Prisma Cloud Remediation - AWS CloudTrail Misconfiguration v2

This playbook remediates Prisma Cloud AWS CloudTrail alerts. It calls sub-playbooks that perform the actual remediation steps. Remediation: - AWS CloudTrail Trail Log Validation Is Not Enabled In All Regions - AWS CloudTrail is not enabled in all regions - AWS CloudTrail Trail Is Not Integrated With CloudWatch Logs - AWS CloudTrail is not enabled on the account.

Prisma Cloud by Palo Alto Networks · 14 tasks · 2 inputs · 0 outputs

Inputs

  • policyId — Get the Prisma Cloud policy ID.
  • AutoUpdateCloudTrail — Update AWS CloudTrail automatically?

Commands used

closeInvestigation prisma-cloud-alert-dismiss

Flowchart

yes yes Yes yes account integrationCW trailMisconfig yes Start Start Is AWS - CloudTrail integration enabled? Is AWS - CloudTrail integ... Update CloudTrail automatically? Update CloudTrail automat... Auto remediate? Auto remediate? Manually update CloudTrail Manually update CloudTrail Close investigation - closeInvestigation Close investigation closeInvestigation Done Done Is Prisma Cloud v2 integration enabled? Is Prisma Cloud v2 integr... Remediate based on policy ID Remediate based on policy ID Is there a policy to remediate? Is there a policy to reme... Prisma Cloud Remediation - AWS CloudTrail Trail Misconfiguration - Prisma Cloud Remediation - AWS CloudTrail Trail Misconfiguration Prisma Cloud Remediation ... Prisma Cloud Remediation - AW... Prisma Cloud Remediation - AWS CloudTrail is not Enabled on the Account - Prisma Cloud Remediation - AWS CloudTrail is not Enabled on the Account Prisma Cloud Remediation ... Prisma Cloud Remediation - AW... Prisma Cloud Remediation - AWS CloudTrail Is Not Integrated With CloudWatch Logs - Prisma Cloud Remediation - AWS CloudTrail Is Not Integrated With CloudWatch Logs Prisma Cloud Remediation ... Prisma Cloud Remediation - AW... Dismiss Prisma Cloud alert - prisma-cloud-alert-dismiss Dismiss Prisma Cloud alert prisma-cloud-alert-dismiss