I see references to PUBLIC_CORE_API_HOST in my sign-in page for Panther. Where is this variable set and what is it used for?

Last updated: November 26, 2025

QUESTION

What is the PUBLIC_CORE_API_HOST variable that appears in Panther sign-in pages and Pulumi logs, and where is it set?

ANSWER

The PUBLIC_CORE_API_HOST variable is automatically set during Panther's build process and points to an AWS API Gateway endpoint. This variable serves two main purposes:

It's used for SSO sign-ins within the Panther Console
It provides OAuth redirect URLs that are required for whitelisting in certain OAuth log source integrations