Create Vendor with Drata API on New Scheduled Tasks from Pipedream API

Pipedream makes it easy to connect APIs for Drata, Pipedream and 2,000+ other apps remarkably fast.

Trigger workflow on

New Scheduled Tasks from the Pipedream API

Next, do this

Create Vendor with the Drata API

No credit card required

▶

Watch us build a workflow

4 min

Watch now ➜

Trusted by 800,000+ developers from startups to Fortune 500 companies

Developers ♥ Pipedream

Getting Started#

This integration creates a workflow with a Pipedream trigger and Drata action. When you configure and deploy the workflow, it will run on Pipedream's servers 24x7 for free.

Select this integration
Configure the New Scheduled Tasks trigger
1. Connect your Pipedream account
2. Optional- Configure Secret
Configure the Create Vendor action
1. Connect your Drata account
2. Configure Name
3. Select a Category
4. Select a Risk
5. Configure Critical
6. Configure Is Sub Processor
7. Configure Is Sub Processor Active
8. Select a User ID
9. Configure URL
10. Configure Privacy URL
11. Configure Terms URL
12. Configure Services Provided
13. Configure Data Stored
14. Configure Location
15. Configure Has PII
16. Select a Password Policy
17. Configure Password Requires Min Length
18. Configure Password Requires Number
19. Configure Password Requires Symbol
20. Configure Password MFA Enabled
21. Configure Account Manager Name
22. Configure Account Manager Email
23. Configure Is Compliance Review Required
24. Optional- Configure Password Min Length
25. Optional- Configure Renewal Date
26. Optional- Select a Renewal Schedule Type
27. Optional- Configure Notes
28. Optional- Configure Confirmed
Deploy the workflow
Send a test event to validate your setup
Turn on the trigger

Details#

This integration uses pre-built, source-available components from Pipedream's GitHub repo. These components are developed by Pipedream and the community, and verified and maintained by Pipedream.

To contribute an update to an existing component or create a new component, create a PR on GitHub. If you're new to Pipedream component development, you can start with quickstarts for trigger span and action development, and then review the component API reference.

Trigger#

New Scheduled Tasks on Pipedream

Description:Exposes an HTTP API for scheduling messages to be emitted at a future time

Version:0.3.1

Key:pipedream-new-scheduled-tasks

View on GitHub

Pipedream Overview#

Pipedream is an API that allows you to build applications that can connect to
various data sources and processes them in real-time. You can use Pipedream to
create applications that can perform ETL (Extract, Transform, and Load) tasks,
as well as to create data-driven workflows.

Some examples of applications you can build using the Pipedream API include:

An application that can extract data from a database, transform it, and then
load it into another database.
An application that can monitor a data source for changes, and then trigger a
workflow in response to those changes.
An application that can poll an API for new data, and then process that data
in real-time.

Trigger Code#

import pipedream from "../../pipedream.app.mjs";
import sampleEmit from "./test-event.mjs";
import { uuid } from "uuidv4";

export default {
  key: "pipedream-new-scheduled-tasks",
  name: "New Scheduled Tasks",
  type: "source",
  description:
    "Exposes an HTTP API for scheduling messages to be emitted at a future time",
  version: "0.3.1",
  dedupe: "unique", // Dedupe on a UUID generated for every scheduled task
  props: {
    pipedream,
    secret: {
      type: "string",
      secret: true,
      label: "Secret",
      optional: true,
      description:
        "**Optional but recommended**: if you enter a secret here, you must pass this value in the `x-pd-secret` HTTP header when making requests",
    },
    http: {
      label: "Endpoint",
      description: "The endpoint where you'll send task scheduler requests",
      type: "$.interface.http",
      customResponse: true,
    },
    db: "$.service.db",
  },
  methods: {
    // To schedule future emits, we emit to the selfChannel of the component
    selfChannel() {
      return "self";
    },
    // Queue for future emits that haven't yet been delivered
    queuedEventsChannel() {
      return "$in";
    },
    httpRespond({
      status, body,
    }) {
      this.http.respond({
        headers: {
          "content-type": "application/json",
        },
        status,
        body,
      });
    },
    async selfSubscribe() {
      // Subscribe the component to itself. We do this here because even in
      // the activate hook, the component isn't available to take subscriptions.
      // Scheduled tasks are sent to the self channel, which emits the message at
      // the specified delivery_ts to this component.
      const isSubscribedToSelf = this.db.get("isSubscribedToSelf");
      if (!isSubscribedToSelf) {
        const componentId = process.env.PD_COMPONENT;
        const selfChannel = this.selfChannel();
        console.log(`Subscribing to ${selfChannel} channel for event source`);
        console.log(
          await this.pipedream.subscribe(componentId, componentId, selfChannel),
        );
        this.db.set("isSubscribedToSelf", true);
      }
    },
    validateEventBody(event, operation) {
      const errors = [];

