AWS Secrets Manager
You can integrate Prisma Cloud with AWS Secrets Manager.
First, configure Prisma Cloud to access AWS Secrets Manager, then create rules to inject the relevant secrets into the relevant containers.
Prerequisites:
- The service account Prisma Cloud uses to access the secrets store must have the following permissions:
- secretsmanager:GetSecretValue
- secretsmanager:ListSecrets
- You have created a secret in AWS Secrets Manager. Automatic rotation must be disabled. Prisma Cloud supports the key-value secret type only. When storing a new secret, selectOther type of secrets, thenSecret key/value.
- Open Prisma Cloud Console.
- Integrate Prisma Cloud with the secrets store.
- Go toManage > Authentication > Secrets, and clickAdd store.
- Enter a name for the store. This name is used when you create rules to inject secrets into specific containers.
- ForType, selectAWS Secrets Manager, then fill out the rest of the form, including your credentials.
- Fill out the rest of the form, specifying how to connect to the Secrets Manager.
- ClickAdd.After clickingAdd, Prisma Cloud tries connecting to your secrets manager. If successful, the dialog closes, and an entry is added to the table. Otherwise, connection errors are displayed directly in the configuration dialog.
