Credentials: Lacework CSPM

Go to the Lacework Console and navigate to Users page. (Settings -> Access Control -> Users)

Click on the Add User button. You will see the following screen.

Change the User Type to Service User, provide a name(eg. leen-service-user) and click on the Next button.

Add one user group called Account read-only user and click on the Save button.

From the list of users on the Users page(Setting -> Access Control -> Users) under Account level locate the user you just created and click on the Enable button.

Navigate to Service user API Keys tab. (Settings -> Configuration -> API Keys -> Service user API Keys)

Locate the service user you just created and from the tripple dot menu click on the Download button to download the API key file.

This API json file will have following structure:

{
  "keyId": "ABC...123",
  "secret": "_ab12...34cd",
  "account": "your-company.lacework.net"
  // "subAccount": "optional: subaccount123"
}

Enter these keys into the Lacework CSPM connector in their respective fields. Eg, key_id, secret, account and optionally sub_account