      // Secrets are optional, so we first check if the user configured
      // a secret, then check its value against the prop (validation below)
      if (this.secret && event.headers["x-pd-secret"] !== this.secret) {
        errors.push(
          "Secret on incoming request doesn't match the configured secret",
        );
      }

      if (operation === "schedule") {
        const {
          timestamp,
          message,
        } = event.body;
        // timestamp should be an ISO 8601 string. Parse and check for validity below.
        const epoch = Date.parse(timestamp);

        if (!timestamp) {
          errors.push(
            "No timestamp included in payload. Please provide an ISO8601 timestamp in the 'timestamp' field",
          );
        }
        if (timestamp && !epoch) {
          errors.push("Timestamp isn't a valid ISO 8601 string");
        }
        if (!message) {
          errors.push("No message passed in payload");
        }
      }

      return errors;
    },
    scheduleTask(event) {
      const errors = this.validateEventBody(event, "schedule");
      let status, body;

      if (errors.length) {
        console.log(errors);
        status = 400;
        body = {
          errors,
        };
      } else {
        const id = this.emitScheduleEvent(event.body, event.body.timestamp);
        status = 200;
        body = {
          msg: "Successfully scheduled task",
          id,
        };
      }

      this.httpRespond({
        status,
        body,
      });
    },
    emitScheduleEvent(event, timestamp) {
      const selfChannel = this.selfChannel();
      const epoch = Date.parse(timestamp);
      const $id = uuid();

      console.log(`Scheduled event to emit on: ${new Date(epoch)}`);

      this.$emit(
        {
          ...event,
          $channel: selfChannel,
          $id,
        },
        {
          name: selfChannel,
          id: $id,
          delivery_ts: epoch,
        },
      );

      return $id;
    },
    async cancelTask(event) {
      const errors = this.validateEventBody(event, "cancel");
      let status, msg;

      if (errors.length) {
        console.log(errors);
        status = 400;
        msg = "Secret on incoming request doesn't match the configured secret";
      } else {
        try {
          const id = event.body.id;
          const isCanceled = await this.deleteEvent(event);
          if (isCanceled) {
            status = 200;
            msg = `Cancelled scheduled task for event ${id}`;
          } else {
            status = 404;
            msg = `No event with ${id} found`;
          }
        } catch (error) {
          console.log(error);
          status = 500;
          msg = "Failed to schedule task. Please see the logs";
        }
      }

      this.httpRespond({
        status,
        body: {
          msg,
        },
      });
    },
    async deleteEvent(event) {
      const componentId = process.env.PD_COMPONENT;
      const inChannel = this.queuedEventsChannel();

      // The user must pass a scheduled event UUID they'd like to cancel
      // We lookup the event by ID and delete it
      const { id } = event.body;

      // List events in the $in channel - the queue of scheduled events, to be emitted in the future
      const events = await this.pipedream.listEvents(
        componentId,
        inChannel,
      );
      console.log("Events: ", events);

      // Find the event in the list by id
      const eventToCancel = events.data.find((e) => {
        const { metadata } = e;
        return metadata.id === id;
      });

      console.log("Event to cancel: ", eventToCancel);

      if (!eventToCancel) {
        console.log(`No event with ${id} found`);
        return false;
      }

