Aqua CSPM is based on a REST API that powers all of its core logic. Nearly all of this API can be accessed via an API key, without using the Aqua user interface.

API keys

Refer to Generating a CSPM API Key and Secret.

API key permissions

API key permissions allow you to control the specific endpoints and provide granular control. In addition to general permissions, additional restrictions such as IP address restriction and group restriction can be imposed to limit the scope of the API keys. Refer to Controlling API Key Permissions for usage information.

Accessing API documentation

The Aqua API is well-documented and includes detailed code samples and response data. It can be accessed on

API code samples

You can find sample code and scripts in our GitHub repository.