Akamai CDN Cloud

Akamai CDN Cloud is a content delivery network that accelerates web and video content delivery globally.

Use Cases the Adapter Solves

• CDN Property Access Auditing: Identify which users have access to specific Akamai CDN properties and verify that access is scoped appropriately across your organization.
• Origin Server Visibility: Monitor origin server hostnames and origin types configured across all CDN properties to detect misconfigured or unauthorized origin destinations.
• Correlate CDN Assets with Network Inventory: Map Akamai CDN hostnames and properties to known network assets in Axonius for comprehensive coverage of internet-facing infrastructure.

Asset Types Fetched

This adapter fetches the following types of assets:

• Devices, Users

Before You Begin

Required Ports

• TCP port 443 (HTTPS)

Authentication Methods

EdgeGrid Authentication - requires a Client Token, Client Secret, and Access Token generated from the Akamai Control Center. For details on creating these credentials, see Create authentication credentials.

APIs

Axonius uses the Akamai Identity and Access Management API v3 and the Akamai Property Manager API (PAPI). The following endpoints are called:

• GET /identity-management/v3/user-admin/ui-identities - Fetch all IAM users
• GET /identity-management/v3/user-admin/properties - Fetch CDN properties
• GET /identity-management/v3/user-admin/properties/{propertyId}/users - Fetch users associated with a property
• GET /papi/v1/hostnames - Fetch CDN hostnames
• `Get/papi/v1/properties{propertyId}` - Fetch devices' property IDs
• GET /papi/v1/properties/{propertyId}/versions/{propertyVersion}/rules - Fetch property rule tree for devices; used to retrieve Origin Server Hostname and Origin Type fields

Required Permissions

The EdgeGrid credentials must have the following permissions in Akamai Identity and Access Management:

• Identity Management (IAM) - Read access
• Property Manager API (PAPI) - Read access

Setting Up Akamai CDN Cloud to Work with Axonius

1. Log in to the Akamai Control Center.
2. Navigate to Identity & Access > API Users & Keys.
3. Click New API Client and complete the setup wizard.
4. Under APIs, grant the following access:
   • Identity Management - READ
   • Property Manager (PAPI) - READ
5. Copy the Client Token, Client Secret, and Access Token for use in Axonius.

For full instructions, see Create authentication credentials.

Connecting the Adapter in Axonius

Required Parameters

1. Host Name or IP Address - The hostname or IP address of the Akamai CDN Cloud server.

2. Client Token and Client Secret - The credentials for a user account that has permission to fetch assets. For information about how to create these credentials, see Create authentication credentials.

Optional Parameters

1. Access Token - An Access Token associated with a user account that has permissions to fetch assets.

2. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

3. HTTPS Proxy - Connect the adapter to a proxy instead of directly connecting it to the domain.

4. HTTPS Proxy User Name - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

5. HTTPS Proxy Password - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

Endpoints Config

• Fetch Devices from Hostnames - Enable to fetch devices from the GET /papi/v1/hostnames endpoint. When this is enabled, the following options become available to fetch additional property details and property rules from the Akamai Property Manager API, including origin server hostnames and origin types:
  • Enrich Hostnames with Property Details - Enable to enrich hostname with properties available for the current contract and group.
  • Enrich Hostnames with Property Rules - Enable to get the entire rule tree for a property version. Refer to the Akamai documentation on rule trees for more information.

Supported From Version

Supported from Axonius version 6.1