How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Palo Alto Networks Data Security Settings API

Prisma Cloud Data Security enables you to discover and classify data stored in AWS S3 buckets and protect accidental exposure, misuse, or sharing of sensitive data. You can usethe data security settings APIs to manage data profiles, data patterns, and snippets.### Error HandlingAs with other Prisma Cloud public API requests, Data Security Settings API requests return standard HTTP response codes. When more details are available, the error response includes the following:Property | Type | Description -----------| ---- | ----------- message | string | Error messagename | string | Exception namedetail | string | Exception details To get started with data security, see [Prisma Cloud Data Security](https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-data-security.html).

Palo Alto Networks Data Security Settings API is one of 741 APIs that Palo Alto Networks publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

Tagged areas include Data Security Settings. The published artifact set on APIs.io includes an OpenAPI specification.

This API exposes 39 operations across 23 paths, and defines 41 schemas. It is described by OpenAPI 3.2.0, at version 1.0.

Requests are made against 15 base URLs: https://api.prismacloud.io, https://api2.prismacloud.io, https://api3.prismacloud.io, https://api4.prismacloud.io, https://api.anz.prismacloud.io, https://api.eu.prismacloud.io, https://api2.eu.prismacloud.io, https://api.gov.prismacloud.io, https://api.prismacloud.cn, https://api.ca.prismacloud.io, https://api.sg.prismacloud.io, https://api.uk.prismacloud.io, https://api.ind.prismacloud.io, https://api.jp.prismacloud.io, https://api.fr.prismacloud.io.

39 operations 23 paths 41 schemas 4 DELETE14 GET11 POST10 PUT

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0
Base URL
https://{firewall}/api/
Authentication
API Key
Resource Areas
1

Authentication & Security 1

Palo Alto Networks Data Security Settings API declares 1 security scheme for authenticating requests. An API key is passed in the header as x-redlock-auth (x-redlock-auth).

  • x-redlock-auth — The x-redlock-auth value is a JSON Web Token (JWT).

Paths & Operations 39

Across 23 paths, the API surfaces 39 operations — 4 DELETE, 14 GET, 11 POST, 10 PUT. Each is listed below with its method, path, parameters, and response codes.

Data Security Settings 39

Prisma Cloud Data Security enables you to discover and classify data stored in AWS S3 buckets and protect accidental exposure, misuse, or sharing of sensitive data. You can use th…

GET
/dlp/api/v1/resource-inventory/resources
List Data Resources
get-resource-inventory → 200400500
PUT
/dlp/api/config/v2/resource
Update Data Scan Config
update-resource-config body → 200400500
PUT
/dlp/api/v1/dss-api/data-pattern
List Data Patterns
get-all-data-patterns body → 200400500
POST
/dlp/api/v1/dss-api/data-pattern
Add Data Pattern
add-data-pattern body → 200500
POST
/dlp/api/v1/dss-api/data-pattern/clone
Clone Data Pattern
clone-data-pattern body → 200400500
GET
/dlp/api/v1/dss-api/data-pattern/id/{patternId}
Get Data Pattern Details
get-data-pattern-details 1 param → 200500
GET
/dlp/api/v1/dss-api/data-pattern/name
Get Data Pattern By Name
get-data-pattern-name → 200400500
PUT
/dlp/api/v1/dss-api/data-pattern/{patternId}
Update Data Pattern
update-data-pattern 1 param body → 200400500
DELETE
/dlp/api/v1/dss-api/data-pattern/{patternId}
Delete Data Pattern
delete-data-pattern 1 param → 200400500
GET
/dlp/api/v1/dss-api/data-profile
List Data Profiles
get-data-profiles → 200500
POST
/dlp/api/v1/dss-api/data-profile
Add Data Profile
add-data-profile body → 200400500
PUT
/dlp/api/v1/dss-api/data-profile
Update Data Profile Status
enable-disable-data-profiles body → 200500
GET
/dlp/api/v1/dss-api/data-profile/id/{profileId}
Get Data Profile Details
get-data-profile-details 1 param → 200500
PUT
/dlp/api/v1/dss-api/data-profile/id/{profileId}
Update Data Profile
update-data-profile 1 param body → 200400500
POST
/dlp/api/v1/dss-api/data-profile/id/{profileId}
Clone Data Profile
clone-data-profile 1 param → 200400500
DELETE
/dlp/api/v1/dss-api/data-profile/id/{profileId}
Delete Data Profile
delete-data-profile 1 param → 200400500
GET
/dlp/api/v1/dss-api/snippets
Get Snippet Configuration
get-snippets-config → 200400500
POST
/dlp/api/v1/dss-api/snippets
Update Snippet Configuration
update-snippets body → 200400500
POST
/config/v3/dss-api/data-pattern/clone/dssTenantId/{dssTenantId}
Clone Data Pattern
clone-dss-data-pattern 1 param body → 200400
GET
/config/v3/dss-api/data-pattern/dssTenantId/{dssTenantId}
List Data Patterns
get-all-dss-data-patterns 1 param → 200400
POST
/config/v3/dss-api/data-pattern/dssTenantId/{dssTenantId}
Add Data Pattern
add-dss-data-pattern 1 param body → 200
PUT
/config/v3/dss-api/data-pattern/dssTenantId/{dssTenantId}/pattern-id/{patternId}
Update Data Pattern
update-dss-data-pattern 2 params body → 200400
DELETE
/config/v3/dss-api/data-pattern/dssTenantId/{dssTenantId}/pattern-id/{patternId}
Delete Data Pattern
delete-dss-data-pattern 2 params → 200400
GET
/config/v3/dss-api/data-pattern/name/dssTenantId/{dssTenantId}
Get Data Pattern By Name
get-dss-data-pattern-name 1 param → 200400
GET
/config/v3/dss-api/data-profile/dssTenantId/{dssTenantId}
List Data Profiles
get-dss-data-profiles 1 param → 200
PUT
/config/v3/dss-api/data-profile/dssTenantId/{dssTenantId}
Update Data Profile Status
enable-disable-dss-data-profiles 1 param body → 200
POST
/config/v3/dss-api/data-profile/dssTenantId/{dssTenantId}
Add Data Profile
add-dss-data-profile 1 param body → 200400
GET
/config/v3/dss-api/data-profile/dssTenantId/{dssTenantId}/id/{profileId}
Get Data Profile Details
get-dss-data-profile-details 2 params → 200
PUT
/config/v3/dss-api/data-profile/dssTenantId/{dssTenantId}/id/{profileId}
Update Data Profile
update-dss-data-profile 2 params body → 200400
POST
/config/v3/dss-api/data-profile/dssTenantId/{dssTenantId}/id/{profileId}
Clone Data Profile
clone-dss-data-profile 2 params → 200400
DELETE
/config/v3/dss-api/data-profile/dssTenantId/{dssTenantId}/id/{profileId}
Delete Data Profile
delete-dss-data-profile 2 params → 200400
GET
/config/v3/dss-api/snippets/dssTenantId/{dssTenantId}
Get Snippet Configuration
get-dss-snippets-config 1 param → 200400
POST
/config/v3/dss-api/snippets/dssTenantId/{dssTenantId}
Update Snippet Configuration
update-dss-snippets-config 1 param body → 200400
POST
/config/v3/estimated-credits
Perform a Credit Estimation For The Specified Resources.
getCreditEstimation body → 200400403
PUT
/config/v3/resource/configure
Update the Resources Scan Config
configureResources body → 200400403204
GET
/config/v3/resources
Fetch All Resources For The Given PCDS Tenant
getResources → 200400403
GET
/config/v3/tenant/acl-script
Generate an Azure Terraform Script for all Azure accounts under the specified PCDS Tenant.
generateNetworkAclScriptByTenantID → 200
GET
/config/v3/tenant/config
Fetch The Tenant Config For The Given PCDS Tenant
getTenantConfig 1 param → 200400
PUT
/config/v3/tenant/resource/sizing/configure
Update the PCDS Tenant Resource Report Frequency
updateReportFrequency body → 204400403401