      // Delete the event
      await this.pipedream.deleteEvent(
        componentId,
        eventToCancel.id,
        inChannel,
      );
      return true;
    },
    emitEvent(event, summary) {
      // Delete the channel name and id from the incoming event, which were used only as metadata
      const id = event.$id;
      delete event.$channel;
      delete event.$id;

      this.$emit(event, {
        summary: summary ?? JSON.stringify(event),
        id,
        ts: +new Date(),
      });
    },
  },
  async run(event) {
    await this.selfSubscribe();

    const { path } = event;
    if (path === "/schedule") {
      this.scheduleTask(event);
    } else if (path === "/cancel") {
      await this.cancelTask(event);
    } else if (event.$channel === this.selfChannel()) {
      this.emitEvent(event);
    }
  },
  sampleEmit,
};

Trigger Configuration#

This component may be configured based on the props defined in the component code. Pipedream automatically prompts for input values in the UI and CLI.

Label	Prop	Type	Description
Pipedream	`pipedream`	`app`	This component uses the Pipedream app.
Secret	`secret`	`string`	Optional but recommended: if you enter a secret here, you must pass this value in the `x-pd-secret` HTTP header when making requests
N/A	`http`	`$.interface.http`	This component uses `$.interface.http` to generate a unique URL when the component is first instantiated. Each request to the URL will trigger the `run()` method of the component.
N/A	`db`	`$.service.db`	This component uses `$.service.db` to maintain state between executions.

Trigger Authentication#

Pipedream uses API keys for authentication. When you connect your Pipedream account, Pipedream securely stores the keys so you can easily authenticate to Pipedream APIs in both code and no-code steps.

About Pipedream#

Integration platform for developers

Action#

Create Vendor on Drata

Description:Create a new Vendor. [See the documentation](https://developers.drata.com/docs/openapi/reference/operation/VendorsPublicController_createVendor/).

Version:0.0.3

Key:drata-create-vendor

View on GitHub

Drata Overview#

Drata is a compliance automation platform. Drata’s platform is built by compliance and security experts so you don’t have to be one. With 75+ native integrations, you can easily connect your tech stack and automate evidence collection and testing.

Pipedream customers get 25% off Drata, with implementation fees waived. Visit https://drata.com/partner/pipedream for more information.

Action Code#

import drata from "../../drata.app.mjs";

const docsLink = "https://developers.drata.com/docs/openapi/reference/operation/VendorsPublicController_createVendor/";

