Cortex Cloud Discussions
Share ideas and post questions related to Cortex Cloud — the industry's most comprehensive cloud native security platform — and the compute capabilities available within it in this forum.
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Cortex Cloud Discussions
Share ideas and post questions related to Cortex Cloud — the industry's most comprehensive cloud native security platform — and the compute capabilities available within it in this forum.
About Cortex Cloud Discussions
Share ideas and post questions related to Cortex Cloud — the industry's most comprehensive cloud native security platform — and the compute capabilities available within it in this forum.

Discussions

Welcome to the Prisma Cloud Discussions!

To make this forum valuable and enjoyable for everyone, please review the following guidelines before participating: Rules and Best Practices Be Respectful: Treat fellow community members with professionalism and courtesy. Constructive discussions are encouraged; disrespectful or inflammatory comments are not. Stay On-Topic: This board is d...

JayGolf by Community Team Member
  • 5037 Views
  • 1 replies
  • 1 Likes

Resolved! What is frequency at which redlock scans cloud accounts ?

I am curious to know the frequency at which redlock scans /make api calls to cloud accounts, I undersatnd once policy is created and alert rule is configured & also wanted to know if there is any feature in redlock to capture the exact details api calls made. However I have been configured redlock service with my multiple AWS accounts and I ...

SBk by L0 Member
  • 8664 Views
  • 4 replies
  • 0 Likes

Error while adding GCP account (permission denied)

Hi,I am trying out RedLock using the trial and I am having issues trying to configure my GCP project. I followed the instructions carefully at https://docs.paloaltonetworks.com/redlock/redlock-admin/connect-your-cloud-platform-to-redlock/onboard-your-gcp-account/set-up-gcp-account-for-redLock-service.html I got permissions error. I even tried te...

image.png
FAllard by L1 Bithead
  • 9734 Views
  • 6 replies
  • 0 Likes

Capture JSON for Alerts that are sent to SQS

I have configured Redlock to send alert to SQS queue. I am getting the below fields in JSON body when I fetch it from SQS:However, When I try to fetch the alert details using Alert API I get the complete different schema. SQS_JSON_FieldsAlert_API_JSONAs soon as an alert is generated, then the JSON data for that alert is sent to SQS queue. (I ha...

SQS_json.JPG
Alert_API_Detailed.JPG
APaul by L0 Member
  • 4972 Views
  • 1 replies
  • 0 Likes

Python API for Compliance Reports

Hi all, I'd like to create, read, update and/or delete Compliance Reports via the API but there's no documentation on compliance reports in the REST API documentation. It was confirmed that the API does support CRUD for compliance reports and that a ticket for the inclusion of the information in the documentation has been opened, but I was wonde...

JBox by L1 Bithead
  • 6529 Views
  • 2 replies
  • 0 Likes

Resolved! API GET Cloud Account Info: no data in "lastModifiedTs" or "lastModifiedBy" in Azure accounts

Hi all, With the returned JSON using the 'Cloud Account Info' API for a couple of Azure accounts I have, the fields "lastModifiedTs" and "lastModifiedBy" show 0 and null respectively. However, the portal has the correct time and details of who last modified. Is this a bug or am I missing something? Thanks!

JBox by L1 Bithead
  • 5224 Views
  • 1 replies
  • 0 Likes

Resolved! Python API: Add Compliance Standard to Policy

Hi all, I'm having trouble adding a Compliance Standard to an existing Policy via the API. In essence my code looks like:import requests url = https://api2.redlock.io/policy/{policy_id} header = {'Content-Type': 'application/json', 'x-redlock-auth': 'token'} payload = { 'name': 'policy_name', 'policyType': 'policy_type', 'severit...

JBox by L1 Bithead
  • 16499 Views
  • 7 replies
  • 0 Likes

Resolved! Prisma Public Cloud Query - Exclude AWS security group that is not associated with any resources

Hi, Some policies are producing alerts against SGs that are not associated with any resources.Can you please advise how to customize the query and exclude those SGs? For example, policy "AWS Security Groups allow internet traffic from internet to MYSQL port (3306)" is defined as follows:config where cloud.type = 'aws' AND api.name='aws-ec2-des...

DXiao by L0 Member
  • 6376 Views
  • 1 replies
  • 0 Likes
  • 478 Posts
  • 68 Subscriptions
Top Solution Authors
Top Liked Authors