Prisma Cloud Remediation - AWS CloudTrail Is Not Integrated With CloudWatch Logs

This playbook remediates the following Prisma Cloud AWS CloudTrail alerts. Prisma Cloud policies remediated: - AWS CloudTrail Is Not Integrated With CloudWatch Logs

Prisma Cloud by Palo Alto Networks · 18 tasks · 0 inputs · 0 outputs

Commands used

aws-cloudtrail-describe-trails aws-cloudtrail-update-trail aws-iam-attach-policy aws-iam-create-policy aws-iam-create-role aws-iam-get-role aws-logs-create-log-group aws-logs-describe-log-groups

Flowchart

yes yes no yes yes yes Start Start Get CloudTrail detail - aws-cloudtrail-describe-trails Get CloudTrail detail aws-cloudtrail-describe-trails Done Done Is AWS - CloudWatchLogs integration enabled? Is AWS - CloudWatchLogs i... Create AWS CloudWatchLogs group - aws-logs-create-log-group Create AWS CloudWatchLogs... aws-logs-create-log-group Update CloudTrail - aws-cloudtrail-update-trail Update CloudTrail aws-cloudtrail-update-trail Get CloudWatchLogs group name - aws-logs-describe-log-groups Get CloudWatchLogs group ... aws-logs-describe-log-groups Create IAM Role - aws-iam-create-role Create IAM Role aws-iam-create-role Check for existing IAM Role - aws-iam-get-role Check for existing IAM Role aws-iam-get-role Get the IAM Role - aws-iam-get-role Get the IAM Role aws-iam-get-role Wait for IAM resources - Sleep Wait for IAM resources Sleep Create Logs policy - aws-iam-create-policy Create Logs policy aws-iam-create-policy Attach Logs policy to IAM Role - aws-iam-attach-policy Attach Logs policy to IAM... aws-iam-attach-policy Check for existing Logs group - aws-logs-describe-log-groups Check for existing Logs g... aws-logs-describe-log-groups Missing Logs group? Missing Logs group? Missing IAM Role? - isError Missing IAM Role? isError Is AWS - CloudTrail integration enabled? Is AWS - CloudTrail integ... Is AWS - IAM integration enabled? Is AWS - IAM integration ...