch by their UUIDs.

DELETE /cloud-security/entities/cloud-groups/v1

Scope Asset Groups: WRITE Consumes · Produces application/json

PEP 8 delete_cloud_groups

Parameters

Name	Type	Data type	Description
ids	query	string or list of strings	Cloud Groups UUIDs to delete
parameters	query	dictionary	Full query string parameters payload in JSON format. Not required if using other keywords.

Code Examples

from falconpy import CloudSecurity

falcon = CloudSecurity(client_id=CLIENT_ID,
                       client_secret=CLIENT_SECRET
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.delete_cloud_groups(ids=id_list)
print(response)

from falconpy import CloudSecurity

falcon = CloudSecurity(client_id=CLIENT_ID,
                       client_secret=CLIENT_SECRET
                       )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.DeleteCloudGroupsExternal(ids=id_list)
print(response)

from falconpy import APIHarnessV2

falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

id_list = 'ID1,ID2,ID3'  # Can also pass a list here: ['ID1', 'ID2', 'ID3']

response = falcon.command("DeleteCloudGroupsExternal",
                          ids=id_list)
print(response)

package main

import (
  "context"
  "fmt"
  "os"

  "github.com/crowdstrike/gofalcon/falcon"
  "github.com/crowdstrike/gofalcon/falcon/client/cloud_security"
)

func main() {
  client, err := falcon.NewClient(&falcon.ApiConfig{
    ClientId:     os.Getenv("FALCON_CLIENT_ID"),
    ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"),
    Context:      context.Background(),
  })
  if err != nil {
    panic(err)
  }

  response, err := client.CloudSecurity.DeleteCloudGroupsExternal(
    &cloud_security.DeleteCloudGroupsExternalParams{
      Ids: []string{"ID1", "ID2", "ID3"},
      Context: context.Background(),
    },
  )
  if err != nil {
    panic(falcon.ErrorExplain(err))
  }

  fmt.Printf("%+v\n", response.Payload)
}

import { FalconClient } from "crowdstrike-falcon";

const client = new FalconClient({
  cloud: process.env.FALCON_CLOUD!,
  clientId: process.env.FALCON_CLIENT_ID!,
  clientSecret: process.env.FALCON_CLIENT_SECRET!,
});

const response = await client.cloudSecurity.deleteCloudGroupsExternal(["ID1", "ID2", "ID3"]);  // ids

console.log(response);

require "crimson-falcon"

Falcon.configure do |config|
  config.client_id = ENV["FALCON_CLIENT_ID"]
  config.client_secret = ENV["FALCON_CLIENT_SECRET"]
  config.cloud = ENV["FALCON_CLOUD"]
end

api = Falcon::CloudSecurity.new

response = api.delete_cloud_groups_external(ids: ['ID1', 'ID2', 'ID3'])

puts response

ListCloudGroupIDsExternal

Query Cloud Groups and return only their IDs.

GET /cloud-security/queries/cloud-groups/v1

Scope Asset Groups: READ Consumes · Produces application/json

PEP 8 list_group_ids

Parameters

Name	Type	Data type	Description
filter	query	string	A valid FQL filter. Supports filtering groups by: Group properties: name, description, created_at, updated_at. Selector properties: cloud_provider, account_id, region, cloud_provider_tag, image_registry, image_repository, image_tag. Group tags: business_unit, business_impact, environment
sort	query	string	A valid sort string.
offset	query	string	The starting position of the list operation.
limit	query	string	The maximum number of cloud groups to retrieve.
parameters	query	dictionary	Full query string parameters payload in JSON format. Not required if using other keywords.

Code Examples

from falconpy import CloudSecurity

falcon = CloudSecurity(client_id=CLIENT_ID,
                       client_secret=CLIENT_SECRET
                       )

response = falcon.list_group_ids(filter="string",
                                 sort="string",
                                 offset=integer,
                                 limit=integer)
print(response)

from falconpy import CloudSecurity

falcon = CloudSecurity(client_id=CLIENT_ID,
                       client_secret=CLIENT_SECRET
                       )

response = falcon.ListCloudGroupIDsExternal(filter="string",
                                            sort="string",
                                            offset=integer,
                                            limit=integer)
print(response)

from falconpy import APIHarnessV2

falcon = APIHarnessV2(client_id=CLIENT_ID,
                      client_secret=CLIENT_SECRET
                      )

response = falcon.command("ListCloudGroupIDsExternal",
                          filter="string",
                          sort="string",
                          offset="string",
                          limit="string")
print(response)

package main

import (
  "context"
  "fmt"
  "os"

  "github.com/crowdstrike/gofalcon/falcon"
  "github.com/crowdstrike/gofalcon/falcon/client/cloud_security"
)

func main() {
  client, err := falcon.NewClient(&falcon.ApiConfig{
    ClientId:     os.Getenv("FALCON_CLIENT_ID"),
    ClientSecret: os.Getenv("FALCON_CLIENT_SECRET"),
    Context:      context.Background(),
  })
  if err != nil {
    panic(err)
  }

  filter := "string"
  sort := "string"
  offset := "string"
  limit := "string"

  response, err := client.CloudSecurity.ListCloudGroupIDsExternal(
    &cloud_security.ListCloudGroupIDsExternalParams{
      Filter: &filter,
      Sort: &sort,
      Offset: &offset,
      Limit: &limit,
      Context: context.Background(),
    },
  )
  if err != nil {
    panic(falcon.ErrorExplain(err))
  }

  fmt.Printf("%+v\n", response.Payload)
}

import { FalconClient } from "crowdstrike-falcon";

const client = new FalconClient({
  cloud: process.env.FALCON_CLOUD!,
  clientId: process.env.FALCON_CLIENT_ID!,
  clientSecret: process.env.FALCON_CLIENT_SECRET!,
});

const response = await client.cloudSecurity.listCloudGroupIDsExternal(
  "string",  // filter
  "string",  // sort
  "string",  // offset
  "string"  // limit
);

console.log(response);

require "crimson-falcon"

Falcon.configure do |config|
  config.client_id = ENV["FALCON_CLIENT_ID"]
  config.client_secret = ENV["FALCON_CLIENT_SECRET"]
  config.cloud = ENV["FALCON_CLOUD"]
end

api = Falcon::CloudSecurity.new

response = api.list_cloud_group_ids_external(filter: 'string',
                                             sort: 'string',
                                             offset: 'string',
                                             limit: 'string')

puts response

Cloud Security

Table of Contents

combined_cloud_risks

Parameters

Code Examples

ListCloudGroupsExternal

Parameters

Code Examples

ListCloudGroupsByIDExternal

Parameters

Code Examples

CreateCloudGroupExternal

Parameters

Code Examples

UpdateCloudGroupExternal

Parameters

Code Examples

DeleteCloudGroupsExternal

Parameters

Code Examples

ListCloudGroupIDsExternal

Parameters

Code Examples