Wiz CSPM Instructions

1. Base URL: API endpoint URL of the format https://api.<TENANT_DATA_CENTER>.<ENVIRONMENT>. For example, https://api.us44.app.wiz.io/graphql.
   • You can find this in your Wiz dashboard. At the top right of your Wiz portal, click the user icon > Tenant Info (direct link).
   • Copy your API Endpoint URL.
2. Client ID: OAuth2 based Client ID.
3. Client Secret: OAuth2 based Client Secret.

​

Steps to obtain Wiz Base URL

1. Navigate to your user profile and copy the API Endpoint URL.

​

Steps to obtain Client ID and Client Secret:

1. In the Wiz dashboard Navigate to Settings > Service Accounts.
2. Click Add Service Account.
3. Name the new service account, for example: Leen CSPM Integration.
4. If you desire, narrow the scope of this service account to specific projects.
5. Select the below permissions and click Add Service Account.
   • read:issues
   • read:controls
   • read:security_frameworks
   • read:cloud_configuration_rule
   read:cloud_configuration_rule lets Leen read the Rego behind controls built from a Wiz cloud configuration rule, which it returns as the rule’s logic. Tenants that only use Security Graph controls do not need it.
6. Copy the Client ID and Client Secret.
   Record your client secret somewhere safe. After the credential window is closed, the secret is no longer visible.