This website uses cookies essential to its operation, for analytics, and for personalized content. By continuing to browse this site, you acknowledge the use of cookies. For details on cookie usage on our site, read our Privacy Policy
Hi,
We have a dev/PoC project that is testing some flows that create and delete VMs, so every week for a couple of hours we had some alerts for an IAM Policy " VM instance with data destruction permissions" when it is a permanente VM we ask to follow the recommendations.
How would I be able to except the specific project from this policy or I need to make a custom one?
... View more
Hi,
Our administrator added group reader to the prisma account
.
But reading through the docs can´t find the RQL for getting the workspace specific information
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-rql-reference/rql-reference/iam-query/iam-query-examples
For example changing the following with a group in workspace returns no results
config from iam where dest.cloud.type = 'GCP' and source.cloud.resource.type = 'user' and grantedby.cloud.entity.name = 'your group name'
... View more
Hello,
Enabled the IAM module and added the Google Workspace (GSuite) group reader role to the prisma service account but have been not able to find the query to get group members or other workspace information. Only information I currently get is the cloudresourcemanager api results.
Also is it possible to get from workspace reports which accounts have 2SV enabled?
... View more