Ctrlk
BlogSupport
For the complete documentation index, see llms.txt. This page is also available as Markdown.

Integrate Prisma Cloud with Amazon Security Lake

Learn how to integrate Prisma Cloud with Amazon Security Lake.

Amazon Security Lake offers a comprehensive view of security data across sources of your choice in your cloud and on-premises environments. Prisma Cloud delivers security intelligence to Amazon Security Lake using the Open Cybersecurity Schema Framework (OCSF) standard. Integrating Prisma Cloud with Amazon Security Lake helps you protect your cloud workloads, applications, and data with greater visibility and context into cloud security issues.

  1. Log in to Prisma Cloud.

  2. Select Settings > Integrations & Notifications > Integrations.

  3. Select Add Integration > Amazon Security Lake.

    integrate amazon security lake 1

  4. Enter the details of the Amazon Security Lake S3 bucket.

    integrate amazon security lake 2

    1. Enter an Integration Name and (optional) Description.

    2. Enter the AWS Region in which you created the S3 bucket.

    3. Enter the Role ARN of the IAM role.

    4. Enter S3 URI for the S3 bucket or folder path in the format: s3://bucketname/ or s3://bucketname/foldername/.

    5. Generate the External ID to associate it with the IAM role which is required for Prisma Cloud to be able to write notifications to the S3 bucket.

    6. Click Next.

  5. Review the Summary and then Test Integration.

    integrate amazon security lake 3

  6. Save and Close after the testing is successful.

    integrate amazon security lake 4

You should receive a success message and a test message should be posted to your S3 bucket. The integration will be listed on the Integrations page, where you can View, Edit, or Delete the integration from the Actions panel.

Navigate to the S3 bucket in your AWS environment. You should be able to see the findings sent to the S3 bucket in the parquet format.

Prisma Cloud allows only one Security Lake integration at a time. From Prisma Cloud, only Host vulnerability findings are written in to Security Lake.

PreviousIntegrate Prisma Cloud with AWS Security HubNextIntegrate Prisma Cloud with Amazon SQS

Last updated

Was this helpful?