> For the complete documentation index, see [llms.txt](https://docs.prismacloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prismacloud.io/content-collections/administration/configure-external-integrations-on-prisma-cloud/integrate-prisma-cloud-with-google-cloud-security-command-center.md).

# Integrate Prisma Cloud with Google Cloud Security Command Center (SCC)

Learn how to integrate Prisma® Cloud with Google Cloud Security Command Center (SCC).

Integrate Prisma® Cloud with Google Cloud Security Command Center (SCC) for centralized visibility in to security and compliance risks associated with your cloud assets on the Google Cloud Platform (GCP).

You can set up this integration for a GCP Organization that you are monitoring with Prisma Cloud. The alerts generated by Prisma Cloud for GCP accounts based on your alert rule are posted to Google Cloud SCC. To show Prisma Cloud alerts in Google Could SCC for cloud accounts of other cloud types (such as AWS and Azure), contact Prisma Cloud support on the [Palo Alto Networks LIVE Community](https://live.paloaltonetworks.com/t5/Prisma-Cloud/ct-p/PrismaCloud).

1. Verify the permissions for the service account you use to onboard the GCP Organization on Prisma Cloud.

   The Viewer, Organization Viewer, and Security Center Findings Editor roles are required.
2. Enable the APIs required to view assets and findings on the Cloud SCC console.
   1. Go to the [GCP Console API Library](https://console.cloud.google.com/apis/library) and select your GCP project.

      Make sure to enable these APIs in the project that owns the Service Account, which you will use to onboard the GCP Organization on Prisma Cloud.
   2. Select **Enable APIs and Services**.
   3. Enable the **Cloud Security Command Center API**.
   4. Enable the **Identity and Access Management (IAM) API**.

      The service account must also include the iam.serviceAccounts.signJwt permission for the integration.
3. Sign up for the Prisma Cloud SCC solution on the Google console.

   A security center administrator can set up this integration on the Google console.

   1. Go to the [Google Console](https://console.cloud.google.com/) and search for **Prisma Cloud CSCC**.
   2. **Visit Palo Alto Networks site to Signup**.

      <figure><img src="/files/Pg6tlIqL8lKtERgi083E" alt="cscc signup prisma cloud"><figcaption></figcaption></figure>
   3. Select the organization that you onboarded in to Prisma Cloud.
   4. Select the **Service account** you used to onboard the GCP Organization.

      <figure><img src="/files/tqzQQu6QEh4747aYJi7o" alt="cscc select service account"><figcaption></figcaption></figure>
   5. Copy the **Source ID**. You need the **Source ID** when you set up this integration in Prisma Cloud.
   6. Click **Done**.
4. Set up Google Cloud SCC as one of the integration channels in Prisma Cloud.
   1. Log in to Prisma Cloud.
   2. Select **Settings > Integrations**.
   3. **Add Integration > Google CSCC**. A modal wizard opens where you can add the CSCC integration.
   4. Enter **Integration Name** and **Description**.
   5. Enter the **Source ID** that you copied from Google.

      <figure><img src="/files/whGqt7vOnuDgzX6SEeSU" alt="google cscc int 1"><figcaption></figcaption></figure>
   6. Select the **GCP Organization**.
   7. **Next** and then **Test**. Review the Summary and **Save**.

      For a successful integration, you must configure adequate permissions for the service account (as listed above). After you set up the integration successfully, you can use the Get Status link in **Settings > Integrations** to periodically check the integration status.

      <figure><img src="/files/awWi0pESgyCaRa07SQhw" alt="get status"><figcaption></figcaption></figure>
5. [Create an Alert Rule for Run-Time Checks](/content-collections/alerts/create-an-alert-rule-cloud-infrastructure.md) or modify an existing rule to [send alerts](/content-collections/alerts/send-prisma-cloud-alert-notifications-to-third-party-tools.md) to Google Cloud SCC.
6. View alerts in Cloud SCC.
   1. Go to the [Google Console](https://console.cloud.google.com/) and select **Security > Security Command Center**.

      <figure><img src="/files/sYOIZBxum3qOLR0Tmfp8" alt="cscc security command center"><figcaption></figcaption></figure>
   2. Click **Findings** to view the alerts.

      <figure><img src="/files/4P53pGgP6Xu0o8iarwio" alt="cscc findings"><figcaption></figcaption></figure>
   3. Select the rule to see the details about the alerts.

      <figure><img src="/files/MRTNCnpXuMcn3vlGpHl5" alt="cscc alerts"><figcaption></figcaption></figure>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.prismacloud.io/content-collections/administration/configure-external-integrations-on-prisma-cloud/integrate-prisma-cloud-with-google-cloud-security-command-center.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.