Hey everyone! 👋 I've been working on a security hygiene report for our marketing infrastructure, and I need to pull a list of all assets *not* currently protected by Trend Micro Cloud One. I want to automate this into a weekly dashboard.
I can navigate the API docs for pulling protected servers or workloads, but I'm hitting a wall trying to get the inverse—specifically, the unprotected items. Has anyone built a similar report or workflow?
My initial thought was to:
* Fetch all known assets from our cloud provider (AWS in this case).
* Fetch all protected assets from the Cloud One Workload Security API.
* Do a comparison to find the delta.
But I'm wondering if there's a more direct endpoint or a smarter query parameter I'm missing within the Cloud One APIs themselves. I'm primarily using Workload Security, but if Conformity or Application Security has a better angle, I'm all ears.
What's your approach? Any gotchas with pagination or rate limits when pulling large asset lists?
Data-driven decisions.