Schemas 41

The contract defines 41 schemas that model the data the API accepts and returns. The most detailed are DataPatternModel (19 properties), StorageResource (15 properties), DataProfileDetails (13 properties), CreateDataPatternRequest (11 properties). Each schema is shown below with its type and property counts.

DLPAPIResponse
object
Model for response from API
3 properties
DSSProfile
object
Model for Enable/Disable Data Profiles
2 properties 2 required
StorageSize
object
7 properties
DataPatternRules
object
Data Pattern rules
10 properties
CreateDataPatternRequest
object
Create/Update Pattern Model with limited input
11 properties 9 required
RelativeTimeRangeConfigModel
DataProfileDetails
object
DataProfile Model class
13 properties
ToNowTimeRangeConfigModel
AbsoluteTimeRangeConfigModel
TimeRangeConfigModel
object
See the [Time Range Model](/prisma-cloud/api/cspm/api-time-range-model) for details.
1 property 1 required
RelativeTimeDurationModel
object
Model for RelativeTimeDuration
2 properties
DataPatternConfidenceLevel
object
2 properties
ResourceInventory
object
Data resource inventory model
3 properties
DSSDataProfiles
object
Model for DLP Data Profiles
1 property
Profiles
object
Model for Profiles
7 properties
UpdateResourceConfig
object
Model for Data Security resource scan config
4 properties 2 required
DataProfile
object
Model class for Create and Update Data Profile
8 properties 6 required
DataPatternDetails
object
DataPatternDetails Model class
7 properties
ResourceConfigurationStatus
object
3 properties
DataPatternList
object
DataPattern List with Filters for UI
3 properties
GetDataPatternFilterRequest
object
Get data pattern with filters on mode, updatedBy and time range
3 properties
DataPatternRulesOne
object
DataProfile Rules
2 properties
DataPatternModel
object
Data Pattern Model
19 properties 8 required
DssSnippetConfig
object
Update Snippets Configuration
2 properties 2 required
Regexes
object
Model for regex
2 properties
StorageResource
object
Storage resource model
15 properties 3 required
TimeModel
object
Model for Time
2 properties
DSSUserDataProfile
object
10 properties
CreditEstimationRequest
object
3 properties
ResourceRetrievalFrequency
string
ResourceInfo
object
4 properties
DataPatternRulesOne_2
object
2 properties
SnippetsForUI
object
2 properties
CloudType
string
DSSProfileStatus
object
3 properties
ResourceScanType
string
ResourceScanOption
string
TenantResourcesReportFrequency
object
1 property
DataPatternRules_2
object
9 properties
ResourcesConfigRequest
object
4 properties
JsonNode
array

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

palo-alto-networks-data-security-settings-api-openapi.yml Raw ↑

Other APIs Palo Alto Networks publishes across the network.

PAN-OS XML API
PAN-OS OpenConfig API
Panorama API
AutoFocus API (Deprecated)
Prisma SASE Service Status API
Cross-Platform Service Status API
SASE Authentication Service API
Expedition API (Deprecated)
VM-Series Licensing API
Palo Alto Networks 5G Deregistered Trend API
Palo Alto Networks 5G Network Interconnects and Bandwidth API
Palo Alto Networks 5G Registered Trend API
Where this information came from

This is an independent, third-party profile of Palo Alto Networks Data Security Settings API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.