# Plerion, Simplify Cloud Security - documentation > Plerion, Simplify Cloud Security - documentation - [Welcome](https://docs.plerion.com/index.md): Plerion documentation - [Overview](https://docs.plerion.com/guides/getting-started/index.md) - [User management](https://docs.plerion.com/guides/administration/user-management.md): Control user access in Plerion with role-based permissions across Organization and Tenant levels. - [Tenant API keys](https://docs.plerion.com/guides/administration/api-keys.md): Create tenant API keys, give each one a role, and see exactly which API operations it can call - [Organization API keys](https://docs.plerion.com/guides/administration/organization-api-keys.md): Create and manage organization-scoped API keys for the Plerion organization API - [Azure single sign-on](https://docs.plerion.com/guides/administration/sso/azure.md): Set up Microsoft Entra ID single sign-on (SSO) with Plerion using SAML and role-based access control (RBAC). - [Okta single sign-on](https://docs.plerion.com/guides/administration/sso/okta.md): Set up Okta single sign-on (SSO) with Plerion using SAML and role-based access control (RBAC). - [Partner SSO](https://docs.plerion.com/guides/administration/sso/partner-sso.md): Enable partners to provide single sign-on (SSO) access to their customers through their own SaaS portal using JWT-based authentication. - [GitHub single sign-on](https://docs.plerion.com/guides/administration/sso/github.md): Sign in to Plerion using your GitHub account with OAuth-based single sign-on - [Google single sign-on](https://docs.plerion.com/guides/administration/sso/google.md): Set up Google Workspace single sign-on (SSO) with Plerion using SAML and group-based role mapping - [User groups](https://docs.plerion.com/guides/administration/user-groups.md): Grant roles to a group of users at once, and let your identity provider manage the membership over SCIM - [SCIM provisioning](https://docs.plerion.com/guides/administration/scim/overview.md): Provision users and user groups automatically from your identity provider using SCIM 2.0 - [SCIM provisioning with Okta](https://docs.plerion.com/guides/administration/scim/okta.md): Configure the Okta SCIM connector to provision Plerion users and user groups automatically - [SCIM provisioning with Microsoft Entra ID](https://docs.plerion.com/guides/administration/scim/entra.md): Configure automatic provisioning in Microsoft Entra ID to manage Plerion users and user groups - [AWS integration overview](https://docs.plerion.com/guides/integrations/aws/aws-account/overview.md): Enable CSPM, CIEM, and CWPP for your AWS environment by connecting accounts to Plerion. - [AWS security review](https://docs.plerion.com/guides/integrations/aws/aws-account/security-review.md): The Plerion access model, IAM permissions, deployment options, and data handling for teams to review before onboarding - [Getting started with an AWS account](https://docs.plerion.com/guides/integrations/aws/aws-account/getting-started-with-aws-account.md): Learn how to connect a single Amazon Web Services (AWS) account to Plerion for CSPM, CIEM, and CWPP capabilities. - [Updating an AWS account](https://docs.plerion.com/guides/integrations/aws/aws-account/updating-aws-account.md): Update an onboarded AWS account to apply new permissions, enable CWPP, or refresh integration resources. - [AWS troubleshooting](https://docs.plerion.com/guides/integrations/aws/aws-account/troubleshooting.md): Troubleshoot common errors in AWS account onboarding, workload security (CWPP) scan, and appliance lifecycle in Plerion. - [Deploy Plerion with Terraform](https://docs.plerion.com/guides/integrations/aws/terraform/getting-started-with-terraform.md): Onboard a single AWS account to Plerion using a native Terraform template that provisions the IAM role and policies and registers the integration - [Plerion-managed scanning overview](https://docs.plerion.com/guides/integrations/aws/managed-scanning/overview.md): Run CWPP workload scans with appliances hosted entirely in Plerion-owned AWS accounts, so you only grant a cross-account role and skip all networking setup - [Getting started with Plerion-managed scanning](https://docs.plerion.com/guides/integrations/aws/managed-scanning/getting-started-with-managed-scanning.md): Enable CWPP for an AWS account using Plerion-managed scanning, where Plerion runs the scanning infrastructure in its own accounts and you only grant access - [AWS service account overview](https://docs.plerion.com/guides/integrations/aws/service-account/overview.md): Learn how Plerion uses a dedicated AWS service account to simplify Cloud Workload Protection Platform (CWPP) deployments with centralized, agentless management. - [Service account prerequisites](https://docs.plerion.com/guides/integrations/aws/service-account/prerequisites.md): Prepare your AWS account for use as a Plerion service account by verifying regions, enabling availability, and ensuring EC2 quotas can support appliance deployment. - [Getting started with an AWS service account](https://docs.plerion.com/guides/integrations/aws/service-account/getting-started-with-aws-service-account.md): Set up a dedicated AWS service account to simplify CWPP deployment, so you can centrally manage appliances, protect workloads across multiple accounts, and gain complete visibility with less effort. - [Linking target accounts to an AWS service account](https://docs.plerion.com/guides/integrations/aws/service-account/linking-target-accounts-to-service-account.md): Link AWS target accounts to your service account so CWPP appliances can scan workloads centrally across accounts. - [Updating an AWS service account stack](https://docs.plerion.com/guides/integrations/aws/service-account/updating-aws-service-account-stack.md): Learn how to update an AWS service account stacks to maintain permissions and regional infrastructure for CWPP scanning. - [Minimum AWS permissions to launch Plerion CloudFormation stack](https://docs.plerion.com/guides/integrations/aws/additional-aws-configurations/minimum-permissions-needed-to-launch-stack.md): Attach this IAM policy to a role or user to deploy the Plerion CloudFormation stack for CSPM, CIEM, and CWPP. - [Delegate AWS Organizations read access to a member account](https://docs.plerion.com/guides/integrations/aws/additional-aws-configurations/organizations-delegated-administrator.md): Grant a member account the AWS Organizations read access Plerion needs to collect account tags, organizational units, and policies - [See resources encrypted with your KMS keys](https://docs.plerion.com/guides/integrations/aws/additional-aws-configurations/provide-plerion-access-to-kms-keys.md): Plerion can't read data you encrypt with your own KMS keys unless you allow it. Allow it for the keys you choose, so Plerion can show and check those resources in full. - [Scan AgentCore runtimes deployed from a code zip](https://docs.plerion.com/guides/integrations/aws/additional-aws-configurations/scan-agentcore-runtime-code.md): Share the S3 bucket that holds an AgentCore runtime's code zip so Plerion can scan it for vulnerabilities, secrets and an SBOM. - [Macie