Axonius Documentation
Start typing to search…

Upwind

Upwind is a unified cloud-native application protection platform that provides runtime‑powered insights for detecting risks and mitigating misconfigurations across infrastructure and applications.

Asset Types Fetched

Devices | Aggregated Security Findings | SaaS Applications | Compute Services | Networks | Load Balancers | Databases | Object Storage | Network Services | File Systems | Serverless Functions | Disks | Secrets

Use Cases the Adapter Solves

Key capabilities of the Upwind adapter are:

  • Multi-cloud support - Fetches assets from both AWS and GCP environments.
  • Vulnerability enrichment - Enables enriching Devices with vulnerability findings from Upwind's security scanning.
  • Asset type identification - Each asset includes a specific asset type label, for example: "Upwind - AWS EC2 Instance", "Upwind - GCP GKE", etc.
  • Comprehensive cloud metadata - Includes cloud provider, account ID, region, and cloud resource IDs for all assets.

Data Retrieved by the Adapter

The Upwind adapter fetches cloud infrastructure and application assets associated with different asset types.

Asset TypeCloud Resources
DevicesAWS EC2 Instances, GCP GCE Instances, AWS SSM Managed Instances
Compute ServicesAWS ECS Clusters, AWS EKS Clusters, AWS Auto Scaling Groups, GCP Instance Groups, GCP GKE Clusters, GCP Cloud Run Services, AWS ECR Repositories
Serverless FunctionsAWS Lambda Functions
DatabasesAWS RDS Clusters, AWS RDS Instances, GCP Cloud SQL Instances
Load BalancersAWS Application Load Balancers, AWS Network Load Balancers, AWS Classic Load Balancers
Network ServicesAWS NAT Gateways
NetworksAWS VPCs
DisksAWS EBS Volumes
File SystemsAWS EFS
Object StorageAWS S3 Buckets, GCP Storage Buckets
SecretsAWS Secrets Manager Secrets

Before You Begin

Ports

  • TCP port 80/443

Authentication Method

  • Client ID/Client Secret

APIs

Axonius uses the Upwind V2 Inventory Search API.

Permissions

OAuth token scopes must include relevant access areas:

  • vulnerabilities:read
  • threats:read
  • threat_policies:read

Supported From Version

Supported from Axonius version 7.0.8

Connecting the Adapter in Axonius

To connect the adapter in Axonius, provide the following parameters:

Required Parameters

  1. Region (default: US) - Select your upwind.io region, either US, EU, or ME. The API endpoint will be determined by this setting.
  2. Organization ID - Specify your Upwind organization ID.
  3. Client ID and Client Secret - The credentials for an account that has the Required Permissions to fetch assets.
Upwind.png

Optional Parameters

  1. Verify SSL - Select whether to verify the SSL certificate of the server against the CA database inside of Axonius. For more details, see SSL Trust & CA Settings.

  2. HTTPS Proxy - Connect the adapter to a proxy instead of directly connecting it to the domain.

  3. HTTPS Proxy User Name - The user name to use when connecting to the value supplied in Host Name or IP Address via the value supplied in HTTPS Proxy.

  4. HTTPS Proxy Password - The password to use when connecting to the server using the HTTPS Proxy.

To learn more about common adapter connection parameters and buttons, see Adding a New Adapter Connection.

Advanced Settings

📘

Note

Advanced settings can either apply to all connections for this adapter, or to a specific connection. Refer to ​Advanced Configuration for Adapters.

  1. Enrich Devices with Vulnerability Findings - Enable this option to enrich Devices with vulnerability data including CVE IDs, CVSS scores, EPSS scores, exploit status, and remediation information. (Vulnerability assets are parsed in Axonius as Security Findings)
📘

Note

To learn more about Adapter Configuration tab advanced settings, see Adapter Advanced Settings.

Updated about 1 hour ago