Skip to content

Trend Micro Conformity API Key

Service Name: Trend Micro Cloud One Conformity

Service Description: Trend Micro Cloud One Conformity is a cloud security posture management solution that helps organizations ensure their cloud infrastructure complies with industry best practices and security standards. It provides continuous security and compliance monitoring for AWS, Azure, and Google Cloud environments.

Service Address: https://www.trendmicro.com/en_us/business/products/hybrid-cloud/cloud-one-conformity.html

Validation Type: API Auth

IP Allow list: IP restrictions can be configured at the account level through the Trend Micro Cloud One platform settings.

Secret Access Scope: Grants programmatic access to Trend Micro Cloud One Conformity API, allowing users to manage and monitor cloud security posture, run compliance checks, and retrieve security findings across cloud environments.

Secret Revokement URL: https://cloudone.trendmicro.com/docs/conformity/api-reference/

Secret Example: ApiKey- v1:1a2b3c4d5e6f7g8h9i0j:abcdefghijklmnopqrstuvwxyz0123456789ABCDEF

Suspicious Activity Investigation Instructions:

  • Review API access logs in the Trend Micro Cloud One console for unusual activity.
  • Check for unauthorized scans or configuration changes to your cloud environments.
  • Monitor for unexpected data exports or changes to compliance rule settings.

  • Look for API calls from unfamiliar IP addresses or locations.

  • Verify if there are any new integrations or third-party connections established.

Mitigation Instructions:

  • Log in to the Trend Micro Cloud One console.
  • Navigate to the Account Settings section.
  • Select the API Keys tab.
  • Locate the compromised API key and click "Revoke" or "Delete".
  • Generate a new API key if needed.
  • Update the API key in all legitimate applications and integrations.
  • Review and update IP restrictions for API access if available.
  • Enable multi-factor authentication for all user accounts with API access.
  • Audit all recent changes made through the API to identify and revert any unauthorized modifications.