--- title: Palo Alto Networks Prisma Cloud slug: authentication-guides/palo-alto-networks-prisma-cloud docTags: createdAt: 2026-10-05T04:49:52.715Z --- # Introduction This guide tells you how to authenticate the **Palo Alto Networks Prisma Cloud** connector in Swimlane using an Access Key ID and Secret Key. The connector uses the Prisma Cloud API to perform operations such as retrieving alerts, managing account groups, accessing asset inventory, querying IAM information, and retrieving vulnerability data. The existing Swimlane connector authenticates using the **Prisma Cloud Asset** configuration, which requires a URL, Access Key ID, and Secret Key. ## Prerequisites ### Palo Alto Networks Prisma Cloud Requirements You must have: - Access to your **Prisma Cloud** tenant. - Permission to generate or use Prisma Cloud API access keys. - The API URL associated with your Prisma Cloud tenant. - A valid **Access Key ID**. - A valid **Secret Key**. Prisma Cloud API access keys consist of an **Access Key ID** and **Secret Key**. The permissions available through an access key are based on the permission group of the account that created the key. ### Required Credentials During setup, you will collect: | **Credential** | **Description** | | ----------------- | ------------------------------------------------------------ | | **URL** | Prisma Cloud API URL for your tenant. | | **Access Key ID** | Identifier associated with your Prisma Cloud API access key. | | **Secret Key** | Secret associated with the Access Key ID. | The Swimlane connector also supports optional **Customer Name** and **Prisma ID** values. ## Palo Alto Networks Prisma Cloud Setup ### Generate an Access Key Take the following steps to generate the credentials required by Swimlane: 1. Log in to your **Prisma Cloud** console. 2. Navigate to the access key management area for your account. 3. Create a new access key. 4. Provide a name for the access key, if prompted. 5. Generate the access key. 6. Copy and securely save the **Access Key ID** and **Secret Key**. Prisma Cloud allows users with API access to create access keys. Palo Alto Networks currently documents a limit of up to two access keys for the current user. :::hint{type="info"} Store the Secret Key securely. Treat the Access Key ID and Secret Key as credentials and do not expose them in playbooks, logs, or other unsecured locations. ::: ### Identify the Prisma Cloud API URL Prisma Cloud uses different API URLs depending on the tenant and deployment region. Use the API URL associated with your Prisma Cloud tenant when configuring the Swimlane asset. The existing Swimlane connector documentation specifically notes that regional URLs should be used for Prisma Cloud API access. Refer to the Palo Alto Networks Prisma Cloud documentation to determine the appropriate API URL for your environment. [Prisma Cloud API documentation](https://pan.dev/prisma-cloud/api/cspm/?utm_source=chatgpt.com) ## Connector Configuration in Swimlane The **Palo Alto Networks Prisma Cloud** connector uses the **Prisma Cloud Asset** authentication configuration. It authenticates using the Access Key ID and Secret Key. Take the following steps to configure the asset: 1. Log in to **Turbine**. 2. From the left-hand navigation pane, click **ORCHESTRATION** and click **Assets**. 3. The Asset homepage opens. 4. Click the plus icon to open the **Configure your Connector Asset** window. 5. Select **Palo Alto Networks Prisma Cloud** from the **Asset type** list. 6. Fill in the **Asset Settings** and **Asset Input** as shown: | **Field** | **Description** | **Required/Optional** | | --------------- | ----------------------------------------------------- | --------------------- | | url | URL of the target Prisma Cloud API host. | Required | | access\_key\_id | Access Key ID generated in Prisma Cloud. | Required | | secret\_key | Secret Key associated with the Access Key ID. | Required | | customer\_name | Customer or tenant name, when applicable. | Optional | | prisma\_id | Unique Prisma identifier, when applicable. | Optional | | verify\_ssl | Specifies whether to verify the SSL certificate. | Optional | | http\_proxy | Proxy through which requests are routed, if required. | Optional | These fields correspond directly to the connector's existing **Prisma Cloud Asset** configuration. Fields with \* marks are required. 7. Click **Create**. ::Image[]{src="https://api.archbee.com/api/optimize/n8uUzk0MM4uC57-zlHNtY/YXP8XEQBwDqh2p297w6Vn_image.png" size="200" isUploading="false" width="2048" height="1034" darkWidth="2048" darkHeight="1034" showCaption="false"} ## How Authentication Works When the connector authenticates with Prisma Cloud, the Access Key ID is used as the API username and the Secret Key as the password. Prisma Cloud's login API uses these credentials to generate a JSON Web Token (JWT), which is then used to authorize subsequent API requests. You do not need to manually generate or enter this JWT in the Swimlane asset. Configure the credentials required by the **Prisma Cloud Asset** instead. ## Troubleshooting If authentication fails: - Verify that the **Access Key ID** and **Secret Key** are correct and active. - Verify that the **URL** matches the API URL for your Prisma Cloud tenant and region. - Ensure the account associated with the access key has the permissions required for the connector actions you want to use. - If applicable, verify the **SSL verification** and **HTTP proxy** settings. ## Sources - **Palo Alto Networks Prisma Cloud API Documentation:** [https://pan.dev/prisma-cloud/api/cspm/](https://pan.dev/prisma-cloud/api/cspm/) - **Prisma Cloud API URLs:** [https://pan.dev/prisma-cloud/api/cspm/api-urls/](https://pan.dev/prisma-cloud/api/cspm/api-urls/) - **Prisma Cloud API Authentication:** [https://pan.dev/prisma-cloud/api/cspm/app-login/](https://pan.dev/prisma-cloud/api/cspm/app-login/?utm_source=chatgpt.com) - **Manage Prisma Cloud Access Keys:** [https://pan.dev/prisma-cloud/api/cspm/add-access-keys/](https://pan.dev/prisma-cloud/api/cspm/add-access-keys/?utm_source=chatgpt.com)