integration](https://docs.plerion.com/guides/integrations/aws/additional-aws-configurations/macie-integration.md): Enrich S3 bucket asset context in Plerion with sensitive data findings from AWS. - [Cloud Detection and Response integration](https://docs.plerion.com/guides/integrations/aws/additional-aws-configurations/cdr-integration.md): Detect and respond to cloud events in near real-time with Plerion CDR, and trigger alerts through Workflows. - [Link existing Plerion organization to AWS Marketplace](https://docs.plerion.com/guides/integrations/aws/additional-aws-configurations/link-existing-organization.md): Link your existing Plerion organization to an AWS Marketplace subscription for billing and subscription management. - [Azure CWPP prerequisites](https://docs.plerion.com/guides/integrations/azure/prerequisites.md): Prepare your Azure environment with the required quotas and naming policies before enabling workload security in Plerion. - [Getting started with Microsoft Entra ID](https://docs.plerion.com/guides/integrations/azure/setting-up-azure-active-directory.md): Integrate Plerion with Microsoft Entra ID to securely connect subscriptions and enable continuous scanning. - [Microsoft Azure subscription](https://docs.plerion.com/guides/integrations/azure/setting-up-azure-subscription.md): Integrate Plerion with Microsoft Azure subscriptions to enable Cloud Security Posture Management (CSPM) and optionally Cloud Workload Protection Platform (CWPP). - [Azure troubleshooting](https://docs.plerion.com/guides/integrations/azure/troubleshooting.md): Troubleshoot errors in Azure subscription onboarding, workload security (CWPP) setup, and appliance lifecycle in Plerion. - [Azure CWPP architecture](https://docs.plerion.com/guides/integrations/azure/azure-cwpp-architecture.md): This document outlines the architecture and Azure deployment process of the Plerion workload security solution. - [Azure workload coverage](https://docs.plerion.com/guides/integrations/azure/azure-cwpp-workload-coverage.md): Which Azure workload types Plerion scans for vulnerabilities, how each one is scanned, and what is not covered - [GCP integration overview](https://docs.plerion.com/guides/integrations/gcp/overview.md): Integrate Plerion with Google Cloud Platform (GCP) to automate scanning for misconfigurations and strengthen cloud security posture across your GCP environment. - [GCP workload scanning overview](https://docs.plerion.com/guides/integrations/gcp/workload-scanning/overview.md): What GCP workload scanning covers, how each workload type is scanned, and what stays inside your Google Cloud organization - [GCP workload scanning prerequisites](https://docs.plerion.com/guides/integrations/gcp/workload-scanning/prerequisites.md): What to have in place before turning on GCP workload scanning: roles, a billing account, APIs, organization policies, and quota - [Getting started with GCP workload scanning](https://docs.plerion.com/guides/integrations/gcp/workload-scanning/getting-started.md): Turn on workload scanning for a GCP organization integration, run the access command, confirm the setup, and find your first results - [How GCP workload scanning works](https://docs.plerion.com/guides/integrations/gcp/workload-scanning/how-scanning-works.md): Step-by-step mechanics of each GCP workload scanning flow, the identities involved, encrypted disks, cleanup, and limits - [GCP workload scanning access and permissions](https://docs.plerion.com/guides/integrations/gcp/workload-scanning/access-and-permissions.md): Every role, permission, IAM condition, and identity GCP workload scanning creates, what each is for, and when it exists - [GCP workload scanning coverage](https://docs.plerion.com/guides/integrations/gcp/workload-scanning/coverage.md): Which GCP workloads Plerion scans, which it skips and why, and the conditions that decide whether a given asset is scanned - [Managing GCP workload scanning](https://docs.plerion.com/guides/integrations/gcp/workload-scanning/managing-workload-scanning.md): Change what GCP workload scanning covers, re-run the access command, understand and control cost, and turn scanning off or remove it - [GCP workload scanning FAQ](https://docs.plerion.com/guides/integrations/gcp/workload-scanning/faq.md): Answers to common setup, coverage, security, and cost questions about GCP workload scanning - [Overview](https://docs.plerion.com/guides/integrations/kubernetes/overview.md): Integrate Kubernetes with Plerion to manage cluster posture (KSPM), scan workloads for vulnerabilities, and deploy collectors for continuous visibility. - [Install collector manager](https://docs.plerion.com/guides/integrations/kubernetes/collector-manager/installation/installation.md): Install Plerion's collector manager in your Kubernetes cluster using Helm and validate that it is running correctly. - [Validate Helm release](https://docs.plerion.com/guides/integrations/kubernetes/collector-manager/installation/installation-validation.md): Verify that Plerion's collector manager has been installed successfully and is running with the correct configuration. - [Leader election](https://docs.plerion.com/guides/integrations/kubernetes/collector-manager/installation/ensuring-leader-election.md): Ensure that only one collector manager pod is active at a time to maintain high availability. - [Helm chart options](https://docs.plerion.com/guides/integrations/kubernetes/collector-manager/installation/helm-chart-options.md): Customize the deployment of Plerion's collector manager by setting Helm chart values directly or with a values.yaml file. - [Collector manager permissions overview](https://docs.plerion.com/guides/integrations/kubernetes/collector-manager/permissions/collector-manager-permissions-overview.md): You can find the permissions configuration for the Plerion Collector Manager. This configuration includes definitions for service accounts, cluster roles, cluster role bindings, roles, and role bindings, allowing you to understand the precise permissions granted to the collector-manager. - [Allow access to managed registries](https://docs.plerion.com/guides/integrations/kubernetes/collector-manager/permissions/allow-access-to-managed-registries.md) - [Upgrade and rollback](https://docs.plerion.com/guides/integrations/kubernetes/collector-manager/upgrade-rollbacks.md): Upgrade Plerion's collector manager to a newer version or roll back to a previous release while preserving configuration. - [Uninstall](https://docs.plerion.com/guides/integrations/kubernetes/collector-manager/uninstall.md): Remove Plerion's collector manager from your Kubernetes cluster. - [Metrics](https://docs.plerion.com/guides/integrations/kubernetes/collector-manager/metrics.md): Monitor collector manager metrics using Prometheus-style endpoints to track performance, collection success, and failures. - [Troubleshooting collector manager](https://docs.plerion.com/guides/integrations/kubernetes/collector-manager/troubleshooting.md): Resolve issues when Plerion's collector manager is not in a Ready state or when you need to retrieve logs for diagnosis. - [Enable verbose