Configure Cloud Discovery

Log in to Prisma Cloud Compute Console.
Select
Compute > Manage > Cloud Accounts
.
Select the accounts to scan. If there are no accounts in the table, use the
+ Add account
button to onboard your cloud accounts.
On GCP: If you select organization level GCP credentials, for an organization with hundreds of projects, the performance of the Google Cloud Registry discovery might be affected due to long query time from GCP. The best approach to reduce scan time and avoid potential timeouts is to divide the projects in your organization into multiple GCP folders. Then create a service account and credential for each folder, and use these credentials for cloud discovery.
On Azure: If you create a credential in the credentials store under
Manage > Authentication > Credentials store
, your service principal authenticates with a password. To authenticate with a certificate, onboard the cloud service provider.
Enable
Cloud discovery
.
Click
Add account
to save the changes.
Review the scan report.
Go to
Compute > Manage > Cloud Accounts
to view the scan report as a table.
Select the

Show account details

icon to see the discovery scan results for resources within the cloud account.


Go to
Radar
and select
Cloud
to view the scan report as a graphic.

Click
Defend
for the entities you want Prisma Cloud to scan for vulnerabilities.
When you click
Defend
, a new scan rule is proposed. Select the appropriate credential, tweak the scan rule as desired, then click
Add
.
Go to the scan reports under
Monitor > Vulnerabilities
Select
Hosts
,
Registry
, or
Functions
to see the pertinent report.