> Source: [sk153673](https://support.checkpoint.com/results/sk/sk153673)

# sk153673 - CloudGuard CNAPP Knowledge Base

| Property | Value |
|----------|-------|
| Solution ID | sk153673 |
| Date Created | 2019-05-16 |
| Last Modified | 2025-01-15 |
| Technical Level | General |
| Products | Cloud Firewall |
| Versions | R82.10, R81.20, R82 |

## Solution

This document contains a list of SK articles that explain some CloudGuard Cloud Native Application Protection (CNAPP) Use Cases and typical how-to questions.

### Using the REST API

* [Create and Manage Exclusions using the CloudGuard REST API](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk147873)
* [Onboard an Azure account using the CloudGuard API](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144816)
* [Onboard a Google Cloud Platform subscription using the CloudGuard API](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144815)
* [Attach a Security Group to an Instance using the CloudGuard API](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk147838)
* [Retrieve \& Search Findings](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk147837)
* [Use the CloudGuard API to set up Account Roles and Permissions](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk147835)
* [Onboard an AWS account to CloudGuard using the REST API](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk147832)
* [Create a new compliance ruleset and run an assessment with it](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk147834)
* [Use the CloudGuard REST API to receive findings from external systems](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk159532)
* [Use the CloudGuard MSP REST API](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162573)
* [Use the CloudGuard REST API to obtain Compliance Assessment Trends](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162576)

### Network Security

* [Cannot view CloudGuard Alerts \& Findings](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144756)
* [Enable GuardDuty in AWS](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144755)
* [Create a Destination Log Group for VPC Flow Logs in AWS](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144754)
* [Create a Flow Log for VPC or Subnet in AWS](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144753)
* [Create an IAM Role for VPC Flow Logs](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144752)
* [AWS VPC Flow Log Limitations](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144698)
* [Convert CloudGuard AWS environment Connection from IAM User to Cross-Account Role](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk159912)

### Compliance

* [Configure CloudGuard as an AWS Security Hub provider](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144592)
* [Configure CloudGuard as a source for the Google Cloud Security Command Center (CSCC)](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk154412)
* [How to configure PagerDuty with CloudGuard](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144573)
* [AWS Element: IAM Policy](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk147555)
* [Custom Rules - GSL Reference](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144533)
* [Use CloudGuard in the CI/CD pipeline](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk158072)
* [The CloudGuard Circuit Breaker for misconfigured Notification Policies](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk164233)

### Integrations

* [Configure Splunk as a Log system for CloudGuard](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk161974)
* [Integrating Sumo Logic with CloudGuard](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162613)
* [CloudGuard SNS Events Integration](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk145195)

### Administration

* [Enable Multi-Factor Authentication in CloudGuard](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144515)

### Troubleshooting

* [CloudGuard system was unable to retrieve GuardDuty findings due to permissions](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144814)
* [Troubleshooting: Account is already protected by CloudGuard](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144793)
* [Troubleshooting: AWS API key is missing permission](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144792)
* [Troubleshooting: You are not subscribed to this service](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144794)
* [What is my Pairing Key and where can I find it?](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144797)
* [Admin port exposed - Alert example](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk144813)[](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk165514)

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content