View a markdown version of this page

CloudWatch pipelines configuration for WIZ - Amazon CloudWatch
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

CloudWatch pipelines configuration for WIZ

Collects cloud-native application protection platform (CNAPP) data from Wiz using OAuth2 authentication.

Configure the Wiz CNAPP source with the following parameters:

source:
  wiz_cnapp:
    region: "<example-region>"
    range: "P7D"
    authentication:
      oauth2:
        client_id: "${{aws_secrets:<secret-name>:client_id}}"
        client_secret: "${{aws_secrets:<secret-name>:client_secret}}"
Parameters
region (required)

Wiz region for your organization.

authentication.oauth2.client_id (required)

OAuth2 client ID for Wiz API authentication.

authentication.oauth2.client_secret (required)

OAuth2 client secret for Wiz API authentication.

range (optional)

The time range for log collection. Uses ISO 8601 duration format (for example, P7D for the last 7 days, PT21H for 21 hours). Default is 0 hours, and the maximum is 90 days.