Skip to main content
To create an API key you must have the account admin role, or otherwise have write permissions for API keys, in the Lacework FortiCNAPP Console. The key inherits the creator’s access, so use an account that can reach the data you want to sync — a key with insufficient privileges can still connect but will return empty results or permission errors.

​
Find your account subdomain

Your account subdomain is the unique identifier in your Lacework FortiCNAPP URL and determines the API host.

  • Check your browser address bar when signed in to the Lacework FortiCNAPP Console.
  • Example: if your URL is https://acme.lacework.net, your account subdomain is acme.
  • Enter only the subdomain — no https://, no .lacework.net, and no trailing slash.
  • It is also available as the account value in the downloaded API key file (e.g. acme.lacework.net).

​
Create an API access key

Create an API access key in the Lacework FortiCNAPP Console, then download the key file — it contains the Key ID and Secret used to connect.

1

Sign in to Lacework FortiCNAPP

Sign in to your Lacework FortiCNAPP account (e.g., https://<your-subdomain>.lacework.net) with administrator privileges.

  • Navigate to Settings > Configuration > API keys.
2

Create the key and download the file

Create a new API key in the API keys page, then download and store the key file securely. Each user can have up to 20 API keys.

  • Create a new API key.
  • Download the key file after creating the key, and store it securely.
  • API Key ID: the keyId value from the downloaded key file.
  • API Secret: the secret value from the downloaded key file.

​
Linking the Account from the Hub

1

Navigate to the Hub

Use one of the three Linking Account Methods to access the Hub.
2

Fill out the fields

Fill out the following fields using details from your provider:
  • Account Subdomain
  • API Key ID
  • API Secret
3

Connect

  • Click Connect
  • If applicable, the provider will redirect you to a sign-in or authorization page. Complete the provider’s authorization flow.
  • Once authorization is successful, you will see a confirmation popup

If the account linking is successful, you will see the newly linked account in your Accounts page.