Prisma Cloud agentless scan on Bottlerocket OS

allandsm5 — Fri, 25 Jul 2025 16:57:43 GMT

Hello,

How well does Prisma Cloud agentless scan works on non-standard AMIs like AWS's Bottlerocket?

From tests on our side it shows 0 vulnerabilities detected, but I am not sure if these results are correct because of the nature of the system

It is right? Or Prisma is not capable of scanning it?

Re: Prisma Cloud agentless scan on Bottlerocket OS

WLejulus — Mon, 28 Jul 2025 21:03:09 GMT

Hello,

Agentless scanning for vulnerabilities and compliance is supported on Bottlerocket OS, but limited to x86 architecture. Bottlerocket instances on AWS are designed to have two disks by default
Agentless scans the data disk as it contains the dynamic data. No Compliance scan as Prisma Cloud doesn't scan the root disk

Can you check and confirm those bottlerocket instances have a data disk?

Let us know if you have any other questions.

Regards,

topic Re: Prisma Cloud agentless scan on Bottlerocket OS in Prisma Cloud Discussions

Prisma Cloud agentless scan on Bottlerocket OS

Re: Prisma Cloud agentless scan on Bottlerocket OS