Prisma Cloud Remediation - AWS Security Groups Allows Internet Traffic To TCP Port

This playbook extracts the TCP public Security Groups rule and provides manual/automatic options to have the rules revoked.

Pack

PrismaCloud

Tasks

12

Inputs

• AutoRevokeRule — If set to: - yes: public security group rules will be automatically revoked - no: analyst will be prompted whether or not to allow automatic removal of the rules.

Commands used

• aws-ec2-describe-security-groups
• aws-ec2-revoke-security-group-ingress-rule
• closeInvestigation