Skip to main content

Wiz (Vulnerability Scanning) Connection

Instructions on how to generate credentials for Wiz and the required permissions. This is for the Vulnerability Scanning type connection.

Updated this week

Prerequisites

  • A Wiz service account created to generate API credentials for this connection. The service account must have the following permissions:

    • read:resources

    • read:vulnerabilities

    • read:issues

  • Make sure you have access to the following values from Wiz:

    • Base URL (Wiz API endpoint)

    • Client ID

    • Client Secret

​Steps to obtain Wiz Base URL

  1. Navigate to your user profile and copy the API Endpoint URL.

​Steps to obtain Client ID and Client Secret:

  1. In the Wiz dashboard Navigate to Settings > Service Accounts.

  2. Click Add Service Account.

  3. Name the new service account.

  4. If you desire, narrow the scope of this service account to specific projects.

  5. Select the below permissions and click Add Service Account.

    • read:resources

    • read:vulnerabilities

    • read:issues

  6. Copy the Client ID and Client Secret.

  7. Record your client secret somewhere safe. After the credential window is closed, the secret is no longer visible.

Did this answer your question?