Prisma Cloud Remediation - AWS CloudTrail Misconfiguration v2

This playbook remediates Prisma Cloud AWS CloudTrail alerts. It calls sub-playbooks that perform the actual remediation steps. Remediation: - AWS CloudTrail Trail Log Validation Is Not Enabled In All Regions - AWS CloudTrail is not enabled in all regions - AWS CloudTrail Trail Is Not Integrated With CloudWatch Logs - AWS CloudTrail is not enabled on the account.

Pack

PrismaCloud

Tasks

14

Inputs

• policyId — Get the Prisma Cloud policy ID.
• AutoUpdateCloudTrail — Update AWS CloudTrail automatically?

Commands used

• closeInvestigation
• prisma-cloud-alert-dismiss