> For the complete documentation index, see [llms.txt](https://docs.prismacloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prismacloud.io/admin-guide/33/cloud-service-providers/configure-cloud-discovery.md).
# Configure Cloud Discovery
Set up Prisma Cloud to scan your cloud service provider accounts for cloud-native resources and services. Then configure Prisma Cloud to protect them with a single click.
**Prerequisite:** You create service accounts for your cloud service providers with the [minimum required permissions](/admin-guide/33/configure/permissions.md).
1. Log in to Prisma Cloud Compute Console.
2. Select **Compute > Manage > Cloud Accounts**.
3. Select the accounts to scan. If there are no accounts in the table, use the **+ Add account** button to onboard your cloud accounts.
* On GCP: If you select organization level GCP credentials, for an organization with hundreds of projects, the performance of the Google Cloud Registry discovery might be affected due to long query time from GCP. The best approach to reduce scan time and avoid potential timeouts is to divide the projects in your organization into multiple GCP folders. Then create a service account and credential for each folder, and use these credentials for cloud discovery.
* On Azure: If you create a credential in the credentials store under **Manage > Authentication > Credentials store**, your service principal authenticates with a password. To authenticate with a certificate, [onboard the cloud service provider](https://github.com/PaloAltoNetworks/pc-docs-md/tree/main/compute-edition/33/admin-guide/cloud-service-providers/cloud-service-providers.md).
4. Enable **Cloud discovery**.
5. Click **Add account** to save the changes.
6. Review the scan report.
1. Go to **Compute > Manage > Cloud Accounts** to view the scan report as a table.
1. Select the **Show account details** icon to see the discovery scan results for resources within the cloud account.
2. Go to **Radar** and select **Cloud** to view the scan report as a graphic.
3. Click **Defend** for the entities you want Prisma Cloud to scan for vulnerabilities.
When you click **Defend**, a new scan rule is proposed. Select the appropriate credential, tweak the scan rule as desired, then click **Add**.
4. Go to the scan reports under **Monitor > Vulnerabilities**
5. Select **Hosts**, **Registry**, or **Functions** to see the pertinent report.
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://docs.prismacloud.io/admin-guide/33/cloud-service-providers/configure-cloud-discovery.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
