A customer wants to monitor its Amazon Web Services (AWS) accounts via Prisma Cloud, but only needs the resource configuration to be monitored at present. Which two pieces of information are needed…

The correct answer is B. Role ARN D. External ID. To onboard an AWS account into Prisma Cloud for resource configuration monitoring only (not logs or events), two items are required: the Role ARN (B) and the External ID (D). The Role ARN is the Amazon Resource Name of the IAM cross-account role that Prisma Cloud assumes to…

Prisma Cloud Platform

Question

A customer wants to monitor its Amazon Web Services (AWS) accounts via Prisma Cloud, but only needs the resource configuration to be monitored at present. Which two pieces of information are needed to onboard this account? (Choose two.)

Options

ACloudTrail
BRole ARN
CActive Directory ID
DExternal ID

How the community answered

(24 responses)

A
8% (2)
B
88% (21)
C
4% (1)

Explanation

To onboard an AWS account into Prisma Cloud for resource configuration monitoring only (not logs or events), two items are required: the Role ARN (B) and the External ID (D). The Role ARN is the Amazon Resource Name of the IAM cross-account role that Prisma Cloud assumes to read resource configurations in your AWS account. The External ID is a unique token that accompanies the role assumption request to prevent 'confused deputy' attacks, ensuring only your Prisma Cloud tenant can assume that role. CloudTrail (A) is only required when you also want to ingest audit logs and event data - not needed for config-only monitoring. Active Directory ID (C) is irrelevant to AWS account onboarding.

Topics

#Prisma Cloud Onboarding#AWS Integration#Resource Configuration Monitoring#Cross-Account Roles

Community Discussion

No community discussion yet for this question.

Full PCCSE Practice