Thomas Kishel tkishel

Configure Agentless Scanning (GCP, Hub Model, Compute)

This documents the steps to configure Prisma Cloud Agentless Scanning for GCP Projects, using the Hub and Target model, with Prisma Cloud Compute credentials.

In this document, each GCP Project, its Service Account, and its Prisma Cloud Account use the same name. Doing so creates a one-to-one mapping of projects, accounts, resources, and filenames. This mapping is not required, but results in a simple series of steps.

Step 1

Set the following environment variables (locally, or in CloudShell) to define the name of the Hub and Target Projects:

Configure Agentless Scanning (GCP, Same Account Model, Compute)

This documents the steps to configure Prisma Cloud Agentless Scanning for GCP Projects, using the Same Account model, with Prisma Cloud Compute credentials.

In this document, the GCP Project, its Service Account, and its Prisma Cloud Account use the same name. Doing so creates a one-to-one mapping of projects, accounts, resources, and filenames. This mapping is not required, but results in a simple series of steps.

Step 1

Set the following environment variable (locally, or in CloudShell) to define the name of the Project:

Configure Agentless Scanning (GCP, Hub Model, SaaS)

This documents the steps to configure Prisma Cloud Agentless Scanning for GCP Projects, using the Hub and Target model with Prisma Cloud SaaS credentials.

Onboarding Projects in Prisma Cloud > Settings > Cloud Accounts provides almost all of the necessary configuration, with only cross-project configuration required to support the Hub and Target model.

In this document, each GCP Project and its Prisma Cloud Account use the same name. Doing so creates a one-to-one mapping of projects, accounts, resources, and filenames. This mapping is not required, but results in a simple series of steps.

Step 1

Prisma Cloud: Agentless Configuration: GCP

This documents the steps to configure Prisma Cloud Agentless Scanning for GCP Projects.

There are two scanning options (Same Account, Hub and Target) and two credential options (SaaS, Compute).

For Same Account scanning, using SaaS credentials:

Onboard the GCP Project in Prisma Cloud > Settings > Cloud Accounts, enabling Agentless Workload Scanning
Configure additional settings for Agentless Scanning of the Project in Prisma Cloud > Compute > Cloud Accounts

Deploy WizCLI as an Azure Container Instance | TechNote

Overview

This document outlines deploying the wiz-cli docker image as an Azure Container Instance.

By reusing the wiz-cli docker image (and changing its entrypoint) you leverage the supported docker image.

This TechNote illustrates scanning IaC templates, but can be extended or modified for other use cases.

	#!/usr/bin/env ruby

	require 'uri'
	require 'net/http'
	# require 'openssl'

	#### METHODS

	def get_package(package)
	if (matched = package.match(%r{^(?<name>.+)-(?<version>[^-]+)-(?<release>[^-]+)\.(?<architecture>\w+)}))