topic Exclude certain default VPCs/resource name in a cloud account in the compliance report in Prisma Cloud Discussions

Exclude certain default VPCs/resource name in a cloud account in the compliance report

LRaagas — Wed, 02 Sep 2020 17:59:03 GMT

Onboarded our cloud account and had created a recurring compliance report. Some 'default' resource name were included in the report. How can we exclude the 'default' VPCs/resource name?

Re: Exclude certain default VPCs/resource name in a cloud account in the compliance report

FranciscoBreijo — Mon, 23 Mar 2020 13:39:14 GMT

This would need to be handled at the specific policy level. However, I would recommend against it. Fundamentally, the default resources could still be used, and are outside of normal security guardrails. Thus you are introducing a blind spot, by not addressing them.

Our recommendation, is to fully secure the default resources as well, to ensure that in the event a user inadvertently associates a resource with a default resource, you are not exposed, or vulnerable.

Re: Exclude certain default VPCs/resource name in a cloud account in the compliance report

LRaagas — Mon, 23 Mar 2020 14:27:41 GMT

Thanks for the response.

Understood. This has to be done on the policy level by modifying the RQL. Makes sense as well to address the alerts on the default VPCs - which we had done.