Prisma Cloud Remediation - AWS CloudTrail Misconfiguration Deprecated Hidden

Deprecated. Use Prisma Cloud Remediation - AWS CloudTrail Misconfiguration v2 instead. This playbook remediates Prisma Cloud AWS CloudTrail alerts. It calls sub-playbooks that perform the actual remediation steps. Remediation: - AWS CloudTrail Trail Log Validation Is Not Enabled In All Regions - AWS CloudTrail is not enabled in all regions - AWS CloudTrail Trail Is Not Integrated With CloudWatch Logs - AWS CloudTrail is not enabled on the account

Prisma Cloud by Palo Alto Networks · 14 tasks · 2 inputs · 0 outputs

Inputs

  • AutoUpdateCloudTrail — Update AWS CloudTrail automatically?
  • policyId — Get the Prisma Cloud policy ID.

Commands used

closeInvestigation redlock-dismiss-alerts

Flowchart

yes yes Yes yes account integrationCW trailMisconfig yes Start Start Is AWS - CloudTrail integration enabled? Is AWS - CloudTrail integ... Update CloudTrail automatically? Update CloudTrail automat... Auto remediate? Auto remediate? Manually update CloudTrail Manually update CloudTrail Close investigation - closeInvestigation Close investigation closeInvestigation Done Done Is Prisma Cloud v2 integration enabled? Is Prisma Cloud v2 integr... Execute playbook Execute playbook Is there a policy to remediate? Is there a policy to reme... Prisma Cloud Remediation - AWS CloudTrail Trail Misconfiguration - Prisma Cloud Remediation - AWS CloudTrail Trail Misconfiguration Prisma Cloud Remediation ... Prisma Cloud Remediation - AW... Prisma Cloud Remediation - AWS CloudTrail is not Enabled on the Account - Prisma Cloud Remediation - AWS CloudTrail is not Enabled on the Account Prisma Cloud Remediation ... Prisma Cloud Remediation - AW... Prisma Cloud Remediation - AWS CloudTrail Is Not Integrated With CloudWatch Logs - Prisma Cloud Remediation - AWS CloudTrail Is Not Integrated With CloudWatch Logs Prisma Cloud Remediation ... Prisma Cloud Remediation - AW... Dismiss Prisma Cloud alert - redlock-dismiss-alerts Dismiss Prisma Cloud alert redlock-dismiss-alerts