Level 2 - Palo Alto Prisma Cloud Security as Code

The Prisma Cloud Security as Code service allows you to integrate security into your DevOps workflow, automating the detection and correction of code issues on AWS to save time and reduce risk.

It includes a technical desk to understand requirements and review compliance, tenant activation and configuration of customer-defined users and roles, SSO integration, and activation of the Cloud Code Application Security module (IaC, SCA, Secret Scan, SAST). Onboarding of up to three code repositories and CI/CD pipelines supported by Prisma Cloud, installation of plugins in development environments such as VS Code or IntelliJ, and creation of custom policies in YAML for IaC in the Build stage.

In addition, Drift Detection is configured, custom dashboards, and security scan results are reviewed in IaC, SCA, Secret Scan and Drift Detection, with delivery of an As-built document and up to two sessions to resolve technical and operational issues.

• Technical touchpoints are established for the understanding of requirements, review of applicable compliance, and organization of public cloud accounts.
• The Prisma Cloud tenant is activated.
• Configuration of administration users and roles in Prisma Cloud to be used. RBAC is defined by the customer.
• SSO integration is done.
• Activation of the Cloud Code Application Security module in Prisma Cloud: IaC, SCA, Secret Scan, SAST.
• Onboarding of up to three (3) code repositories supported by Prisma Cloud.
• Integration of up to three (3) CICD pipelines supported by Prisma Cloud.
• Installation of the Prisma Cloud Plugin in up to three (3) development environments: VS Code or IntelliJ.
• Construction of up to five (5) custom policies in YAML for IaC in Build stage, defined by the client.
• Accompaniment in the remediation of up to five (5) IaC configuration non-compliances.
• Configuration of Enforcement Rule thresholds.
• Activation of Drift Detection in Prisma Cloud.
• Configuration of up to two (2) custom dashboards in Prisma Cloud for Code Security.
• Review in Prisma Cloud console of surveyed logs, IaC, SCA and Secret Scan results, Drift Detection scan results and SBOM and Supply Chain dashboards.
• Construction and presentation of the As-built document of the installed environment.
• Up to two (2) sessions of knowledge transfer of the tool will be carried out.
• Up to two (2) sessions of maximum two (2) hours each will be contemplated to solve technical or operative inconveniences of the implementation.