CloudWatch pipelines configuration for Netskope

Collects security events and alerts from Netskope using REST API v2 token-based authentication.

Configure the Netskope source with the following parameters:

source:
  netskope_cloudexchange:
    tenant_url: "<<your-tenant-url>>"
    range: "P7D"
    authentication:
      api_token: "${{aws_secrets:netskope-account-credentials:apiToken}}"

Parameters

tenant_url (required)

Netskope tenant URL (for example, mycompany.goskope.com).

authentication.api_token (required)

REST API v2 token generated from the Netskope Service Account under RBACv3.

range (optional)

The time range for log collection. Uses ISO 8601 duration format (for example, P7D for the last 7 days, PT21H for 21 hours). Default is 0 hours, and the maximum is 90 days.