Prisma Cloud Remediation - Invalid CLI script

EGunay — Thu, 16 Mar 2023 09:14:00 GMT

In Prisma Cloud SaaS, while creating custom remediation with cli commands, using custom variables or other cli command (such as grep) is not allowed apparently. Considering the following command, what could be the work-around to pass the output of the second gcloud command into the "rules" flag.

Following command successfully works on gcloud cli, however it produces "Invalid CLI script" error on Validation step;

gcloud compute --project=${account} firewall-rules update ${resourceName} --rules="$(gcloud compute --project=${account} firewall-rules list --filter="${resourceName}" | grep -o 'tcp:[^,]*' | grep -v 'tcp:22' | tr '\n' ',' | sed 's/,$//')"

topic Prisma Cloud Remediation - Invalid CLI script in Prisma Cloud Discussions

Prisma Cloud Remediation - Invalid CLI script