Prisma Cloud Remediation - Azure SQL Misconfiguration v2

This playbook remediates Prisma Cloud Azure SQL alerts. It calls sub-playbooks that perform the actual remediation steps. Remediation: - Azure SQL database auditing is disabled - Azure SQL Database with Auditing Retention less than 90 days - Azure Threat Detection on SQL databases is set to Off - Azure SQL Database with Threat Retention less than or equals to 90 days

Pack

PrismaCloud

Tasks

12

Inputs

• policyId — Grab the Prisma Cloud policy ID.
• AutoRemediateAzureSQL — Execute Azure SQL remediation automatically?

Commands used

• closeInvestigation
• prisma-cloud-alert-dismiss