export default {
  key: "drata-create-vendor",
  name: "Create Vendor",
  description: `Create a new Vendor. [See the documentation](${docsLink}).`,
  version: "0.0.3",
  type: "action",
  props: {
    drata,
    name: {
      type: "string",
      label: "Name",
      description: "The name of the vendor",
    },
    category: {
      type: "string",
      label: "Category",
      description: "The type of vendor",
      options: [
        "ENGINEERING",
        "PRODUCT",
        "MARKETING",
        "CS",
        "SALES",
        "FINANCE",
        "HR",
        "ADMINISTRATIVE",
        "SECURITY",
      ],
    },
    risk: {
      type: "string",
      label: "Risk",
      description: "The level of risk for customer data",
      options: [
        "NONE",
        "LOW",
        "MODERATE",
        "HIGH",
      ],
    },
    critical: {
      type: "boolean",
      label: "Critical",
      description: "Is this vendor is considered critical",
    },
    isSubProcessor: {
      type: "boolean",
      label: "Is Sub Processor",
      description: "Is this vendor is considered sub-processor",
    },
    isSubProcessorActive: {
      type: "boolean",
      label: "Is Sub Processor Active",
      description: "Is the subprocessor active",
    },
    userId: {
      propDefinition: [
        drata,
        "personnelId",
      ],
      label: "User ID",
      description: "The user ID of the person responsible for the compliance of this vendor",
    },
    url: {
      type: "string",
      label: "URL",
      description: "The URL of the vendor",
    },
    privacyUrl: {
      type: "string",
      label: "Privacy URL",
      description: "Vendor Privacy Policy URL",
    },
    termsUrl: {
      type: "string",
      label: "Terms URL",
      description: "Vendor Terms of Use URL",
    },
    servicesProvided: {
      type: "string",
      label: "Services Provided",
      description: "Describe vendor services",
    },
    dataStored: {
      type: "string",
      label: "Data Stored",
      description: "What type of data the vendor stores",
    },
    location: {
      type: "string",
      label: "Location",
      description: "The vendor location",
    },
    hasPii: {
      type: "boolean",
      label: "Has PII",
      description: "Does this vendor store any type of PII",
    },
    passwordPolicy: {
      type: "string",
      label: "Password Policy",
      description: "The vendor password policy",
      options: [
        "USERNAME_PASSWORD",
        "SSO",
        "LDAP",
      ],
    },
    passwordRequiresMinLength: {
      type: "boolean",
      label: "Password Requires Min Length",
      description: "Is there a minimum length for user passwords",
    },
    passwordRequiresNumber: {
      type: "boolean",
      label: "Password Requires Number",
      description: "Does a password require numbers",
    },
    passwordRequiresSymbol: {
      type: "boolean",
      label: "Password Requires Symbol",
      description: "Does a password require non-alpha-numeric characters",
    },
    passwordMfaEnabled: {
      type: "boolean",
      label: "Password MFA Enabled",
      description: "Is mult-factor authentication enabled for this vendor",
    },
    accountManagerName: {
      type: "string",
      label: "Account Manager Name",
      description: "The name of the corresponding account manager for this vendor",
    },
    accountManagerEmail: {
      type: "string",
      label: "Account Manager Email",
      description: "The email of the corresponding account manager for this vendor",
    },
    isComplianceReviewRequired: {
      type: "boolean",
      label: "Is Compliance Review Required",
      description: "Is vendor compliance report review required?",
    },
    passwordMinLength: {
      type: "integer",
      label: "Password Min Length",
      description: "Minimum character length for a password",
      optional: true,
    },
    renewalDate: {
      type: "string",
      label: "Renewal Date",
      description: "Vendor renewal ISO 8601 datetime. E.g. 2021-01-01T00:00:00.000Z",
      optional: true,
    },
    renewalScheduleType: {
      type: "string",
      label: "Renewal Schedule Type",
      description: "Vendor renewal schedule type",
      optional: true,
      options: [
        "ONE_MONTH",
        "TWO_MONTHS",
        "THREE_MONTHS",
        "SIX_MONTHS",
        "ONE_YEAR",
        "CUSTOM",
      ],
    },
    notes: {
      type: "string",
      label: "Notes",
      description: "Additional notes for vendor",
      optional: true,
    },
    confirmed: {
      type: "boolean",
      label: "Confirmed",
      description: "Is all vendor data confirmed?",
      optional: true,
    },
  },
  async run({ $ }) {
    const response = await this.drata.createVendor({
      $,
      data: {
        name: this.name,
        category: this.category,
        risk: this.risk,
        critical: this.critical,
        isSubProcessor: this.isSubProcessor,
        isSubProcessorActive: this.isSubProcessorActive,
        userId: this.userId,
        url: this.url,
        privacyUrl: this.privacyUrl,
        termsUrl: this.termsUrl,
        servicesProvided: this.servicesProvided,
        dataStored: this.dataStored,
        location: this.location,
        hasPii: this.hasPii,
        passwordPolicy: this.passwordPolicy,
        passwordRequiresMinLength: this.passwordRequiresMinLength,
        passwordRequiresNumber: this.passwordRequiresNumber,
        passwordRequiresSymbol: this.passwordRequiresSymbol,
        passwordMfaEnabled: this.passwordMfaEnabled,
        accountManagerName: this.accountManagerName,
        accountManagerEmail: this.accountManagerEmail,
        isComplianceReviewRequired: this.isComplianceReviewRequired,
        passwordMinLength: this.passwordMinLength,
        renewalDate: this.renewalDate,
        renewalScheduleType: this.renewalScheduleType,
        confirmed: this.confirmed,
      },
    });
    $.export("$summary", "Succesfully created vendor");
    return response;
  },
};

Action Configuration#

This component may be configured based on the props defined in the component code. Pipedream automatically prompts for input values in the UI.

