Prisma Cloud Remediation - AWS EC2 Instance Misconfiguration v2

This playbook remediates Prisma Cloud AWS EC2 alerts. It calls the following sub-playbooks to perform the remediation: - AWS Default Security Group Does Not Restrict All Traffic (policy id: 2378dbf4-b104-4bda-9b05-7417affbba3f) - AWS Security Group allows all traffic on SSH port (22) (policy id: 617b9138-584b-4e8e-ad15-7fbabafbed1a) - AWS Security Groups allow internet traffic from internet to RDP port (3389) (policy id: b82f90ce-ed8b-4b49-970c-2268b0a6c2e5).

Prisma Cloud by Palo Alto Networks · 13 tasks · 2 inputs · 0 outputs

Inputs

  • policyId — Get the Prisma Cloud policy ID.
  • AutoUpdateEC2 — Update AWS EC2 instance automatically?

Commands used

closeInvestigation prisma-cloud-alert-dismiss

Flowchart

yes yes Yes yes internetPorts securityGroups yes Start Start Is AWS - EC2 integration available? - IsIntegrationAvailable Is AWS - EC2 integration ... IsIntegrationAvailable Update EC2 automatically? Update EC2 automatically? Auto remediate? Auto remediate? Manually remediate EC2 Manually remediate EC2 Close investigation - closeInvestigation Close investigation closeInvestigation Done Done Is Prisma Cloud v2 integration enabled? Is Prisma Cloud v2 integr... Execute playbook Execute playbook Is there a policy to remediate? Is there a policy to reme... Prisma Cloud Remediation - AWS EC2 Security Group Misconfiguration - Prisma Cloud Remediation - AWS EC2 Security Group Misconfiguration Prisma Cloud Remediation ... Prisma Cloud Remediation - AW... Prisma Cloud Remediation - AWS Security Groups Allows Internet Traffic To TCP Port - Prisma Cloud Remediation - AWS Security Groups Allows Internet Traffic To TCP Port Prisma Cloud Remediation ... Prisma Cloud Remediation - AW... Dismiss Prisma Cloud alert - prisma-cloud-alert-dismiss Dismiss Prisma Cloud alert prisma-cloud-alert-dismiss