logging](https://docs.plerion.com/guides/integrations/kubernetes/collector-manager/troubleshooting/enable-verbose-logging.md): Enable verbose logging in Plerion's collector manager to capture detailed diagnostic information for troubleshooting. - [Plerion Code Security](https://docs.plerion.com/guides/integrations/plerion-code-security.md): Automatically scan code repositories for infrastructure as code (IaC) and software composition analysis (SCA) issues with Plerion Code Security. - [GitHub](https://docs.plerion.com/guides/integrations/github.md): Integrate Plerion Code Security with GitHub to scan repositories for infrastructure as code (IaC) issues and software composition analysis (SCA) issues directly in your development workflow. - [GitLab](https://docs.plerion.com/guides/integrations/gitlab.md): Integrate Plerion Code Security with GitLab to scan repositories for infrastructure as code (IaC) issues and software composition analysis (SCA) issues directly in your development workflow. - [Bitbucket](https://docs.plerion.com/guides/integrations/bitbucket.md): Integrate Plerion Code Security with Bitbucket to scan repositories for infrastructure as code (IaC) issues and software composition analysis (SCA) issues directly in your development workflow. - [Azure DevOps](https://docs.plerion.com/guides/integrations/azure-devops.md): Integrate Plerion Code Security with Azure DevOps to scan repositories for infrastructure as code (IaC) issues and software composition analysis (SCA) issues directly in your development workflow. - [Drata](https://docs.plerion.com/guides/integrations/drata.md): Integrate Plerion with Drata to automatically send daily evidence for your compliance frameworks. - [Jira Security](https://docs.plerion.com/guides/integrations/jira-security.md): Integrate Plerion with Jira Security to push vulnerabilities directly into the Jira security page, enabling teams to collaborate on issues. - [AWS Security Hub](https://docs.plerion.com/guides/integrations/securityhub.md): Integrate Plerion with AWS Security Hub to send alerts as findings for centralized visibility, compliance, and security posture management. - [Vanta](https://docs.plerion.com/guides/integrations/vanta.md): Integrate Plerion with Vanta to automatically send vulnerabilities into your compliance workflows. - [Microsoft Sentinel](https://docs.plerion.com/guides/integrations/sentinel.md): Integrate Plerion with Microsoft Sentinel to automatically send alerts as incidents for centralized security monitoring and investigation. - [Email](https://docs.plerion.com/guides/integrations/email.md): Integrate Plerion with Email to receive automated alerts directly in your inbox. - [Slack](https://docs.plerion.com/guides/integrations/slack.md): Integrate Plerion with Slack to send alerts to a channel via Incoming Webhooks, keeping your team informed in real time. - [Amazon SQS](https://docs.plerion.com/guides/integrations/sqs.md): Integrate Plerion with Amazon SQS to send alerts for reliable, scalable processing with optional KMS encryption. - [Microsoft Teams](https://docs.plerion.com/guides/integrations/teams.md): Integrate Plerion with Microsoft Teams to send automated alerts to your channels based on defined triggers and parameters. - [ClickUp](https://docs.plerion.com/guides/integrations/clickup.md): Integrate Plerion with ClickUp to automatically create tasks from alerts, helping your team manage tasks without manual effort. - [Jira](https://docs.plerion.com/guides/integrations/jira.md): Integrate Plerion with Jira to automatically create and track findings, vulnerabilities, and risks, helping your team manage work in Atlassian’s project management platform. - [Linear](https://docs.plerion.com/guides/integrations/linear.md): Integrate Plerion with Linear to automatically create and track issues from alerts, helping your team manage work in Linear’s project management platform. - [ServiceNow](https://docs.plerion.com/guides/integrations/servicenow.md): Integrate Plerion with ServiceNow to automatically create and update incidents, streamlining IT service management (ITSM) workflows and reducing manual effort. - [PagerDuty](https://docs.plerion.com/guides/integrations/pagerduty.md): Integrate Plerion with PagerDuty to automatically create incidents from alerts, streamline on-call response, and keep teams in their incident management workflow. - [Webhook](https://docs.plerion.com/guides/integrations/webhook.md): Integrate Plerion with custom webhooks to deliver alerts directly to your external web servers for flexible automation and workflows. - [Plerion MCP server](https://docs.plerion.com/guides/integrations/mcp.md): Connect Claude, Claude Code, Cursor, VS Code, Windsurf, Zed, Kiro CLI, and Codex CLI to your Plerion tenant over the Model Context Protocol - [Alerts](https://docs.plerion.com/guides/platform/alerts-overview.md): Learn how Plerion alerts work and deliver them through the dashboard, Email, Slack, Jira, or Sentinel. - [Assets](https://docs.plerion.com/guides/platform/assets/overview.md): Use the Assets dashboard to view, filter, and investigate all resources discovered across your connected cloud environments. - [Supported AWS cloud services](https://docs.plerion.com/guides/platform/assets/supported-cloud-services/aws-services.md): List of AWS services and resource types supported by Plerion for asset discovery. - [Supported Azure cloud services](https://docs.plerion.com/guides/platform/assets/supported-cloud-services/azure-services.md): List of Azure services and resource types supported by Plerion for asset discovery. - [Supported GCP cloud services](https://docs.plerion.com/guides/platform/assets/supported-cloud-services/gcp-services.md): List of GCP services and resource types supported by Plerion for asset discovery. - [Asset groups](https://docs.plerion.com/guides/platform/asset-groups.md): Organize and manage assets in Plerion using asset groups to simplify filtering, reporting, and analysis. - [Integration groups](https://docs.plerion.com/guides/platform/integration-groups.md): Group integrations by their AWS Organizations account tags or by tags you define in Plerion, and filter by group - [Auto stack update](https://docs.plerion.com/guides/platform/auto-stack-update.md): Automatically keep your Plerion CloudFormation stack up to date with secure, controlled updates that reduce operational overhead while maintaining full customer visibility and control. - [Environment classification](https://docs.plerion.com/guides/platform/environments.md): Use environment classifications to label your cloud integrations as Production or Non-production and filter data across Plerion. - [Well-architected workloads](https://docs.plerion.com/guides/platform/well-architected-workload.md): Use Plerion to create and manage AWS Well-architected workloads, with AutoFill powered by findings from your asset groups. - [Compliance frameworks](https://docs.plerion.com/guides/platform/compliance-frameworks.md): Use Plerion compliance frameworks to track regulatory standards such as ISO 27001, SOC 2, and CIS Benchmarks across your cloud environments. - [Custom dashboards](https://docs.plerion.com/guides/platform/custom-reports/overview.md): Build