Wiz - Update Issues

Wiz - Update Issues updates the status, notes, and resolution details of Wiz Issues for assets selected from a query. or from the relevant Assets page. The action performs a GraphQL UpdateIssue mutation using the Wiz API connection.

Required Permissions

The Wiz API client must have the following scopes. If any required scope is missing, Wiz returns a GraphQL Unauthorized Error and the action fails.

• write:issue_status
• write:issue_due_at,
• write:service_ticket,
• write:issue_comments
• write:threat_issue_status (For updating threat issues)

APIs

Axonius uses the wiz.io API.

Required Ports

• TCP port 443

Required Fields

These fields must be configured to run the Enforcement Set.

• Use stored credentials from the Wiz adapter - Select this option to use credentials from the adapter connection. By default, the first connection is selected.

  • When you select this option, the Select Adapter Connection drop-down becomes available. Select the adapter connection to use for this Enforcement Action.

    📘

    Note

    To use this option, you must successfully configure a Wiz adapter connection.

• Issue ID - The unique identifier of the Wiz Issue to update.

• Issue status - Select the status to assign to the issue. The options are:

  • Open

  • In Progress

  • Resolved - When selected, the following fields are also required:

    • Resolution reason - Only Threat Detection Issues can be resolved, and the Resolution reasons can be either: MALICIOUS_THREAT / NOT_MALICIOUS_THREAT / SECURITY_TEST_THREAT / PLANNED_ACTION_THREAT / INCONCLUSIVE_THREAT
    • Resolution note - Add a free text note explaining the status change.

  • Rejected - When selected, the following fields are also required:

    • Resolution reason - Graph Control Issues and Cloud Configuration Issues can be rejected manually, and the Resolution reasons can be either: MALICIOUS_THREAT / NOT_MALICIOUS_THREAT / SECURITY_TEST_THREAT / PLANNED_ACTION_THREAT / INCONCLUSIVE_THREAT
    • Issue note - Add a free text note explaining the status change.

• Compute Node - The Axonius node to use when connecting to the specified host. For more details, see Working with Axonius Compute Nodes.

Additional Fields

These fields are optional.

💡

Connection and Credentials

• If you are using the Wiz Axonius Integration service account for your adapter connection, enable Use stored credentials from the Wiz adapter, as the all the necessary permissions for adapter connection and actions are already set.

• If you are using a custom Wiz service account for your adapter connection, migrate to using the Wiz Axonius Integration service account.