Ingestion API with MA-ASM outbound integration

[mw_lee]

I'm trying to integrate MA-ASM with Chronicle SIEM and am working on outbound integration in the MA-ASM settings.

I have created an OAuth client for the Google Cloud Service Account used in the Ingestion API and delegated GWS permissions, but it shows "credential fail."

I have already verified the Service Account's Key JSON. The scope and API endpoint have also been set correctly for the Singapore region.

Is there anyone who has experienced the same issue or can provide a detailed explanation of the Ingestion API and Service Account?

[manthavish]

https://cloud.google.com/chronicle/docs/reference/ingestion-api lists how to use the ingestion API. Are the credentials you are using supplied by a Google representative as documented in this link ? If it is and you are getting a credentials failed, I'd check to make sure you are using the right endpoints and open a support case to ensure the credentials are still valid.