Resolved! Multiline-awscli command in auto-remedation

Hi Team,

I am curious to know when prisma-cloud team is coming up with new feature multi-line aws cli command in auto remediation.Can we expect it in next release?

Resolved! How to check a resource still exists and not been deleted

Hi guys.

I am looking at a implementation that has been running for over a year - however little work has been done just yet.  The system has 54000 OPEN alerts.  I want to check which alerts are still valid (ie. do the resource at the end of the alert

Resolved! RQL to find out custom AWS EC2 instance keypair

We have a custom AWS security checklist that we are manually running against each AWS account, and in that, we have a check to see if key pairs of all EC2 instances are created per function and per region when creating an instance with AMI. I'm looki

Resolved! timeRange absolute 400 Bad Request

Hi,

Am trying to fetch alerts based upon an absolute timerange to ensure I don't continuously run into timeouts with my queries (want to get all open alerts for long running accounts that customers never looked at or that simply have way too many mis

Resolved! rql to bring back account_names that are not running a 'named' CloudTrail

Hello team.

I have a named CloudTrail which every account must have.  aws-landing-zone-logs-us-east-1

Some accounts have additional CloudTrails in addition to the above for there own purposes.

I want an alert that tells me if 'any' account does

Resolved! Alert Dismissal Error response via API

Anyone have experience using the Prisma Cloud API with dismissing alert, i've been testing the but always getting 404 or 400 response, check parameters below

url = "https://api.prismacloud.io/alert/dismiss"

Resolved! RQL query for S3 Bucket activity

Does anyone know how to write a query to look for S3 bucket activity i.e someone logging in to S3 buckets and performing some task as creating objects etc. 

Resolved! User is always getting access to API Key

I am inserting a user into "Prisma Cloud" through API (https://api.prismacloud.io/user) with the request body as,

var userDetails = {
"email": email,
"firstName": firstName,
"lastName": lastName,
"timeZone": "America/Los_Angeles",
"roleId": <role id of sys

Resolved! RQL - display all VPC's, except DEFAULT, that do not have FlowLogs

Hello all.

New to RQL.  I have the below RQL that identifies DEFAULT VPC's;

config where cloud.account IN ( 'AWS_EBU_Networked_Prod_DR_DA_01' ) and api.name = 'aws-ec2-describe-vpcs' AND json.rule = isDefault is true

I have the below RQL that shows al

Resolved! Prisma Cloud - Azure Scan Frequency and Config change detection

Hi, I'm using the Prisma Cloud (previously Redlock). Is there a way I can change the frequency of the scans to check for misconfiguration. Also where can I check the current frequency. Does the scan run every hr or every 24 hr. Is it the same for AWS

Resolved! Not able to access API with token

I have Access Key and Secret Key, with the help of these we are getting Token and we are trying to use this Token to access list of cloud account (https://api.prismacloud.io/cloud) from the API Docs (api.docs.prismacloud.io/v4.2.1/reference) and from

Resolved! Prisma/Redlock API documentation

Hi team.  

Can someone share the URI for Prisma Cloud API REST documentation please.

(Can't find it anywhere)