Skyhigh Security

Skyhigh Security is a Security Service Edge platform that provides cloud security posture management, configuration auditing, and compliance monitoring across multi-cloud infrastructure.

Use Cases the Adapter Solves

• Monitor cloud configuration policies: Review CSPM policy status across cloud infrastructure to support configuration-audit and compliance work.
• Track AWS accounts: Maintain visibility of AWS accounts provisioned through Skyhigh Security.
• Identify missing permissions: Find CSPM policies that report missing permissions so teams can investigate access gaps.

Asset Types Fetched

• Accounts
• Application Resources

Data Retrieved through the Adapter

Accounts - fields such as: Name, Remote Account ID, Asset Type

Application Resources - fields such as: Name, Resource ID, Description, Status

Before You Begin

Required Ports

• TCP port 443 (HTTPS)

Authentication Methods

The adapter uses a Skyhigh Security SSE application user name and password. It uses Basic authentication to retrieve provisioned AWS accounts, then obtains and uses a Neo access token to retrieve CSPM policies.

APIs

Axonius uses the Skyhigh Security API. The following endpoints are called:

• GET /shndlpapi/v1/aws/provisionedAccounts - Retrieves provisioned AWS accounts for the configured AWS instance.
• POST /neo/neo-auth-service/oauth/token?grant_type=password - Obtains a Neo access token.
• POST /neo/config-audit/v1/getPolicies - Retrieves CSPM policies.

Required Permissions

Confirm the exact permissions required to access the API endpoints listed above with your Skyhigh Security administrator.

Supported From Version

Supported from Axonius version 10.0.1

Connecting the Adapter in Axonius

1. Navigate to the Adapter Catalog, search for Skyhigh Security, and select the adapter.
2. Click Add Connection.
3. Provide the following parameters.

Required Parameters

1. Host Name or IP Address - Enter the API base domain, including http:// or https://, without a specific endpoint. Example: https://www.myshn.net/
2. User Name - Enter the email address of the Skyhigh Security SSE application user.
3. Password - Enter the password for the Skyhigh Security SSE application user.
4. AWS Instance Name - Enter the provisioned AWS instance name used to fetch cloud accounts.

Optional Parameters

1. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.
2. HTTPS Proxy - Connect the adapter to a proxy instead of directly connecting to the domain.
3. HTTPS Proxy User Name - Enter the user name for the HTTPS Proxy.
4. HTTPS Proxy Password - Enter the password for the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.