Integrate Prisma Cloud with Jira

Configure Prisma Cloud in your Jira account.
Login to Jira as a Jira Administrator.
Locate
Application Links
.
For Jira Cloud, select
Jira Settings
Products
Application Links
.

For Jira On-Premises, select
Settings
Applications
Application Links
.

Enter the URL for your instance of Prisma Cloud in
Configure Application Links
and
Create new link
.
See Access Prisma Cloud for details on the URL.

Disregard the message in
Configure Application URL
and
Continue
.

Enter the
Application Name
and set the
Application Type
to
Generic Application
.
Create incoming Link
and
Continue
.

On
Link Applications
, specify a
Consumer Key
and a
Consumer Name
. Save the
Consumer Key
because you will need this value when you enter the information in Prisma Cloud.

Copy the
Public Key
shown below and
Continue
.
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYoXB+BZ555jUIFyN+0b3g7haTchsyeWwDcUrTcebbDN1jy5zjZ/vp31//L9HzA0WCFtmgj5hhaFcMl1bCFY93oiobsiWsJmMLgDyYBghpManIQ73TEHDIAsV49r2TLtX01iRWSW65CefBHD6b/1rvrhxVDDKjfxgCMLojHBPb7nLqXMxOKrY8s1yCLXyzoFGTN6ankFgyJ0BQh+SMj/hyB59LPVin0bf415ME1FpCJ3yow258sOT7TAJ00ejyyhC3igh+nVQXP+1V0ztpnpfoXUypA7UKvdI0Qf1ZsviyHNwiNg7xgYc+H64cBmAgfcfDNzXyPmJZkM7cGC2y4ukQIDAQAB
Prisma Cloud is listed in your Jira account after successful creation.
Setup Jira as one of the integration channels in Prisma Cloud.
Login to Prisma Cloud.

Select

Settings

Integrations

.

Click

Add Integration

.

Set

Integration

to

JIRA

.

Specify a meaningful

Integration Name

and, optionally, add a

Description

.

Enter the

JIRA Login URL

.

Make sure the URL starts with https and does not have a trailing slash (‘/’) at the end.

Enter the Consumer Key that you created when you created the Prisma Cloud application in Jira and

Generate Token

.



After you see the

Token Generated

message, click

Next

.



Click the secret key URL link to retrieve your secret key.

The URL with the verification code is valid for only 10 minutes.



When redirected to the

Welcome to JIRA

page,

Allow

Prisma Cloud read and write access to data in your Jira account.



Copy the verification code displayed on the page, paste it as the

Secret Key

, and

Generate Token

,

Test

and

Save

.


The integration will be listed on the Integrations page.
Create Jira notification templates to configure and customize Prisma Cloud alerts.
The Jira fields that are defined as mandatory in your project are displayed in the template. The types of fields in Jira (such as text, list, single select check boxes, and option type fields) are supported in Prisma Cloud. If you add any other type of fields as mandatory in Jira (such as date fields), it will fail. Do not configure any Date fields as Mandatory and define any text fields in Jira as free-form text so that alert data is displayed correctly and completely.
Log in to Prisma Cloud.
From
Alerts
, select
Notification Templates
and
Add Notification Template
.
Select the Jira Notification template and enter a
Template Name
.
Select an
Integration
.
Select your
Project
.
Select the project where you want to see the Prisma Cloud alerts. Because every alert translates to a Jira ticket, as a best practice, create and use a dedicated project for Prisma Cloud ticketing and issue management.
Select your
Issue Type
and click
Next
.

Select the
Jira Fields
that you would like to populate.
The Jira fields that are defined as mandatory in your project are already selected and included in the alert.

Select information that goes in to
Summary
and
Description
from the alert payload.
Select the
Reporter
for your alert from users listed in your Jira project.
This option is available only if the administrator who set up this integration has the appropriate privileges to modify the reporter settings on Jira.

Click
Next
to go to the review dialog and review your selection.

Save
your changes.
You can delete or edit the Jira notification from the Notification Template dialog.

After you set up the integration, Prisma Cloud performs periodic status checks with Jira red if the Jira Login URL is not reachable or if any request to Jira results in an HTTP 400 or 403 response.
Create an Alert Rule for Run-Time Checks or modify an existing rule to send alerts to Jira.