Prisma Cloud Remediation - AWS IAM User Policy Misconfiguration

This playbook remediates the following Prisma Cloud AWS IAM User alerts. Prisma Cloud policies remediated: - AWS IAM user has two active Access Keys

Prisma Cloud by Palo Alto Networks · 8 tasks · 1 input · 0 outputs

Inputs

  • policyId — Prisma Cloud policy Id.

Commands used

aws-iam-list-access-keys-for-user aws-iam-update-access-key

Flowchart

twoKeys yes Start Start Disable the user's 2nd access key - aws-iam-update-access-key Disable the user's 2nd ac... aws-iam-update-access-key Done Done Print credential report - Print Print credential report Print List user access keys - aws-iam-list-access-keys-for-user List user access keys aws-iam-list-access-keys-for-... Two Active Access Keys Two Active Access Keys Execute remediation Execute remediation Is AWS - IAM integration enabled? Is AWS - IAM integration ...