Using the Security Compliance Management API
The Security Compliance Management API allows you to automate actions, retrieve Security Compliance Management data, and share Security Compliance Management data with other groups and tooling. To use the API, you first must create a personal access token, after which you can access API endpoints.
Puppet’s open and integrated approach ensures data sharing with enterprise tools (such as risk management, systems of records, etc.), improves productivity and cross-team collaboration leveraging the same data to ensure transparency.
-
Create and manage personal access tokens as a user
As a Security Compliance Management user, you can create a personal access token for yourself from your user profile in the Security Compliance Management UI. The endpoints you can access with your token are dependent on your user role’s permissions at the time you call the Security Compliance Management API. -
Manage personal access tokens as an admin
As a Security Compliance Management admin, you can view details of personal access tokens created by all Security Compliance Management users. You can revoke tokens on behalf of other Security Compliance Management users, but you cannot create a token for another user. -
Extract Compliance results using the Security Compliance Management API
If you have a personal API access token and the correct user permissions, you can use the Security Compliance Management API to extract compliance results from Puppet Security Compliance Management and share those results with your organization’s other third party tooling. -
Export Security Compliance Management data using the SCM API
If you have a personal API access token and the correct user permissions, you can use the SCM Exports API to create, retrieve, download, and delete exports of data from Security Compliance Management. -
Synchronize inventory with Puppet Enterprise using the Security Compliance Management API
If you have a personal API access token and the correct user permissions, you can use the Security Compliance Management Inventory API to initiate a Puppet Enterprise inventory sync.