dashboards from your findings, assets, vulnerabilities, and compliance data, and set them as the page people land on - [How to create a custom dashboard](https://docs.plerion.com/guides/platform/custom-reports/how-to-create-a-custom-report.md): Build a dashboard from widgets, name it, and set it as the page your team lands on - [Workload security (CWPP)](https://docs.plerion.com/guides/platform/cwpp/overview.md): Use workload security in Plerion, also known as Cloud Workload Protection Platform (CWPP), to scan workloads for vulnerabilities and prioritize risks across virtual machines, containers, images, EC2 instances, Lambda functions, and code. - [Vulnerabilities](https://docs.plerion.com/guides/platform/cwpp/scanning-coverage/vulnerabilities.md): Plerion's CWPP scanner will report on vulnerabilities from the following software components. - [Secrets and sensitive data](https://docs.plerion.com/guides/platform/cwpp/scanning-coverage/secrets.md) - [Software Bill of Materials (SBOM)](https://docs.plerion.com/guides/platform/cwpp/scanning-coverage/sbom.md) - [Workload scanning policy](https://docs.plerion.com/guides/platform/cwpp/workload-scanning-policy.md): Configure workload scan frequencies across environments and exposure levels to align scanning with operational needs. - [Vulnerability auto-triage](https://docs.plerion.com/guides/platform/cwpp/vulnerability-auto-triage.md): Automatically lower the severity of vulnerabilities whose weakness type limits the harm they can cause - [Workload security FAQs](https://docs.plerion.com/guides/platform/cwpp/faq.md) - [Resource access grants](https://docs.plerion.com/guides/platform/resource-access-grants/overview.md): View every grant that gives a principal access to your AWS resources, classified by scope, origin, and trust - [External access](https://docs.plerion.com/guides/platform/resource-access-grants/external-access.md): Review the resource access grants that reach principals outside your AWS organization - [Access review](https://docs.plerion.com/guides/platform/resource-access-grants/access-review.md): Assign a grantee, record a decision, trust a grant until its review date, and keep a full audit history - [Trusted principals](https://docs.plerion.com/guides/platform/resource-access-grants/trusted-principals.md): Manage the external principals you trust so Plerion stops flagging their grants - [Untrusted external access findings](https://docs.plerion.com/guides/platform/resource-access-grants/findings.md): Understand how grants to untrusted external principals surface as findings you can prioritize and resolve - [Coverage](https://docs.plerion.com/guides/platform/resource-access-grants/coverage.md): The AWS resource types and sharing mechanisms Plerion evaluates, and how Resource Control Policies change what you see - [Agent security](https://docs.plerion.com/guides/platform/agent-security.md): See the AI agents running in your AWS accounts, how they are configured, and what puts them at risk - [Top risks](https://docs.plerion.com/guides/platform/top-risks.md): Identify, prioritize, and act on the cloud security risks that matter most to your organization, - [Findings](https://docs.plerion.com/guides/platform/findings-overview.md): Understand, filter, download, and exempt findings in Plerion to manage risks across your cloud environments. - [Vulnerabilities](https://docs.plerion.com/guides/platform/vulnerabilities.md): View, filter, and exempt software vulnerabilities detected across your cloud workloads - [Overview](https://docs.plerion.com/guides/platform/plerion-risk-score/overview.md): Understand how the Plerion Risk Score (PRS) quantifies risks across assets, findings, and vulnerabilities in your cloud environment. - [Asset risk score](https://docs.plerion.com/guides/platform/plerion-risk-score/asset-risk-score.md): Learn how the Plerion Risk Calculator (PRC) determines an asset's risk score based on public exposure, contexts, findings, and vulnerabilities. - [Integration and tenant risk score](https://docs.plerion.com/guides/platform/plerion-risk-score/integration-and-tenant-risk-score.md): Learn how Plerion calculates integration and tenant risk scores by aggregating asset risk scores into banded ranges. - [Managing your risk scores](https://docs.plerion.com/guides/platform/plerion-risk-score/managing-risk-scores.md): Learn strategies to reduce your asset, integration, and tenant risk scores in Plerion by remediating findings and addressing high-risk assets. - [Workflows](https://docs.plerion.com/guides/platform/workflows.md): Use workflows in Plerion to automate alerting, define conditions on assets, findings, or vulnerabilities, and send notifications to third-party tools like email, Slack, Jira, PagerDuty, and more. - [Quick start with Plerion API](https://docs.plerion.com/api-reference/index.md): This section describes how to quickly get started with the Plerion API using curl. For a more detailed guide, see the sections below. - [API categories](https://docs.plerion.com/api-reference/api-categories.md): This page provides a comprehensive overview of all Plerion API categories. Each category contains related endpoints for specific functionality within the Plerion platform. Understand what each API category does and access specific endpoints. - [List findings](https://docs.plerion.com/api-reference/findings/list.md): Use the list findings API to filter findings across the tenant with many options from Provider, Service, Detection, Severity, Integration, etc. By default all `PASSED` and `FAILED` findings are returned. To list only failed findings filter by `statuses=FAILED` - [List alerts](https://docs.plerion.com/api-reference/alerts/list.md): Use the list alerts API to get alerts for the tenant. - [Get the tenant's external ID](https://docs.plerion.com/api-reference/aws-integration/get-external-id.md): Use the API to get the external ID of the tenant. The external ID is fixed for a tenant and used for cross-account access to AWS role. Read more about External Id purpose. ```b… - [Create an onboarding token for a new integration](https://docs.plerion.com/api-reference/aws-integration/generate-temporary-token.md): Use the API to generate a temporary token that grants restricted access to a small set of Plerion APIs. - [Get the onboarding CloudFormation template](https://docs.plerion.com/api-reference/aws-integration/get-cloudformation-template.md): Use the API to get the CloudFormation template required for creating / updating AWS integrations in Plerion. ```bash curl https://au.api.plerion.com/v1/tenant/cloudformation-templates?type=AWSAccount -H "Authorization: Bearer $PLERION_API_KEY" ``` - [Get this tenant](https://docs.plerion.com/api-reference/tenant/get.md): Use the get tenant details API to retrieve information about the tenant including tenant ID, organization ID, name, creation date, last updated date, and current risk score. - [Get what this key can call](https://docs.plerion.com/api-reference/tenant/discover.md): Use the discover API to learn which operations the calling key can call. The response is this API reference as an OpenAPI 3.1 document limited to the key's role: