SaaS Security
Onboard a Redis Labs App to SSPM
Table of Contents
Expand All
|
Collapse All
SaaS Security Docs
Onboard a Redis Labs App to SSPM
Connect an Redis Labs instance to SSPM to detect posture risks.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
Or any of the following licenses that include the Data Security license:
|
For SSPM to detect posture risks in your Redis Labs instance, you must onboard your
Redis Labs instance to SSPM. Through the onboarding process, SSPM connects to the
Redis Cloud REST API by using a pair a API keys that you generate within Redis Labs.
After connecting to the Redis Cloud REST API, SSPM scans your Redis Labs instance
for misconfigured settings and account risks.
To onboard your Redis Labs instance, SSPM requires the following information, which
you will specify during the onboarding process.
| Item | Description |
|---|---|
|
Account key
|
An API account key, which Redis Labs generates the first time a
Redis Labs account owner enables the REST API. The API account
key is an alphanumeric string that uniquely identifies your
Redis Labs account. SSPM uses this key and the API user key to
authenticate to a Redis Labs API.
|
|
User key
|
An API user key, which you create in Redis Labs and associate
with a particular user. SSPM uses this key to authenticate to a
Redis Labs API. Redis Labs.
Redis Labs authorizes requests from SSPM based on the key's role,
which it inherits from the user that is associated with the
key.
|
To onboard your Redis Labs instance, you complete the following actions:
- Identify the Redis Labs user who will use to get the API account key and API user key.Required Permissions: The user must be assigned to the Owner role in Redis Labs. This Owner role is required to enable the Redis Cloud REST API and to create an API user key.Open a web browser to the Redis Labs login page and log in as the Owner that you identified in the preceding step.Locate and copy your API account key.Redis Labs generates a unique API account key the first time a Redis Labs account Owner enables the REST API. This API account key appears on the Access Management page in Redis Labs.
- From the left navigation pane, select Access Management.On the Access Management page, select the API Keys tab.If you are another Owner previously enabled the API, the API account key appears on this page. Otherwise, the page contains an Enable API button.In necessary, Enable API.Copy the API account key and paste it into a text file.Do not continue to the next step unless you have copied the API account key. You will provide this key to SSPM during the onboarding process.
Create and copy an API user key.When you create an API user key, you associate the key with a specific Redis Labs user. The key's permissions are based on the associated user's role.- On the Access Management page's API Keys tab, locate the API User Keys section.In the API User Keys section, click the add button. The add button is a plus sign (+) icon.Redis Labs displays an empty entry in the API User Keys section for you to configured your API User Key.In the empty entry for your API user key, complete the following actions:
- Specify an API key name. This name is the display name for the API User Key. For effective logging, auditing, and future maintenance, supply a descriptive name that clearly identifies the purpose of the API user key. For example, SSPM- integration.
- Select a User name from the list. The user that you select must be assigned to the Owner role.
- Create the API user key.
Redis Labs generates and displays your API user key.Copy the API user key and paste it into a text file.Do not continue to the next step unless you have copied the API user key. You will provide this key to SSPM during the onboarding process.
Connect SSPM to your Redis Labs instance.In SSPM, complete the following steps to enable SSPM to connect to your Redis Labs instance.- Log in to Strata Cloud Manager.Select ConfigurationSaaS SecurityPosture SecurityApplicationsAdd Application and click the Redis Labs tile.On the Posture Security tab, Add New instance.Log in with Credentials.Enter your API account key and API user key.Connect.