Rapid7 Scan Hosts via API

Rapid7Scan.sh

# Rapid7 Scan Request
# Sites and their corresponding ID:
# ATL                       = 1
# NYC                       = 2
#
# Scan Engines and their corresponding ID:
# ATLSCANNER                = 1
# NYCSCANNER                = 2
#
# Which Scan Engines Go with Which Sites:
# ATLSCANNER                = ATL
# NYCSCANNER                = NYC
# 
# Variables:
# INSIGHTVM_AUTH variable must be environment variable, preferably run through orchestration tool or pulled from parameter store.
SITE="1"
ENGINE="1"
HOSTS='"10.10.10.10","10.10.10.11","10.10.10.12"'
SCAN_NAME="Test"
TEMPLATE="a-test-template"
BASE_URL="https://rapid7consoleurl.com:3780"

curl --location --request POST ''${BASE_URL}'/api/3/sites/'${SITE}'/scans' \
--header 'Content-Type: application/json' \
--header 'Authorization: Basic '${INSIGHTVM_AUTH}'' \
--data-raw '{
    "engineId": "'${ENGINE}'",
    "hosts": [
        '${HOSTS}'
    ],
    "name": "'${SCAN_NAME}'",
    "templateId": "'${TEMPLATE}'"
}'