PCCSE · Question #250
What is required for Prisma Cloud to successfully execute auto-remediation commands?
The correct answer is B. Write access to the cloud platform. Auto-remediation in Prisma Cloud requires write access to the cloud platform so it can execute corrective API calls that modify resource configurations.
Question
What is required for Prisma Cloud to successfully execute auto-remediation commands?
Options
- AAccess to the cloud platform only for Azure
- BWrite access to the cloud platform
- CRead access to the cloud platform
- DPrisma Cloud requires no access to the cloud platform
How the community answered
(52 responses)- A4% (2)
- B94% (49)
- D2% (1)
Why each option
Auto-remediation in Prisma Cloud requires write access to the cloud platform so it can execute corrective API calls that modify resource configurations.
Auto-remediation is not restricted to Azure; it is supported across AWS, Azure, and GCP, making this option factually incorrect.
Auto-remediation works by invoking cloud provider APIs to change or delete misconfigured resources, which are write-level operations. Without write permissions granted to the Prisma Cloud service account or role, the remediation script cannot make any changes to the cloud environment. This applies across all supported cloud platforms, not just one.
Read access allows Prisma Cloud to ingest and assess configuration data, but it is insufficient for executing any remediation action that modifies cloud resources.
Prisma Cloud absolutely requires cloud platform access - specifically write access - to call cloud APIs and perform remediation actions.
Concept tested: Prisma Cloud auto-remediation access requirements
Source: https://docs.prismacloud.io/en/enterprise-edition/content-collections/governance/prisma-cloud-auto-remediation
Topics
Community Discussion
No community discussion yet for this question.