← Back to Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide

V-253525

CAT II (Medium)

Prisma Cloud Compute Collections must be used to partition views and enforce organizational-defined need-to-know access.

Rule ID

SV-253525r1137641_rule

STIG

Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide

Version

V2R3

CCIs

CCI-001368

Discussion

Prisma Cloud Compute Collections are used to scope rules to target specific resources in an environment, partition views, and enforce which views specific users and groups can access. Collections can control access to data on a need-to-know basis.

Check Content

Navigate to Prisma Cloud Compute Console's >> Manage >> Collections and Tags >> Collections tab.

Review the Collections according to organizational policy. 

If no organizational-specific Collections are defined, this is a finding.

Fix Text

Navigate to Prisma Cloud Compute Console's >> Manage >> Collections and Tags >> Collections tab.

Create a collection:
- Click "Add Collection".
- Enter a name and description and then specify a filter to target specific resources.
- Click "Save".