Integrate Prisma Cloud with Google Cloud Security Command Center (SCC)

Learn how to integrate Prisma™ Cloud with Google Cloud Security Command Center (SCC).

Integrate Prisma™ Cloud with Google Cloud Security Command Center (SCC) for centralized visibility into security and compliance risks associatedwith your cloud assets on the Google Cloud Platform (GCP).

You can setup this integration for a GCP Organization that you are monitoring with Prisma Cloud. The alerts generated by Prisma Cloud for GCP accounts basedon your alert rule are posted to Cloud SCC. To show the Prisma Cloud alerts in Google Could SCC for cloud accounts of other cloud types (such as AWSand Azure), contact Prisma Cloud support (ppc-help@paloaltonetworks.com).

The service account you use to onboard the GCP Organization into Prisma Cloud should include Viewer, Organization Viewer, and Security Center Findings Editor roles.

To view assets and findings on the Cloud SCC console, enable the

Cloud Security Command Center API

Go to the GCP Console API Library and select your GCP project.

Make sure to enable the

Cloud Security Command Center API

in the project that owns the Service Account that you will use to onboard the GCP Organization into Prisma Cloud.

Enable APIs and Services

Enablethe

Cloud Security Command Center API

A security center administrator can setup this integration on the Google console.

Go to the Google Console and search for

Prisma Cloud CSCC

Visit Palo Alto Networks site to Signup

Select the organization that you onboarded into Prisma Cloud.

Select the

Service account

you used to onboard the GCP Organization.

Copy the

Source ID

. You need the

Source ID

when you setup this integration in Prisma Cloud.

Click

Done

Set up Cloud SCC as one of the integration channels in Prisma Cloud.

Select

Settings

Integrations

Create a

+New Integration

Select

CSCC

as the

Integration Type

Specify a meaningful

Integration Name

and

Description

Enter the

Source ID

that you copied when you signed up for Prisma Cloud SCC.

Select the

GCP Organization

Click

and then

Test

For a successful integration, you must configure adequate permissions for the service account (as listed above). After you successfully set up the integration, the status (

Settings

Integrations

)turns red when there are any issues and turns green when thereare no issues or all issuesare resolved.

Create an Alert Rule or modify an existing rule to send alerts to Google Cloud SCC. See Send Prisma Cloud Alert Notifications to Third-Party Tools.

View alerts in Cloud SCC.

Go to the Google Console and select

Security

Security Command Center