Which two variables must be modified to achieve automatic remediation for identity and access management (IAM) alerts in the Amazon Web Services (AWS) Cloud? (Choose two.)

The correct answer is A. API_ENDPOINT C. SQS_QUEUE_NAME. For AWS IAM automatic remediation in Prisma Cloud, the remediation script relies on AWS SQS (Simple Queue Service) as the messaging mechanism that triggers Lambda-based remediation functions. Two variables in the remediation configuration must be set: 'API_ENDPOINT' (the Prisma C

Cloud Infrastructure Entitlement Management (CIEM)

Question

Options

AAPI_ENDPOINT
BSB_QUEUE_KEY_NAME
CSQS_QUEUE_NAME
Dalert_id

How the community answered

(64 responses)

A
72% (46)
B
17% (11)
D
11% (7)

Explanation

For AWS IAM automatic remediation in Prisma Cloud, the remediation script relies on AWS SQS (Simple Queue Service) as the messaging mechanism that triggers Lambda-based remediation functions. Two variables in the remediation configuration must be set: 'API_ENDPOINT' (the Prisma Cloud API endpoint URL used to retrieve alert details and confirm remediation) and 'SQS_QUEUE_NAME' (the name of the AWS SQS queue that receives the alert payload and triggers the remediation Lambda). 'SB_QUEUE_KEY_NAME' is associated with Azure Service Bus (not AWS SQS), and 'alert_id' is a runtime parameter, not a configuration variable that needs to be modified in advance.

Topics

#Automatic Remediation#IAM Security#AWS Integration#Prisma Cloud

Community Discussion

No community discussion yet for this question.

Full PCCSE Practice