What is the function of the external ID when onboarding a new Amazon Web Services (AWS) account in Prisma Cloud?

The correct answer is C. It is a UUID that establishes a trust relationship between the Prisma Cloud account and the AWS. When onboarding an AWS account to Prisma Cloud, an External ID (a UUID) is used as part of the cross-account IAM role trust policy. It is a security best practice known as the 'confused deputy' mitigation - it ensures that only Prisma Cloud (the trusted third party) can assume th

Prisma Cloud Platform

Question

Options

AIt is a unique identifier needed only when Monitor & Protect mode is selected.
BIt is the resource name for the Prisma Cloud Role.
CIt is a UUID that establishes a trust relationship between the Prisma Cloud account and the AWS
DIt is the default name of the PrismaCloudApp stack.

How the community answered

(41 responses)

A
2% (1)
C
93% (38)
D
5% (2)

Explanation

When onboarding an AWS account to Prisma Cloud, an External ID (a UUID) is used as part of the cross-account IAM role trust policy. It is a security best practice known as the 'confused deputy' mitigation - it ensures that only Prisma Cloud (the trusted third party) can assume the designated IAM role in your AWS account, preventing other entities from exploiting the role. It is required regardless of whether Monitor or Monitor & Protect mode is selected, and it is not the role ARN or a CloudFormation stack name.

Topics

#Prisma Cloud#AWS Integration#External ID#Trust Relationship

Community Discussion

No community discussion yet for this question.

Full PCCSE Practice