Skip to main content

Prisma Cloud Remediation - Azure Storage Misconfiguration

This Playbook is part of the Prisma Cloud Pack.#

This playbook remediates Prisma Cloud Azure Storage alerts. It calls sub-playbooks that perform the actual remediation steps.

Remediation:

  • Azure storage account has a blob container with public access
  • Azure storage account logging for blobs is disabled
  • Azure Storage Accounts without Secure transfer enabled
  • Azure storage account logging for queues is disabled
  • Azure storage account logging for tables is disabled #95

Dependencies#

This playbook uses the following sub-playbooks, integrations, and scripts.

Sub-playbooks#

  • Prisma Cloud Remediation - Azure Storage Blob Misconfiguration

Integrations#

  • RedLock

Scripts#

  • IsIntegrationAvailable

Commands#

  • closeInvestigation
  • redlock-dismiss-alerts

Playbook Inputs#


NameDescriptionDefault ValueRequired
AutoRemediateAzureStorageExecute Azure Storage remediation automatically?noOptional
policyIdGrab the Prisma Cloud policy Id.incident.labels.policyOptional

Playbook Outputs#


There are no outputs for this playbook.

Playbook Image#


Prisma Cloud Remediation - Azure Storage Misconfiguration