Configure the Wiz Vulnerability Response Integration

Configure the integration in your Wiz service account and assign roles in your ServiceNow AI Platform instance.

Before you begin

You must configure the integration tile in your Wiz account that was created for this integration with the permissions pre-selected. See the Wiz product documentation for more information.

The following Wiz API permissions are required:

• [read:resources]
• [read:host_configuration]
• [read:issues read:threat_issues]
• [read:cloud_configuration]
• [read:vulnerabilities]

Role required:

• admin to assign roles in your ServiceNow AI Platform instance.

Procedure

1. Assign roles to users for the Wiz integration and for the applications that support the in integration in your ServiceNow AI Platform instance.
   1. Navigate to User administration > Users
   2. Assign the following roles.
      • sn_vul.vulnerability_admin to configure the Vulnerability Response and Container Vulnerability Response applications.
      • sn_vulc.admin
      • sn_vul_wiz.configure_integration to set up the integration.
      • sn_vul_wiz.read_integration for the users in your organization who you want to view data and records for this integration.
   3. See User administration for more information about creating users and managing roles.
2. As a user with the sn_vul_wiz.configure_integration role, navigate to All > Wiz Vulnerability Integration > Administration > Configuration in your instance.
3. Fill in the fields.

   Field	Description
   Integration instance	Vulnerability Response Integration with Wiz.
   Auth URL	Authentication URL you entered in your Wiz environment.
   Api URL	API URL you entered in your Wiz environment.
   Client ID	Client ID you want to use for this integration you entered in your Wiz environment.
   Client Secret	Client Secret you want to use for this integration you entered in your Wiz environment.

4. Select Save and test.
   A message is displayed if the credentials have been saved and validated successfully.
5. Navigate to All > Wiz Vulnerability Integration > Administration > Integrations.
6. Verify the integrations you want to import data with are activated (Active column set to true).
7. Select a record to open it and activate or deactivate the integrations.
8. Optional: Select the Schedule tab to modify the run schedule.

   By default, all the integrations except the Host Test Results Integration are set to run daily. The Host Test Results Integration is set to run on-demand.

9. Select Update to save your changes.
10. See Identify Wiz Resource types for the Wiz Vulnerability Integrations to identify the asset types that you want to import.