Adding a New Custom Rule from Inventory

To create a SaaS security posture rule from Inventory page using NGL query:

1. Navigate to API-enabled Protection > Security Posture SaaS > Inventory.
2. Click the Resources tab.
3. Beside + ADD FILTER, click the Switch to NGL icon.
4. On the search edit box, enter your NGL query. For more information, see Netskope Governance Language.
5. Click Search. You will see the list of resources that match the filter.
   
6. Beside + ADD FILTER, click the Create Rule icon. The New Custom Rule page opens.
   
7. Under Rule Name, enter a rule name.
8. Under Severity, select the rule severity from the drop-down list.
9. Under Definition, you will see the NGL query you used to filter.
   Tip: Click Validate Definition to validate the rule and fix any syntax errors.
10. Under the Category tab, specify the category, and sub-category.
11. (Optional) Under the Remediation tab and enter the manual remediation steps.
12. (Optional) Under the Description tab and a short description of the custom rule.
13. Click Save to save the rule. The rule is displayed in the Rules section of the Rules page.
14. Navigate to Policies > Security Posture, click Apply Changes.

References

• Security Policies
• Security Rules
• View SaaS Inventory