operations the role cannot call are left out, and each remaining operation carries the permission that authorizes it under `x-plerion-acti… - [Get this tenant's usage](https://docs.plerion.com/api-reference/tenant/usage.md): Use the get tenant usage API to get the usage details of the tenant. The API retrieves the total consumed Plerion units for the tenant for the specified period and additional information regarding whether the limit has been exceeded. - [List inbound integrations](https://docs.plerion.com/api-reference/integrations/list-inbound-integrations.md): Use the list integrations API to list all inbound integrations that have been added across the tenant. - [Replace an integration's user-defined tags](https://docs.plerion.com/api-reference/integrations/replace-user-defined-tags.md): Replace the tags you define on an inbound integration in Plerion. Send the full list; an empty list removes them all. These tags feed integration groups together with the tags read from the cloud account, and a tag you define here replaces the cloud account tag with the same key. Prefer tagging the… - [Upload infrastructure code for scanning](https://docs.plerion.com/api-reference/code-security/upload-iac.md): Use Plerion Code security IaC to scan for security vulnerabilities and compliance issues. - [List code scans](https://docs.plerion.com/api-reference/code-security/list-scans.md): Retrieve all the scans for the tenant. - [List a code scan's findings](https://docs.plerion.com/api-reference/code-security/list-findings.md): Retrieve all the findings for a scanId - [List a code scan's vulnerabilities](https://docs.plerion.com/api-reference/code-security/list-vulnerabilities.md): Retrieve all the Vulnerabilities for a scanId - [List compliance frameworks](https://docs.plerion.com/api-reference/compliance-frameworks/list.md): Use the list compliance frameworks API to list compliance frameworks across the tenant along with the compliance posture for each framework as well as the total compliance posture of the tenant. - [Download a compliance report](https://docs.plerion.com/api-reference/compliance-frameworks/download-report.md): Use the download compliance framework API to receive a pre-signed URL to download a compliance framework summary report for an integration within the tenant. This URL will be valid for 1 hour. To download the report, use `curl` or any other tool of your choice. - [Request a compliance report](https://docs.plerion.com/api-reference/compliance-frameworks/request-a-framework-report.md): Starts the generation of a compliance framework report for the specified integration. Once requested, poll using the download report endpoint. - [List assets](https://docs.plerion.com/api-reference/assets/list.md): Use the list assets API to filter assets across the tenant with many options from Provider, Service, Severity, Integration, etc. By default all assets are returned. - [Get an asset](https://docs.plerion.com/api-reference/assets/get.md): Retrieve a specific asset by its ID within a tenant. This endpoint allows you to get detailed information about a particular asset, including optional raw data if requested. - [Get an asset's SBOM](https://docs.plerion.com/api-reference/assets/get-sbom.md): Retrieve the Software Bill of Materials (SBOM) for a specific asset identified by its ID within a tenant. This endpoint returns a URL that allows you to download the SBOM file. Asset IDs that contain a forward slash, such as GCP Cloud Functions, cannot be passed in the path; use GET /v1/tenant/asset… - [Get an SBOM by asset ID](https://docs.plerion.com/api-reference/assets/get-sbom-by-asset-id.md): Retrieve the Software Bill of Materials (SBOM) for a specific asset, identified by its asset ID passed as a query parameter. Use this endpoint instead of GET /v1/tenant/assets/{assetId}/sbom when the asset ID contains a forward slash, such as GCP Cloud Functions. - [List asset groups](https://docs.plerion.com/api-reference/asset-groups/list.md): Retrieve a list of asset groups within the tenant. By default, 20 asset groups are returned per request. - [Create an asset group](https://docs.plerion.com/api-reference/asset-groups/create.md): Create a new asset group within the tenant. You can create an asset group using filters available in Plerion or by using your existing AWS resource group. - [Get an asset group](https://docs.plerion.com/api-reference/asset-groups/get.md): Retrieve a specific asset group by its ID within a tenant. This endpoint allows you to get detailed information about a particular asset group. - [Delete an asset group](https://docs.plerion.com/api-reference/asset-groups/delete.md): Delete a specific asset group by its ID within a tenant. This endpoint allows you to remove a particular asset group from the tenant. - [Update an asset group](https://docs.plerion.com/api-reference/asset-groups/update.md): Update a specific asset group by its ID within a tenant. This endpoint allows you to update the name and rules of a particular asset group. - [List Well-Architected frameworks](https://docs.plerion.com/api-reference/well-architected-frameworks/list.md): Returns all AWS Well-Architected Frameworks for the tenant, along with individual framework postures and the tenant’s overall Well-Architected posture. - [Download a Well-Architected report](https://docs.plerion.com/api-reference/well-architected-frameworks/download-report.md): Use the download well-architected framework API to obtain a pre-signed URL for downloading a well-architected framework summary report for an integration within the tenant. This URL will be valid for 1 hour. To download the report, use `curl` or any other tool of your choice. - [Request a Well-Architected report](https://docs.plerion.com/api-reference/well-architected-frameworks/request-framework-report.md): Starts the generation of a Well-Architected framework report for the specified integration. Once requested, poll using the download report endpoint. - [List vulnerabilities](https://docs.plerion.com/api-reference/vulnerabilities/list.md): Use the list vulnerabilities API to filter vulnerabilities across the tenant with many options from Organization, Tenant, Integration, Asset, Severity, etc. By default all vulnerabilities are returned. - [List vulnerability exemptions](https://docs.plerion.com/api-reference/vulnerabilities/list-vulnerability-exemptions-in-a-profile.md): Lists all vulnerability exemptions scoped to the given profile with pagination support. - [Create a vulnerability exemption](https://docs.plerion.com/api-reference/vulnerabilities/create-a-vulnerability-exemption-in-a-profile.md): Creates an exemption definition scoped to the given profile. Use it to suppress specific vulnerabilities. - [Get a vulnerability exemption](https://docs.plerion.com/api-reference/vulnerabilities/get-a-vulnerability-exemption-by-id.md): Retrieves a specific vulnerability exemption by its ID. - [Delete a vulnerability exemption](https://docs.plerion.com/api-reference/vulnerabilities/delete-a-vulnerability-exemption-by-id.md): Deletes a specific vulnerability exemption by its ID. - [Update a vulnerability