Level 3 – Prisma Cloud Runtime Workloads Protection

The Prisma Cloud workload protection service for AWS covers the implementation and configuration of security for hosts, containers, CaaS platforms and supported serverless functions.

It includes Prisma Cloud tenant activation, user and role configuration (customer-defined RBAC), SSO integration and deployment of specific defenders: up to three (3) container defenders in environments such as Kubernetes/Openshift or VMware Tanzu, three (3) host defenders in virtual machines, three (3) serverless defenders in AWS and one (1) defender for Registry Scan.

It also contemplates the configuration of CI pipelines for vulnerability scans, scan periodicity and controls to alert on vulnerabilities, CIS breaches and runtime events. Agents, scans and events are reviewed in the Prisma Cloud console, logs are created and As-built documentation is delivered, along with knowledge transfer sessions and technical support to resolve operational issues.

• Up to two (2) technical roundtables to understand requirements, review applicable compliance, and set up public cloud accounts.
• Activation of Prisma Cloud tenant.
• Configuration of administration users and roles in Prisma Cloud to be used. RBAC is defined by the customer.
• SSO integration.
• Deployment of up to three (3) container defenders in Kubernetes/Openshift clusters, VMware Tanzu Application Service.
• Deployment of up to three (3) host defenders in virtual machines.
• Deployment of up to three (3) serverless defenders per autodefender on AWS for Python 3.6 - 3.12, NodeJS 12.X - 22.X, Ruby 2.7 runtimes.
• Deployment of up to three (3) App-Embedded defenders for CaaS services.
• Deployment of one (1) defender for Registry Scan.
• Configuration of Prisma Cloud Scan stage in up to three (3) CI pipelines.
• Configuration of periodicity of vulnerability scans for deployed workloads.
• Activation of default controls to alert CIS vulnerabilities and breaches for deployed and CI workloads.
• Activation of up to three (3) controls for alerting workload runtime events, using the tool's use cases.
• Configuration of one (1) image log in Prisma Cloud for vulnerability scanning in repositories.
• Review in Prisma Cloud console of deployed agents, vulnerability scans, compliance scans and runtime events for containers, hosts and/or serverless.
• As-built document build and submission of the installed environment.
• Up to two (2) knowledge transfers of the tool will be performed, focused on the features of interest.
• Up to two (2) sessions of maximum two (2) hours each will be contemplated to solve technical / operational problems of the delivery.