# Wiz
### Integration Setup
To configure the Wiz Security integration, follow these steps:
#### Create Wiz Service Account
1. In the the Wiz Application, Search "Service Accounts"
1. Click "Add Service Account"
1. Enter a name, Choose "Custom Integration (GraphQL API)" from the Type drop down.
1. Select Projects you want Gomboc to have access to.
1. Select the following scopes:
* Read graph resource
* Issues
* Issue Comments
* Integratons
* Automation Rules
* Read report
* Read cloud configuration rules, list cloud configuration rules
* Detections
* Issue Status
* Comments
2. Click "Add Service Account" and collect Client ID and Client Secret. You will need them in future steps.
#### Create Integration in Gomboc Portal
1. In Wiz click your profile icon and "Tenant Info"
2. Collect API Endpoint URL and Authentication URL for future steps
3. Within the Gomboc portal, create an access token, either a personal or organization API token will work. Once the token is created, copy it to your clipboard.
4. Go to Settings > Integrations > Wiz
5. Insert the Gomboc Token from step 3. Wiz Client ID, Wiz Client Secret from Service Account setup. Wiz API URL, Wiz Auth URL from step 2. Click "Integrate"
6. Once the integration is complete you will receive an Access token you will need to use to create the webhook on Wiz
#### Create Integration in Wiz Application
1. Back on the Wiz Application, search "Integrations"
2. Click "Add Integration"
3. Search "Webhook"
4. Enter a name. Under URL enter ""
5. Select All projects you want to integrate with, It should be the same as the Service Account
6. Under Authentication select Token, Enter the Token received after creating the integraion in Gomboc portal, click "Add Integration"
#### Setup Wiz Webhook Rules
1. Search "Automation Rules"
2. Click "Add Rule"
3. Enter name "Issue Webhook"
4. Select same projects from Service Account setup
5. Under "When" select Issue
6. Under "IF" click Add Filter, select "Severity", then select all the options.
7. Under "THEN" click add Action and select "POST a Webhook" for the created Integration. Click "Continue", then "Add Action"
8. Click "Add Rule"
9. Repeat Steps 2 - 8 changing to "Cloud Configuration Finding" and "Detection" under "WHEN" in step 5
