Prisma Public Cloud (formerly Redlock) Asset Inventory of Public IP

[QNiska1]

Does the Asset Inventory include all Public IP Addresses? or is this need to be a feature request?

[kchen · Accepted solution]

Asset Inventory currently only include resources and objects returned from metadata scans.  It doesn't include a list of public IPs, so this would need a feature request.

[kchen · Accepted solution]

Asset Inventory currently only include resources and objects returned from metadata scans.  It doesn't include a list of public IPs, so this would need a feature request.

[QNiska1]

Thanks for the update, Is there a portal for feature requests as of yet for Prisma Public Cloud?

[ebeuerlein]

Not as of yet, but you can file a support ticket and note that it is a feature request and put the request in the body.

[jjohn_gialluca@optum.com]

Three RQL querries for Amazon:

config where api.name = 'aws-ec2-describe-instances' addcolumn  privateIpAddress

config where api.name = 'aws-ec2-describe-instances' and json.rule = publicIpAddress exists

config where api.name = 'aws-ec2-describe-instances' AND json.rule = publicIpAddress exists and publicIpAddress is not empty

Is there an Azure equivalent to aws-ec2-describe-instances?

[kchen]

Yes, config where api.name = 'azure-vm-list' is the direct equivalent.

For your use case, you can try:

config where api.name = 'azure-vm-list' AND json.rule = ['properties.networkProfile'].networkInterfaces[*].publicIpAddressId exists