Prisma Cloud Remediation - AWS CloudTrail Trail Misconfiguration

This playbook remediates the following Prisma Cloud AWS CloudTrail alerts. Prisma Cloud policies remediated: - AWS CloudTrail Trail Log Validation Is Not Enabled In All Regions - AWS CloudTrail is not enabled in all regions.

Prisma Cloud by Palo Alto Networks · 9 tasks · 1 input · 0 outputs

Inputs

  • policyId — Grab the Prisma Cloud policy Id.

Commands used

aws-cloudtrail-describe-trails aws-cloudtrail-update-trail

Flowchart

allRegions logValid yes Start Start Get CloudTrail detail - aws-cloudtrail-describe-trails Get CloudTrail detail aws-cloudtrail-describe-trails Done Done Update CloudTrail LogValidation - aws-cloudtrail-update-trail Update CloudTrail LogVali... aws-cloudtrail-update-trail Log Validation Is Not Enabled In All Regions Log Validation Is Not Ena... Execute remediation Execute remediation Trail Not Enabled In All Regions Trail Not Enabled In All ... Update CloudTrail MultiRegion - aws-cloudtrail-update-trail Update CloudTrail MultiRe... aws-cloudtrail-update-trail Is AWS - CloudTrail integration enabled? Is AWS - CloudTrail integ...