Prisma AIRS
Manage Discovery Data
Table of Contents
Expand All
|
Collapse All
Prisma AIRS Docs
Manage Discovery Data
Learn how to manage your discovered cloud data.
| Where Can I Use This? | What Do I Need? |
|---|---|
|
You can delete historical discovery data for cloud accounts while keeping
the accounts active and operational within Prisma Cloud. This feature addresses data
compliance requirements when you need to remove collected asset information, flow
logs, and audit logs without disrupting your security posture or removing the cloud
account from monitoring.
When you initiate discovery data deletion, the system validates your
request and checks for active firewall deployments. Prisma AIRS temporarily disables
monitoring for the account and marks it with a deletion-in-progress status while a
background process removes all associated data from storage systems. This process
removes asset data from discovery databases and log data from your monitoring
infrastructure. Manually-deployed firewalls continue to inspect traffic during this
process, ensuring continuous security coverage. Auto-deployed firewalls, however, do
not continue to inspect traffic; the data deletion process automatically deletes the
associated Terraform template which then deletes the firewall. Once deletion
completes, the account becomes inactive and no longer collects any data.
The deletion process runs asynchronously to avoid impacting system
performance. You cannot modify account settings or enable additional monitoring
features while deletion is in progress. The system maintains audit timestamps to
track when deletion was requested and completed, providing visibility into data
lifecycle management activities for compliance reporting purposes.
If you delete a Terraform template associated with an
auto-deployed firewall, Prisma AIRS deletes all firewall resources deployed by that
template.
Delete Discovery Data
- Log in to Strata Cloud Manager.Navigate to InsightsAI Runtime Firewall.Click the cloud account iconin the upper right.
Locate the cloud account from the Cloud Account Manager list.Click the delete icon.Confirm the deletion.
If you manually deployed the firewall instances with a Terraform template, you can manually delete the templates associated with the account.- Click the shield iconin the upper right and navigate to the Terraform Templates tab.
Locate the template(s) and click the delete icon.
Confirm the deletion.Enable a Previously Disabled Account
- Log in to Strata Cloud Manager.Navigate to Insights AI Runtime Firewall.Click the cloud account iconin the upper right.
Locate the cloud account.Click the enable icon.
Confirm the activation.