Label	Prop	Type	Description
Drata	`drata`	`app`	This component uses the Drata app.
Name	`name`	`string`	The name of the vendor
Category	`category`	`string`	Select a value from the drop down menu:`ENGINEERINGPRODUCTMARKETINGCSSALESFINANCEHRADMINISTRATIVESECURITY`
Risk	`risk`	`string`	Select a value from the drop down menu:`NONELOWMODERATEHIGH`
Critical	`critical`	`boolean`	Is this vendor is considered critical
Is Sub Processor	`isSubProcessor`	`boolean`	Is this vendor is considered sub-processor
Is Sub Processor Active	`isSubProcessorActive`	`boolean`	Is the subprocessor active
User ID	`userId`	`integer`	Select a value from the drop down menu.
URL	`url`	`string`	The URL of the vendor
Privacy URL	`privacyUrl`	`string`	Vendor Privacy Policy URL
Terms URL	`termsUrl`	`string`	Vendor Terms of Use URL
Services Provided	`servicesProvided`	`string`	Describe vendor services
Data Stored	`dataStored`	`string`	What type of data the vendor stores
Location	`location`	`string`	The vendor location
Has PII	`hasPii`	`boolean`	Does this vendor store any type of PII
Password Policy	`passwordPolicy`	`string`	Select a value from the drop down menu:`USERNAME_PASSWORDSSOLDAP`
Password Requires Min Length	`passwordRequiresMinLength`	`boolean`	Is there a minimum length for user passwords
Password Requires Number	`passwordRequiresNumber`	`boolean`	Does a password require numbers
Password Requires Symbol	`passwordRequiresSymbol`	`boolean`	Does a password require non-alpha-numeric characters
Password MFA Enabled	`passwordMfaEnabled`	`boolean`	Is mult-factor authentication enabled for this vendor
Account Manager Name	`accountManagerName`	`string`	The name of the corresponding account manager for this vendor
Account Manager Email	`accountManagerEmail`	`string`	The email of the corresponding account manager for this vendor
Is Compliance Review Required	`isComplianceReviewRequired`	`boolean`	Is vendor compliance report review required?
Password Min Length	`passwordMinLength`	`integer`	Minimum character length for a password
Renewal Date	`renewalDate`	`string`	Vendor renewal ISO 8601 datetime. E.g. 2021-01-01T00:00:00.000Z
Renewal Schedule Type	`renewalScheduleType`	`string`	Select a value from the drop down menu:`ONE_MONTHTWO_MONTHSTHREE_MONTHSSIX_MONTHSONE_YEARCUSTOM`
Notes	`notes`	`string`	Additional notes for vendor
Confirmed	`confirmed`	`boolean`	Is all vendor data confirmed?

Action Authentication#

Drata uses API keys for authentication. When you connect your Drata account, Pipedream securely stores the keys so you can easily authenticate to Drata APIs in both code and no-code steps.

Make sure you're logged into the Drata UI, then see these docs to create a Drata API key. Enter it below.

About Drata#

Drata automates your compliance journey from start to audit-ready and beyond and provides support from the security and compliance experts who built it.

More Ways to Connect Drata + Pipedream#

Other Popular Integrations#

Create Asset with Drata API on New Scheduled Tasks from Pipedream API

Pipedream + Drata

Create Vendor with Drata API on New Scheduled Tasks from Pipedream API

Pipedream makes it easy to connect APIs for Drata, Pipedream and 2,000+ other apps remarkably fast.

Trusted by 800,000+ developers from startups to Fortune 500 companies

Developers ♥ Pipedream

1-24of2,000+apps by most popular

1
-
24
of
2,000+
apps by most popular