Query Examples

The Tenable One Cloud Exposure GraphQL API lets you query and manage your Cloud Exposure data programmatically. The following pages provide example queries and mutations, with sample responses, for each area of the API. To set up access and send your first request, see Get Started. For large result sets, see Pagination.

Page	Description
Account Management	Retrieve the organizational folder hierarchy, and add, move, and monitor onboarded cloud accounts.
Audit Log	Retrieve audit events for user actions in the Console, filtered by action, account, or user.
Compliances	Retrieve compliance frameworks with their status and compliance scores, for all frameworks or by framework ID or scope.
Exclusions	List, retrieve, and delete exclusions.
Findings	Retrieve finding data for investigation and analysis in third-party tools.
Integrations	Monitor connected integrations, their connection status, and their provider-specific configuration.
Inventory	Query the asset inventory for cloud resources and their configurations.
JIT	Manage Just-in-Time (JIT) eligibilities and access requests for temporary access to cloud resources.
Least Privilege Policies and Roles	Generate fine-grained least privilege policies for the supported resources.
Licensing	Retrieve license information and usage.
Permissions	Query the permissions granted to cloud identities.
Policies	List built-in and custom policies with their name, ID, and category.
Projects	Create and manage projects, and automate role assignments at scale.
Scopes	Retrieve basic information for all or some of your cloud accounts.
Threats	Export threat stories, detections, and rules to third-party tools for investigation and analytics.
Users and Groups	Manage user and group access to the Console.
Vulnerability Management	Retrieve Workload Protection vulnerability data for your workflows and third-party tools.