Integrate File Integrity Monitor (FIM)
By integrating FIM with AWS S3, you can get real-time updates on the file changes in your Global IT Assets from your AWS S3 without running any API calls or generating any compliance reports. CIPS (Cloud Integration Partner Service) proactively retrieves the file changes from Qualys FIM and transfers it to AWS S3.
Prerequisites
The following are the prerequisites to integrate the Qualys Policy compliance application with AWS S3:
- You must have a storage account with the necessary permissions.
- The CIPS service must be enabled for your subscription. Qualys Support enables it for your account. Contact the Qualys Support team for the integration process.
- Qualys applications: You must have enabled File Integrity Monitor(FIM) and Cloud Agent (CA) for your subscription.
- Permissions: The API Access permission must be enabled for your account.
- Role: You must have the Manager or Unit Manager role.
- Platform version: You must be on Enterprise TruRisk Platform version QWEB-10.21.1.0 or later.
Onboarding APIs
The Qualys Support helps you integrate AWS S3 with the Qualys Cloud Platform.
If you do not have a FIM product created for your subscription, you can start by calling the product APIs. If you already have a FIM product running, you can start with the FIM Integration APIs below.
FIM Product APIs
The following APIs are used for creating and managing the FIM product:
|
API |
URL |
Operator |
Description |
|---|---|---|---|
|
/partner- integration/product |
POST |
Creates a new FIM product. |
|
|
/partner- integration/product/FIM |
GET |
Gets the details of the created FIM product. |
|
|
/partner- integration/product/FIM |
DELETE |
Delete the FIM product. |
FIM Integration APIs
The following APIs are used for integration the FIM product with AWS S3:
| API | URL | Operator | Description |
|---|---|---|---|
| Create Integration | /partner-integration/product-id/integration | POST | Creates a new integration with AWS S3 |
| /partner-integration/product-id/integration | PUT | Update the integration with AWS S3 | |
| /partner-integration/product-id/integration | GET | Get details of the integration with AWS S3 | |
| /partner-integration/product-id/integration | PATCH | Validate the integration with AWS S3 | |
| /partner-integration/product-id/integration | DELETE | Delete the integration with AWS S3 |