Onboard a Contentful App to SSPM
Table of Contents
Onboard a Contentful App to SSPM
Connect a Contentful instance to SSPM to detect posture risks.
For SSPM to detect posture risks in your Contentful instance, you must onboard your
Contentful instance to SSPM. Through the onboarding process, SSPM connects to an API
to scan your Contentful instance for misconfigured settings. If there are
misconfigured settings, SSPM suggests a remediation action based on best practices.
SSPM gets access to Contentful's content management API by using a personal access
token that you generate for a Contentful administrator account. During the
onboarding process, SSPM prompts you for the personal access token.
To onboard your Contentful instance, you complete the following actions:
Create a Personal Access Token in Contentful
In Contentful, create a personal access token for an administrator account. The
access token enables SSPM to carry out actions that require administrator
permissions.
- Open a web browser and go to the Contentful login page at be.contentful.com/login.
- Log in as an administrator.
- Locate your profile icon and select .
- On the Account Settings page, navigate to theCMA Tokenstab andCreate personal access token.
- In the Create personal access token dialog, specify a name and expiration date for the access token. You can also specify that the token should never expire.SSPM will use the access token to establish the initial connection to your Contentful instance and to perform scans at regular intervals. These scans will fail after the token expires, and you will need to onboard your Contentful instance again.
- Generatethe token.Contentful generates and displays your personal access token.
- Copy the generated token and paste it into a text file.Do not continue to the next step unless you have copied the access token. You must provide this token to SSPM during the onboarding process.
Connect SSPM to Your Contentful Instance
By adding a Contentful app in SSPM, you enable SSPM to connect to your Contentful
instance.
- From the Add Application Page (), click the Contentful tile.
- Under posture security instances,Add Instanceor, if there is already an instance configured,Add Newinstance.
- Choose the option toLog in with Credentials.
- Enter your access token andConnect.