Skip to main content


Supported versions

Supported Cortex XSOAR versions: 5.5.0 and later.

To use the common JSON feed API logic, run the following command to import the JSONFeedApiModule. The module expects the feed to be configured with the following parameters:

Per sub-feed name:

  • URL
  • jmespath extractor
  • indicator name
  • indicator type

See the below example:

def main():
feed_name_to_config = {
'url': '',
'extractor': "prefixes[?service=='AMAZON']",
'indicator': 'ip_prefix',
'indicator_type': FeedIndicatorType.IP,
params = {k: v for k, v in demisto.params().items() if v is not None}
params['feed_name_to_config'] = feed_name_to_config
feed_main(params, 'AWS Feed')
from JSONFeedApiModule import * # noqa: E402
if __name__ in ["builtins", "__main__"]: