Prisma Cloud Remediation - Azure AKS Misconfiguration Deprecated Hidden

Deprecated. Use Prisma Cloud Remediation - Azure AKS Misconfiguration v2 instead. This playbook remediates Prisma Cloud Azure AKS alerts. It calls sub-playbooks that perform the actual remediation steps. Remediation: - Azure AKS cluster monitoring not enabled - Azure AKS cluster HTTP application routing enabled

Prisma Cloud by Palo Alto Networks · 12 tasks · 2 inputs · 1 output

Details

IDPrisma Cloud Remediation - Azure AKS Misconfiguration
From Version5.0.0
Tasks12

README

This playbook remediates Prisma Cloud Azure AKS alerts. It calls sub-playbooks that perform the actual remediation steps.

Remediation:

  • Azure AKS cluster monitoring not enabled
  • Azure AKS cluster HTTP application routing enabled

Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks

  • Prisma Cloud Remediation - Azure AKS Cluster Misconfiguration

Integrations

  • PrismaCloud v2

Scripts

  • IsIntegrationAvailable

Commands

  • closeInvestigation
  • redlock-dismiss-alerts

Playbook Inputs

Name Description Default Value Required
AutoRemediateAzureAKS Execute Azure AKS remediation automatically? no Optional
policyId Grab the Prisma Cloud policy Id. incident.labels.policy Optional

Playbook Outputs

Path Description Type
incident.labels.resource.name AKS cluster name. string

Playbook Image

Prisma Cloud Remediation - Azure AKS Misconfiguration

Inputs

  • AutoRemediateAzureAKS — Execute Azure AKS remediation automatically?
  • policyId — Grab the Prisma Cloud policy Id.

Outputs

  • incident.labels.resource.name — AKS cluster name.

Commands used

closeInvestigation redlock-dismiss-alerts

Flowchart

yes yes yes Yes cluster yes Start Start Is Azure Kubernetes Services integration enabled? - IsIntegrationAvailable Is Azure Kubernetes Servi... IsIntegrationAvailable Done Done Is there a policy to remediate? Is there a policy to reme... Update AKS automatically? Update AKS automatically? Auto remediate? Auto remediate? Execute playbook Execute playbook Manually update AKS Manually update AKS Close investigation - closeInvestigation Close investigation closeInvestigation Is Prisma Cloud v2 integration enabled? Is Prisma Cloud v2 integr... Dismiss Prisma Cloud alert - redlock-dismiss-alerts Dismiss Prisma Cloud alert redlock-dismiss-alerts Prisma Cloud Remediation - Azure AKS Cluster Misconfiguration - Prisma Cloud Remediation - Azure AKS Cluster Misconfiguration Prisma Cloud Remediation ... Prisma Cloud Remediation - Az...

Source

playbook-PCR_-_Azure_AKS_Misconfig.yml playbook-PCR_-_Azure_AKS_Misconfig_v2.yml playbook-PCR_-_Azure_AKS_Misconfig_v2_README.md
Download History Raw 
This playbook remediates Prisma Cloud Azure AKS alerts.  It calls sub-playbooks that perform the actual remediation steps.

Remediation:
- Azure AKS cluster monitoring not enabled
- Azure AKS cluster HTTP application routing enabled


## Dependencies

This playbook uses the following sub-playbooks, integrations, and scripts.

### Sub-playbooks

Prisma Cloud Remediation - Azure AKS Cluster Misconfiguration

### Integrations

PrismaCloud v2

### Scripts

IsIntegrationAvailable

### Commands

* prisma-cloud-alert-dismiss
* closeInvestigation

## Playbook Inputs

---

| **Name** | **Description** | **Default Value** | **Required** |
| --- | --- | --- | --- |
| AutoRemediateAzureAKS | Execute Azure AKS remediation automatically? | no | Optional |
| policyId | Grab the Prisma Cloud policy ID. | incident.labels.policy | Optional |

## Playbook Outputs

---

| **Path** | **Description** | **Type** |
| --- | --- | --- |
| incident.labels.resource.name | AKS cluster name. | string |

## Playbook Image

---

![Prisma Cloud Remediation - Azure AKS Misconfiguration v2](../doc_files/Prisma_Cloud_Remediation_-_Azure_AKS_Misconfiguration_v2.png)