Skip to main content

CIEM New Scope Detected

Event Context​

A new AWS account, Azure subscription, or GCP project was detected by SailPoint CIEM.

You can use a JSONPath filter expression to narrow down the circumstances under which your workflow will be triggered.

This trigger only fires if you have the CIEM service.

This is an example input from this trigger:

{
  "$ref": "#/definitions/record:NewScopeDetected",
  "definitions": {
    "record:NewScopeDetected": {
      "additionalProperties": true,
      "properties": {
        "event": {
          "type": "string"
        },
        "org": {
          "type": "string"
        },
        "scopesDiscovered": {
          "items": {
            "$ref": "#/definitions/record:Scope"
          },
          "type": "array"
        },
        "scopesEnabled": {
          "type": "boolean"
        },
        "sourceIscId": {
          "type": "string"
        },
        "sourceName": {
          "type": "string"
        },
        "sourceNativeId": {
          "type": "string"
        },
        "timestamp": {
          "type": "string"
        },
        "total": {
          "minimum": 1,
          "type": "integer"
        },
        "truncated": {
          "type": "boolean"
        }
      },
      "type": "object"
    },
    "record:Scope": {
      "additionalProperties": true,
      "properties": {
        "name": {
          "type": "string"
        },
        "nativeId": {
          "type": "string"
        }
      },
      "required": ["name", "nativeId"],
      "type": "object"
    }
  }
}