Ken,
I did something very similar recently and had to parse the output to get the group GUID. You may find some useful resources at github.com/CiscoSecurity if you're not aware of that repository.
I took the liberty of combining some existing Python code to parse your Groups. You may want some different information but this should be a good start. You just need to input your API credentials.
import requests
amp_client_id = ''
amp_api_key = ''
def displayGroups():
url = 'https://api.amp.cisco.com/v1/groups'
request = requests.get(url, auth=(amp_client_id, amp_api_key))
response = request.json()
print('[{:^5}] {:^30} {:^15}'.format('Index', 'Name', 'Product'))
index = 0
for item in response["data"]:
index = index + 1
print('[{:^5}] {:<30} {:^15}'.format(
index,
item['name'],
item['guid'],
))
print("------------------------------------------")
index = input("Index: ")
index = index.strip()
if not index.isdigit():
print("Invalid index")
return
index = int(index) - 1
if not (0 <= index < len(response['data'])):
print("Invalid index")
return
guid = response['data'][index]['guid']
# get the details of a particular group
url = "https://api.amp.cisco.com/v1/groups/" + guid
request = requests.get(url, auth=(amp_client_id, amp_api_key))
response = request.json()
data = response["data"]
#print(data)
print("\nGroup details:")
print("\tName : " + data["name"] )
print("\tGuid : " + data["guid"])
print("\n\tPolicies : ")
for num, policy in enumerate(data['policies'], start=0):
print("\t\tName: {}".format(data['policies'][num]['name']))
print("\t\tGuid: {}".format(data['policies'][num]['guid']))
print("\t\tProduct: {}\n".format(data['policies'][num]['product']))
if __name__ == '__main__':
while True:
# Print the menu
print("""
Advanced Malware Protection (AMP) - Cloud
Retrieve Information About a Particular Group :
""")
displayGroups()
again = input(" Do you want to run again?(y/n): ")
again = again.strip()
if again == 'y' or again == 'Y':
continue
break
Thanks,
Matt