exemption](https://docs.plerion.com/api-reference/vulnerabilities/update-a-vulnerability-exemption-by-id.md): Updates a specific vulnerability exemption by its ID. All fields are optional for partial updates. - [List profiles](https://docs.plerion.com/api-reference/profiles/list.md): Retrieve the tenant's profiles, each with the integrations it applies to. - [Get a detection's exemptions](https://docs.plerion.com/api-reference/detection-exemptions/get.md): Read the exemptions configured for one detection on one profile, together with whether that detection accepts exemptions and which types it accepts. - [Replace a detection's exemptions](https://docs.plerion.com/api-reference/detection-exemptions/replace.md): Replace the whole exemption set for one detection on one profile. The body is the set you want to end up with, so read the current set, change it, and send all of it back. An empty array clears the set; there is no endpoint for a single entry and no exemption ID. - [List risks](https://docs.plerion.com/api-reference/risks/list.md): Use the list risks API to retrieve and filter risks across the tenant. - [Get a risk](https://docs.plerion.com/api-reference/risks/get.md): Use the get risk API to retrieve one risk by its ID. By default the response carries every risk property; use `fields` to select a subset. A risk ID that does not exist answers 200 with an empty `data` object. - [List audit logs](https://docs.plerion.com/api-reference/audit-logs/list.md): Use the list audit logs API to retrieve audit trail information for a tenant with filtering options. By default, all audit logs are returned with a page size of 100. You can filter by date range, user, and operation type. - [List custom checks](https://docs.plerion.com/api-reference/custom-checks/list.md): Retrieve the custom checks defined in the tenant. Supports filtering by asset type and target scope, with cursor-based pagination. - [Create a custom check](https://docs.plerion.com/api-reference/custom-checks/create.md): Create a new custom (rego) check. The created check is returned, including its generated `customCheckId` and initial `version`. - [Get a custom check](https://docs.plerion.com/api-reference/custom-checks/get.md): Fetch a single custom check by its ID. - [Replace a custom check](https://docs.plerion.com/api-reference/custom-checks/update.md): Replace an existing custom check in full. The updated check is returned with an incremented `version`. - [Delete a custom check](https://docs.plerion.com/api-reference/custom-checks/delete.md): Delete a custom check. The check is removed immediately; cleanup of any findings it produced drains asynchronously, so a 202 is returned. - [Start a custom check dry run](https://docs.plerion.com/api-reference/custom-checks/start-dry-run.md): Execute a custom check against live assets in preview mode, without persisting findings or moving compliance state. Returns a `dryRunId`; poll the dry-run status endpoint for results. The check is supplied inline so an unsaved edit can be tested before it is created. - [Get a dry run's status](https://docs.plerion.com/api-reference/custom-checks/get-dry-run-status.md): Poll a dry-run and, once complete, retrieve its preview findings. Findings are returned inline and are never persisted. - [Query metrics](https://docs.plerion.com/api-reference/metrics/query.md): Use the query metrics API to read the time series behind the Plerion dashboards. Name a namespace and one or more of its metric names, a period with an interval and an aggregation, and optionally the integrations, integration groups, asset groups, or environments to restrict the query to. The respon… - [Request a workload scan](https://docs.plerion.com/api-reference/workload-scans/request.md): Use the request workload scan API to scan one workload now instead of waiting for the next scheduled scan. Name the integration and either the Plerion asset ID of the workload or the provider's resource type, region, and ID. Supported resource types are EC2 instances (`ec2:instance`) and AMIs (`ec2:… - [Get a workload scan](https://docs.plerion.com/api-reference/workload-scans/get.md): Use the get workload scan API to read the status of a scan requested with the request workload scan API. Poll it until `status` is `SUCCESSFUL`, `COMPLETED`, `COMPLETED_WITH_ERRORS`, or `FAILED`. - [List AWS access grants](https://docs.plerion.com/api-reference/aws-access-grants/list.md): Retrieve the tenant's active access grants, ordered by `firstObservedAt` descending. Supports filtering by origin, trust status, scope, resource and review state, with cursor-based pagination. - [Get access grant counts](https://docs.plerion.com/api-reference/aws-access-grants/stats.md): Retrieve totals for the tenant's active access grants, including how many are external, untrusted and cross-account. - [List external principals with access](https://docs.plerion.com/api-reference/aws-access-grants/external-principals.md): Retrieve the external principals that hold access to the tenant's resources, each with its number of active grants. Ordered by grant count descending, then alphabetically by principal. - [Get an AWS access grant](https://docs.plerion.com/api-reference/aws-access-grants/get.md): Fetch a single access grant by its ID. - [Review an AWS access grant](https://docs.plerion.com/api-reference/aws-access-grants/update.md): Record a review decision on a single access grant. Send only the fields you want to change. Each accepted request updates the current review state and appends an entry to the grant's review history. - [List the tenant's custom dashboards](https://docs.plerion.com/api-reference/custom-dashboards/list.md): Returns the tenant's custom dashboards with the id each one is referred to by elsewhere, for example as `homeReportId` on a preference. ```bash curl "https://au.api.plerion.com/v1/tenant/custom-reports?perPage=50" -H "Authorization: Bearer $PLERION_API_KEY" ``` - [Get the tenant default home dashboard](https://docs.plerion.com/api-reference/preferences/get-tenant-default.md): Returns the dashboard the tenant falls back to as a home page. Answers 404 `PreferenceNotFound` when no default is set. ```bash curl "https://au.api.plerion.com/v1/tenant/preferences/home-dashboard" -H "Authorization: Bearer $PLERION_API_KEY" ``` - [Set the tenant default home dashboard](https://docs.plerion.com/api-reference/preferences/set-tenant-default.md): Replaces the tenant default with the given custom dashboard. The dashboard must exist in this tenant, otherwise the answer is 400 `ReportNotFound`. Requires a key whose role holds `Tenant:Modify`. ```bash curl -X PUT "https://au.api.plerion.com/v1/tenant/preferences/home-dashboard" \ -H "Authoriza… - [Clear the tenant default home dashboard](https://docs.plerion.com/api-reference/preferences/clear-tenant-default.md): Removes the tenant default, so users without their own or a group home dashboard land on the built-in home page. Answers 404 `PreferenceNotFound` when nothing was set. Requires a key whose role holds `Tenant:Modify`. ```bash curl -X DELETE "https://au.api.plerion.com/v1/tenant/preferences/home-dashb… - [List roles](https://docs.plerion.com/api-reference/roles/list-roles.md): Returns