Hello everyone.I'm using Ubuntu 20.04 LTS and I installed docker via snap to run containers. When I install a container defender on this host, I get the following error: invalid output path: directory "/var/lib/twistlock" does not exist.Failed to cop...
Hello Team Hope you are doing well. Prisma cloud palo Alto: I just have one query as I am getting"Unable to ingest data from one or more service,click for more details" error what could be the possibility reason. I didn't change anything to my any ac...
We are looking to automate a check on a new resource to see if it passes our compliance policies. As part of this automated checking we are wondering how long we should wait after a resource is created before we run the check. Is there an estimated a...
Hi There,We have a build process that we are migrating to a rootless containerized builder, and are using buildah to build and push the images instead of docker. If I pull an image with buildah, it downloads the image but when I run twistcli on that ...
Hi,I'm trying to help a customer filter out false-positives in the Prisma Cloud policies. For instance, we have a customised "Internet exposed instances" where they previously have white listed specific IP addresses, which is not very dynamic. Instea...
I'm finding what appears to be a lot of false positives for alerts within Compute Defender > Events and Runtime. What is best practice for marking these false positive to prevent additional alerts from being generated? I noticed some options for re-l...
We are getting the following error in our Lambdas, [ERROR] Runtime.ImportModuleError: Unable to import module 'twistlock': Failed to import module: lambda_functionTraceback (most recent call last): After troubleshooting, our team identifies that is d...
On the Network tab for my hosts in the Radars/Hosts view, Cuba is being flagged as an outbound destination.I'm curious how to drill down into why that's the case to determine whether this is erroneous or not.This is on a self-hosted deployment versio...
Is it possible to ingest private endpoint connections from Azure Resources in resources like SQL Database, App Services, Storage Account and others? I have tried to get this information consulting the Resource Config JSON and I could not find this da...
Do you guys have any experience of using custom policies to find unused/unattached security group in any cloud environment? Would like to see and take reference. Thanks
Trying to put together a query to identify excessive assumeRole permissions. For example it would identify if the following is in a policy. "Action": ["sts:AssumeRole"],"Effect": "Allow","Resource": "*" I've been messing around with some queries, I h...
has anybody setup a pipeline to automatically update the AWS Cloudformation stack and stack set when new templates are available?
Hello, Currently working with DevOps team to incorporate IaC into Azure DevOps Server and Azure Devops (cloud). I've created a role for the DevOps Engineers with the ACCOUNT GROUP READ ONLY permissions. The one problem that cropped up, the DevOps eng...
Spectrum by Prisma Cloud is the industry’s only cloud security event that meets you where you are on your cloud journey. Join us on April 27 for our inaugural event where we zero in on visibility as the catalyst to comprehensive, scalable security. W...
