Create an API connector with generative AI

Use the SPC Setup Connector skill to help you automatically complete configuration steps 3-5 in the Connector builder in the Security Posture Control Workspace.

Before you begin

To view and use the generative AI skills agentic workflows in the Unified Security Exposure Management you must upgrade to Unified Security Exposure Management. See Unified Security Exposure Management release notes for more information.

The SPC Setup Connector skill is included with Now Assist for Vulnerability Response and the skill is activated by default. For more information about configuring this skill, see Configure a generative AI skill.

Important:

This Now Assist skill is turned on by default. The skill will be automatically available to appropriate role users for the application. For more information, see Now Assist skills, agents, and agentic workflows on by default.

You must complete steps one and two in the workspace before you can invoke the SCP Setup Connector Now Assist skill. See Enter metadata and Create connector alias and connection credentials for more information.

Role required: admin

Procedure

1. Navigate to All > Security Posture Control > Connector builder and complete steps 1 and 2, if not already completed.
2. In step 3, select Use Now Assist.
3. Fill in the fields.
   Note:

   An error is displayed if the API document URL is not supported, or it is not related to asset listing data.

   Field	Description
   API Document Link	Enter the URL for the vendor that has API information you want to use, for example, https://developer.yourvendor.com/documentation/api/assets.
   API Endpoint (Optional)	You might prefer to use this field if the API page has too many details, or if it's a PDF, or if it's in JASON and not HTML format. You can add an endpoint to a base URL. For example, you have https://developer.yourvendor.com. Locate the endpoint you want in the API documentation (documentation/api/assets) and enter it in this field.

4. Select Set it up for me.

   The Now Assist skill automatically selects a template, provides input parameters, tests the API connection, and maps parameters.

   The process takes a few moments and progress is displayed in the modal.

   Now Assist generates a response sample and schema based on the API documentation you uploaded in the previous step. You must check the sample response and schema for accuracy and the mapping for accuracy before you validate your connector and publish it.

   Note:

   A warning message is displayed that prompts you to review and verify that all the information generated by the Now Assist skill is correct.

   An error message is displayed if the Now Assist skill cannot provide input, for example, if it cannot select a template based on the information you provided. If you see an error message, you cannot select Apply configuration and proceed to the next step.

5. Select Apply configuration.
   The Select template step in the Connector builder is displayed and a template had been automatically selected.
6. Select Save and continue.
   The Provide inputs step is displayed. The following information is automatically populated in the form for you based on the vendor documentation that you provided.

   Note:

   You do not need to select Get sample response.

   • API sample response
   • API endpoint path
   • Query parameters
   • Header parameters
   • Pagination parameters
7. Review the information and edit the fields as needed.
8. Select Save and continue after you have reviewed the values.

   If you do not see an API sample, or an error is displayed, follow the prompts in the message to enter any missing values.

   The Map response step is displayed after a successful import. The input parameters have been mapped automatically to Security Posture Control (SPC) attributes and policies from the sample data generated by your connector.

   Verify the values by reviewing the API response sample for SPC attributes and the API response schema sample for API attributes in the Reference window.

   This sample data is aggregated, and the mapping is editable. Additionally, you can and create custom attributes for your SPC policies as needed.

   For more information about mapping that includes combining values to populate a single field, see Map response in the Security Posture Control product documentation.

9. See validate your connector in the Security Posture Control product documentation for more information about the validation step, publishing your connector, and completing the process.