the built-in roles followed by the organization's custom roles, each tagged `builtIn`. Built-in roles carry their permissions derived from the catalog; Organization admin is published as the `*` action. Filter by `scope`, and by `tenantId` for tenant-scoped custom roles. Page with `cursor` a… - [Create a custom role](https://docs.plerion.com/api-reference/roles/create-a-custom-role.md): Creates a custom role. `tenantId` is required for a tenant-scoped role and not accepted for an organization-scoped one; a tenant that is not in your organization answers 404 `TenantNotFound`. Each permission names either `actions` or an `actionGroup` from the permission catalog. An action whose `res… - [Get a role](https://docs.plerion.com/api-reference/roles/get-a-role.md): Returns one built-in or custom role, in the same shape as a list item. Requires an organization API key with read access. - [Update a custom role](https://docs.plerion.com/api-reference/roles/update-a-custom-role.md): Replaces the name, description and permissions of a custom role. The scope and tenant cannot change. The permission rules are the same as for creating a role. A built-in role answers 400 `BuiltinRoleImmutable`. Users and API keys holding the role receive the new permissions within their token lifeti… - [Delete a custom role](https://docs.plerion.com/api-reference/roles/delete-a-custom-role.md): Deletes a custom role that nobody holds. While a user or user group holds it the answer is 409 `RoleHasAssignments`; while a tenant API key holds it, 409 `RoleHasApiKeys`. A built-in role answers 400 `BuiltinRoleImmutable`. Requires an organization API key with read and write access. - [List role assignments](https://docs.plerion.com/api-reference/role-assignments/list-role-assignments.md): Returns the assignments matching exactly one filter: `roleId`, `userId` or `groupId`. A request with no filter answers 400 `MissingAssignmentFilter`. Page with `cursor` and `perPage`; a `cursor` this list did not issue answers 400 `InvalidCursor`. A `userId` listing also includes the built-in roles… - [Assign a role](https://docs.plerion.com/api-reference/role-assignments/assign-a-role.md): Grants a built-in or custom role to a user or a user group. For the built-in Tenant admin and Tenant read-only roles, `tenantId` names the one tenant the grant applies to and is required; for every other role it is not accepted, because a custom role is already bound to its tenant. A tenant that is… - [Revoke a role](https://docs.plerion.com/api-reference/role-assignments/revoke-a-role.md): Removes one assignment. For the built-in Tenant admin and Tenant read-only roles, the `tenantId` query parameter names which tenant's grant to revoke and is required; for every other role it is not accepted. For a user and a built-in role, the grant is removed wherever it is held, including one made… - [Get the permission catalog](https://docs.plerion.com/api-reference/permission-catalog/get-the-permission-catalog.md): Returns every action and action group a role's permissions may name. An action's `level` says whether it belongs in a tenant-scoped or an organization-scoped role, and its `resourceType` says whether it can be narrowed to specific integrations (`integration`) or applies to the whole tenant or organi… - [Get a user's home dashboard](https://docs.plerion.com/api-reference/preferences/get-a-users-home-dashboard.md): The home dashboard this user has in the tenant, before resolution against the other levels. Answers 404 `PreferenceNotFound` when the user has none of its own, and 404 `UserNotFound` when the user is not in the organization. Requires an organization API key with read access. - [Set a user's home dashboard](https://docs.plerion.com/api-reference/preferences/set-a-users-home-dashboard.md): Replaces the user's home dashboard in the tenant. The dashboard must exist in that tenant (`GET /v1/tenant/custom-reports` on a tenant key lists them), otherwise the answer is 400 `ReportNotFound`. Requires an organization API key with read and write access. - [Clear a user's home dashboard](https://docs.plerion.com/api-reference/preferences/clear-a-users-home-dashboard.md): Removes the user's own home dashboard in the tenant, so the next level of the chain applies. Answers 404 `PreferenceNotFound` when there was nothing to clear. Requires an organization API key with read and write access. - [Get a user's navigation](https://docs.plerion.com/api-reference/preferences/get-a-users-navigation.md): The sidebar order and hidden entries this user has in the tenant, before resolution. Answers 404 `PreferenceNotFound` when the user has none of its own. Requires an organization API key with read access. - [Set a user's navigation](https://docs.plerion.com/api-reference/preferences/set-a-users-navigation.md): Replaces the user's sidebar arrangement in the tenant. `order` is the whole arrangement, hidden entries included, and `hidden` names the entries in `order` that are tucked away. `home` is always first and never hidden; the server moves or shows it if a request says otherwise. Keys must come from the… - [Clear a user's navigation](https://docs.plerion.com/api-reference/preferences/clear-a-users-navigation.md): Removes the user's own sidebar arrangement in the tenant, so the next level of the chain applies. Answers 404 `PreferenceNotFound` when there was nothing to clear. Requires an organization API key with read and write access. - [Get a user group's home dashboard](https://docs.plerion.com/api-reference/preferences/get-a-user-groups-home-dashboard.md): The home dashboard this user group has in the tenant, before resolution against the other levels. Answers 404 `PreferenceNotFound` when the user group has none of its own, and 404 `GroupNotFound` when the user group is not in the organization. Requires an organization API key with read access. - [Set a user group's home dashboard](https://docs.plerion.com/api-reference/preferences/set-a-user-groups-home-dashboard.md): Replaces the user group's home dashboard in the tenant. The dashboard must exist in that tenant (`GET /v1/tenant/custom-reports` on a tenant key lists them), otherwise the answer is 400 `ReportNotFound`. Requires an organization API key with read and write access. - [Clear a user group's home dashboard](https://docs.plerion.com/api-reference/preferences/clear-a-user-groups-home-dashboard.md): Removes the user group's own home dashboard in the tenant, so the next level of the chain applies. Answers 404 `PreferenceNotFound` when there was nothing to clear. Requires an organization API key with read and write access. - [Get a user group's navigation](https://docs.plerion.com/api-reference/preferences/get-a-user-groups-navigation.md): The sidebar order and hidden entries this user group has in the tenant, before resolution. Answers 404 `PreferenceNotFound` when the user group has none of its own. Requires an organization API key with read access. - [Set a user group's navigation](https://docs.plerion.com/api-reference/preferences/set-a-user-groups-navigation.md): Replaces the user group's sidebar arrangement in the tenant. `order` is the whole