Prisma Cloud Remediation - GCP Compute Engine Instance Misconfiguration

This playbook remediates the following Prisma Cloud GCP Compute Engine VM Instance alerts. Prisma Cloud policies remediated: - GCP VM instances have serial port access enabled - GCP VM instances have block project-wide SSH keys feature disabled - GCP VM instances without any custom metadata information

Prisma Cloud by Palo Alto Networks · 11 tasks · 1 input · 0 outputs

Inputs

  • policyId — Prisma Cloud policy Id.

Commands used

gcp-compute-get-instance gcp-compute-set-instance-metadata

Flowchart

noMetaData serialPort sshKeys yes Start Start Disable VM instance serial port access - gcp-compute-set-instance-metadata Disable VM instance seria... gcp-compute-set-instance-meta... Done Done Get VM instance details - gcp-compute-get-instance Get VM instance details gcp-compute-get-instance Execute remediation Execute remediation Block Project Wide SSH Keys Disabled Block Project Wide SSH Ke... Serial Port Access Enabled Serial Port Access Enabled Block project wide ssh-key access - gcp-compute-set-instance-metadata Block project wide ssh-ke... gcp-compute-set-instance-meta... No Metadata No Metadata Add VM instance metadata - gcp-compute-set-instance-metadata Add VM instance metadata gcp-compute-set-instance-meta... Is Google Cloud Compute integration enabled? Is Google Cloud Compute i...