Cloud Service Providers

Credentials for cloud service providers are managed in
Manage > Cloud accounts
. Other types of credentials are managed in the credentials store in
Manage > Authentication > Credentials store
.

Onboard Cloud Service Provider Accounts to Prisma Cloud

Use the guided onboarding flow to onboard cloud accounts onto your Prisma Cloud tenant to automatically create service accounts and roles in your cloud provider accounts. Prisma Cloud is then quickly integrated with your cloud providers.
The guided onboarding flow creates service accounts and roles for the following Compute-specific integrations.
Feature
AWS
Azure
GCP
Cloud discovery
Yes
Yes
Yes
Serverless radar
Yes
Not applicable
1
Not applicable
1
Registry scanning
Yes
No
No
Serverless scanning
Yes
Yes
Yes
VM image scanning
Yes
No
Yes
Host auto-defend
Yes
Yes
Yes
Kubernetes auditing
Yes
Yes
Yes
Agentless scanning
Yes
Yes
Yes
1
Not applicable: The feature isn’t supported in the product for this cloud service provider.
By default, Compute feature-specific minimalist permissions are added to all CloudFormation Templates for AWS, Azure and GCP accounts onboarded to Prisma Cloud. The following two onboarding modes define these permissions:
Monitor
and
Monitor & Protect
.
Large scale deployments require you to manage the number of accounts that you onboard to ensure the number of accounts remains within the workload scanning thresholds. The threshold to ensure Prisma Cloud scans all workloads in your accounts is 5000 accounts. You can manage your accounts under
Compute > Manage > Cloud Accounts
. You must delete any accounts you don’t want to scan to remain below the threshold.

Cloud Account Permission Status

Currently, cloud account status checks don’t take Prisma Cloud Compute permissions into account. They remain green even if Prisma Cloud Compute permissions are missing in order to accommodate Cloud Security Posture Management (CSPM) users who do not use Prisma Cloud Compute functionalities. For them, changing the account permissions status could cause confusion.
Contact support to request enablement of status checks on your tenant.

Recommended For You

<