Close MCASB alert via API

Brass Contributor
Good afternoon people.

I am drawing a flow in the Logic App to close the alert in MCAS.

I have little experience with API and would like to get help.

I was using the API call via the path [
[XXXX.us3.portal.cloudappsecurity.com/api/v1/alerts/ID_ALERT/dismiss/]to end the alert as a false positive.

The documentation updated and reported that this feature is obsolete,
passing using the path [api / v1 / alerts / close_false_positive /] with filters, as reported here [docs.microsoft.com/en-us/cloud-app-security/api-alerts-close-false-positive ]

The point is that I am not sure how to pass the filters through the Logic APP in HTTP POST of this new format.

Can anyone help me in this regard?

Old process:

process.PNG
 
 

 

0 Replies