arrangement, hidden entries included, and `hidden` names the entries in `order` that are tucked away. `home` is always first and never hidden; the server moves or shows it if a request says otherwise. Keys must come fr… - [Clear a user group's navigation](https://docs.plerion.com/api-reference/preferences/clear-a-user-groups-navigation.md): Removes the user group's own sidebar arrangement in the tenant, so the next level of the chain applies. Answers 404 `PreferenceNotFound` when there was nothing to clear. Requires an organization API key with read and write access. - [Supported SCIM protocol features](https://docs.plerion.com/api-reference/discovery/supported-scim-protocol-features.md) - [List supported resource types](https://docs.plerion.com/api-reference/discovery/list-supported-resource-types.md) - [Get one resource type](https://docs.plerion.com/api-reference/discovery/get-one-resource-type.md) - [List attribute schemas](https://docs.plerion.com/api-reference/discovery/list-attribute-schemas.md) - [Get one attribute schema](https://docs.plerion.com/api-reference/discovery/get-one-attribute-schema.md) - [List or filter users](https://docs.plerion.com/api-reference/users/list-or-filter-users.md): Returns every user in the organization, whether an identity provider provisioned them, an administrator invited them, or this API created them. Users deleted over SCIM never appear. - [Create or adopt a user](https://docs.plerion.com/api-reference/users/create-or-adopt-a-user.md): Creates a user, or adopts an existing Plerion user whose sign-in email (derived from the payload, case-insensitive) matches. Adoption returns 201 with the existing user's id and sets the SCIM managed marker. It changes nothing else: the roles the user holds stay as they are, and the way they sign in… - [Get one user](https://docs.plerion.com/api-reference/users/get-one-user.md) - [Replace a user](https://docs.plerion.com/api-reference/users/replace-a-user.md): Full replace of writable attributes; omitted writable attributes are cleared. id, groups, and meta are immutable, and so is the user's sign-in email: a write that would move it returns 400 with the scimType mutability, on every user, whether or not this API has written to them before. The first writ… - [Deprovision a user](https://docs.plerion.com/api-reference/users/deprovision-a-user.md): Deactivates the user (same access effects as active=false) and removes it from SCIM reads. The Plerion record and audit history are retained; re-provisioning the same email later restores the original user and id. - [Partially update a user](https://docs.plerion.com/api-reference/users/partially-update-a-user.md): RFC 7644 PatchOp. Setting active to false deactivates the user: sign-in blocked, sessions ended within seconds, the user's API keys revoked. The record and audit history are retained. - [Search users with a request body](https://docs.plerion.com/api-reference/users/search-users-with-a-request-body.md): Allowed with read-level keys. - [List or filter groups](https://docs.plerion.com/api-reference/groups/list-or-filter-groups.md): Returns every user group in the organization, however it was created. Pass excludedAttributes=members for large groups. - [Create a group](https://docs.plerion.com/api-reference/groups/create-a-group.md): Creates a user group. Grant it roles in the Plerion console. - [Get one group](https://docs.plerion.com/api-reference/groups/get-one-group.md) - [Replace a group](https://docs.plerion.com/api-reference/groups/replace-a-group.md): Full replace, including the complete members list. - [Delete a group](https://docs.plerion.com/api-reference/groups/delete-a-group.md): Deletes the group and its memberships. The roles granted to the group stop reaching its members immediately; the members are otherwise unaffected. - [Partially update a group](https://docs.plerion.com/api-reference/groups/partially-update-a-group.md): add, remove, or replace operations on members and other writable attributes. A membership change takes effect on the member's next request; nobody has to sign out. - [Search groups with a request body](https://docs.plerion.com/api-reference/groups/search-groups-with-a-request-body.md): The same filtering as the list endpoint, with the parameters in the body. Works with a read key. - [Plerion CLI](https://docs.plerion.com/cli-reference/introduction.md): A cross-platform command-line interface for the Plerion cloud security platform. - [Installation](https://docs.plerion.com/cli-reference/installation.md): Install the Plerion CLI on macOS, Linux, or Windows. - [Configuration](https://docs.plerion.com/cli-reference/configuration.md): Configure credentials, profiles, regions, and output preferences for the Plerion CLI. - [Output formats](https://docs.plerion.com/cli-reference/output-formats.md): Control how results are displayed with table, JSON, YAML, and text output. - [plerion configure](https://docs.plerion.com/cli-reference/commands/configure.md): Configure Plerion CLI credentials and settings. - [plerion tenant](https://docs.plerion.com/cli-reference/commands/tenant.md): Get tenant information and usage details. - [plerion findings](https://docs.plerion.com/cli-reference/commands/findings.md): List and filter security findings. - [plerion assets](https://docs.plerion.com/cli-reference/commands/assets.md): Query the asset inventory, get details, and retrieve SBOMs. - [plerion asset-groups](https://docs.plerion.com/cli-reference/commands/asset-groups.md): Create, update, list, and delete asset groups. - [plerion alerts](https://docs.plerion.com/cli-reference/commands/alerts.md): View risk-based alerts. - [plerion audit-logs](https://docs.plerion.com/cli-reference/commands/audit-logs.md): View audit logs for tenant operations. - [plerion integrations](https://docs.plerion.com/cli-reference/commands/integrations.md): List cloud integrations. - [plerion risks](https://docs.plerion.com/cli-reference/commands/risks.md): View security risks identified by Plerion. - [plerion vulnerabilities](https://docs.plerion.com/cli-reference/commands/vulnerabilities.md): Query vulnerabilities and manage exemptions. - [plerion compliance-frameworks](https://docs.plerion.com/cli-reference/commands/compliance-frameworks.md): View compliance framework posture and download reports. - [plerion well-architected-frameworks](https://docs.plerion.com/cli-reference/commands/well-architected-frameworks.md): View Well-Architected Framework assessments and download reports. - [plerion iac](https://docs.plerion.com/cli-reference/commands/iac.md): Infrastructure as Code scanning for Terraform, CloudFormation, Kubernetes, and more. - [plerion aws](https://docs.plerion.com/cli-reference/commands/aws.md): AWS integration helpers for external IDs and CloudFormation templates. - [Changelog](https://docs.plerion.com/changelog.md): See what's new at Plerion as we deliver features to keep your code and cloud safe. ## OpenAPI Specs - [openapi](/api-reference/openapi.yaml) - [organization-openapi](/api-reference/organization-openapi.yaml) - [scim-openapi](/api-reference/scim-openapi.yaml) This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.