WIZ Connector.
Changelog
14 versions
v1.4.1
Latest
- Upload Enrichment Documents: the pending documents backlog is drained one threshold-sized batch per message, scheduled drains included, so a large backlog is no longer uploaded as a single oversized request; the remainder continues in a follow-up timeout 60 seconds later instead of looping inside a single receive() call.
- Upload Enrichment Documents: a batch is never uploaded twice; it is claimed with a timestamp and only resumed once it is older than the upload lock TTL, i.e. when it is a leftover of an interrupted run.
- Upload Enrichment Documents: warn when the backlog grows past 5000 documents, and fix a crash in the drain scheduling when the component starts with a timeout ID already stored in its state.
- Bounded every long-running operation: capped status polling attempts and interval, capped upload lock configuration, a wall-clock deadline for the whole polling session (statusMaxTotalTime, default and maximum 5 minutes), and a request timeout on all Wiz API calls (requestTimeout, default 60 seconds, maximum 2 minutes).
- Create and Upload Security Scan, Upload Enrichment Documents: report the error Wiz keeps answering with, for example an unknown systemActivity ID, instead of a bare "Exceeded max attempts", and fail immediately on authorization errors; both components now share a single status polling implementation.
- Find Cloud Resources: cap the record limit (default 100, maximum 10000), keep the records already collected when a later page comes back empty, and route an empty result to the notFound port.
- Create and Upload Security Scan, Upload Enrichment Documents: log only the status and size of an upload instead of the whole payload, which produced oversized log entries and exposed security findings data.
v1.4.0
- Added MakeApiCall component for performing arbitrary authorized API calls to the Wiz API.
v1.3.5
- Added output examples to component schemas.
v1.3.4
- Upload Enrichment Document: Fixes to prevent infinite loop causing the 'Prepared 0 documents for upload'.
v1.3.2
- Upload Enrichment Document: The upload will be triggered when either the configured schedule is reached or when the number of entries in the buffer exceeds the defined threshold.
v1.3.0
- Improve stability and performance of Upload Enrichment Document.
v1.2.0
- Create and Upload Security Scan, Upload Enrichment Documents: configurable status call. statusNumberOfAttempts (default 20), statusPollingInterval (default 3000ms)
v1.1.1
- Upload Enrichment Document: make the lock configurable.
v1.1.0
- Create Enrichment Document, Upload Enrichment Document: new components to create and upload security scans in batches to Wiz.
v1.0.9
- UploadSecurityScan: validate system activity and throw an error if not all reported vulnerabilities are addressed, i.e., when the number of 'handled' vulnerabilities is less than 'incoming' vulnerabilities.
v1.0.8
- UploadSecurityScan: cleanup docs for upload. Remove 'vulnerabilityFindings' and 'webAppVulnerabilityFindings' from the Attacker document. Also, remove 'events' from the Posture Gap document.
v1.0.7
- UploadSecurityScan: throw an error if systemActivity status call return FAILURE or SKIPPED status.
v1.0.6
- UploadSecurityScan: remove vulnerabilityFindings part.
v1.0.5
- Initial version.
Authentication
| Type | Details |
|---|---|
| Pwd | — |
Actions
5
Find Cloud Resources
Execute the CloudResourceSearch query to return a list of cloud resources according to different filters, such as project ID or entity type.
Upload Enrichment Documents
Upload security scans to enrich the Wiz Security Graph, using the Vulnerability Findings Schema.
Create and Upload Security Scan
Creates the Enrichment and Upload security scans to enrich the Wiz Security.