TrendAI API Security: Enable the TrendAI API Security plugin - Plugin

Enable the TrendAI API Security plugin

Enable the TrendAI API Security plugin to send data to TrendAI Vision One.

In the following example, the TrendAI API Security plugin is configured with a TrendAI Vision One API Key to send configuration data to TrendAI Vision One every hour. The TrendAI Vision One endpoint ensures data is routed to the appropriate data center based on the region of your TrendAI Vision One account.

The TrendAI Vision One for Kong Gateway plugin relies on a Trend Vision One API key and endpoint URL. Ensure you have copied these parameters from the Kong Gateway Third-Party Integrations page in Trend Vision One. We recommend storing and managing this key in a Vault. See Secrets Management for more details.

Prerequisites

Download and install the TrendAI API Security plugin.
Copy the Trend Vision One API key and endpoint URL (fqdn) from the Kong Gateway Third-Party Integrations page in Trend Vision One.

Environment variables

V1_ENDPOINT: The TrendAI Vision One endpoint URL (fqdn) copied from the Kong Gateway Third-Party Integrations page in Trend Vision One. For example, export V1_ENDPOINT=https://api.xdr.trendmicro.com.
TREND_API_KEY: The Trend Vision One API key exported as an environment variable. For example, export TREND_API_KEY={api_key}.

Set up the plugin

Add this section to your kong.yaml configuration file:

kong.yaml

Copied!

_format_version: "3.0"
plugins:
  - name: trend-micro-kong-plugin-aps
    config:
      fqdn: ${{ env "DECK_V1_ENDPOINT" }}
      token: ${{ env "DECK_TREND_API_KEY" }}

Make the following request:

curl -i -X POST http://localhost:8001/plugins/ \
    --header "Accept: application/json" \
    --header "Content-Type: application/json" \
    --data '
    {
      "name": "trend-micro-kong-plugin-aps",
      "config": {
        "fqdn": "'$V1_ENDPOINT'",
        "token": "'$TREND_API_KEY'"
      },
      "tags": []
    }
    '

Copied!

Make the following request:

curl -X POST https://{region}.api.konghq.com/v2/control-planes/{controlPlaneId}/core-entities/plugins/ \
    --header "accept: application/json" \
    --header "Content-Type: application/json" \
    --header "Authorization: Bearer $KONNECT_TOKEN" \
    --data '
    {
      "name": "trend-micro-kong-plugin-aps",
      "config": {
        "fqdn": "'$V1_ENDPOINT'",
        "token": "'$TREND_API_KEY'"
      },
      "tags": []
    }
    '

Copied!

Make sure to replace the following placeholders with your own values:

region: Geographic region where your Kong Konnect is hosted and operates.
KONNECT_TOKEN: Your Personal Access Token (PAT) associated with your Konnect account.
controlPlaneId: The id of the control plane.

See the Konnect API reference to learn about region-specific URLs and personal access tokens.

echo "
apiVersion: configuration.konghq.com/v1
kind: KongClusterPlugin
metadata:
  name: trend-micro-kong-plugin-aps
  namespace: kong
  annotations:
    kubernetes.io/ingress.class: kong
    konghq.com/tags: ''
  labels:
    global: 'true'
config:
  fqdn: '$V1_ENDPOINT'
  token: '$TREND_API_KEY'
plugin: trend-micro-kong-plugin-aps
" | kubectl apply -f -

Copied!

Prerequisite: Configure your Personal Access Token

terraform {
  required_providers {
    konnect = {
      source  = "kong/konnect"
    }
  }
}

provider "konnect" {
  personal_access_token = "$KONNECT_TOKEN"
  server_url            = "https://us.api.konghq.com/"
}

Copied!

Add the following to your Terraform configuration to create a Konnect Gateway Plugin:

resource "konnect_gateway_plugin_trend_micro_kong_plugin_aps" "my_trend_micro_kong_plugin_aps" {
  enabled = true

  config = {
    fqdn = var.v1_endpoint
    token = var.trend_api_key
  }
  tags = []

  control_plane_id = konnect_gateway_control_plane.my_konnect_cp.id
}

Copied!

This example requires the following variables to be added to your manifest. You can specify values at runtime by setting TF_VAR_name=value.

variable "trend_api_key" {
  type = string
}

Copied!

TrendAI API Security

Enable the TrendAI API Security plugin

Prerequisites

Environment variables

Set up the plugin

Help us make these docs great!

Still need help