Resolved! Exclude certain default VPCs/resource name in a cloud account in the compliance report

Onboarded our cloud account and had created a recurring compliance report. Some 'default' resource name were included in the report. How can we exclude the 'default' VPCs/resource name?

Resolved! RQL query for evaluating AWS security groups rule by rule

I am sure someone has had this issue.  

We want to get an alert if we allow access to all IP's on all ports.  The policy is based on this example:

filter '$.X.state.name equals running and $.X.publicIpAddress exists and $.X.securityGroups[*].groupId c

Resolved! which policy will it take to trigger the alerts??

Hi Friends,

We have a policy called "Azure SQL Server audit log retention is less than 91 days" with several alerts triggered for this.Now we have cloned the same policy with modified query inside the policy as 90 days.Here my doubt is what will happ

Resolved! How to find Accounts not monitored

Hi everyone.

I want to be able to list any AWS account that is not monitored by Prisma

We have AWS Organizations configured.  However I don't see any RQL to interrogate that to show the accounts in Organizations and compare to _AWSCloudAccount.isRedL

Resolved! List user policies and actions

Hi,

Can someone help me with an RQL to display the list of Users, policies attached, and the actions allowed in the policies.

I want to be able to export this into a CSV. Any help here is much appreciated.

Thanks,

Sultan 

Resolved! Error with RQL joint and atributes with dot

Hello,

I have an error when we are implementing a RQL query in the Investigate tab.

We make a join query searching in a VMs list and a NICs list in the prisma platform over a Azure suscription.

The problem seems to be over the filter part when we use t

Resolved! Multiline-awscli command in auto-remedation

Hi Team,

I am curious to know when prisma-cloud team is coming up with new feature multi-line aws cli command in auto remediation.Can we expect it in next release?

Resolved! How to check a resource still exists and not been deleted

Hi guys.

I am looking at a implementation that has been running for over a year - however little work has been done just yet.  The system has 54000 OPEN alerts.  I want to check which alerts are still valid (ie. do the resource at the end of the alert