Add an Alibaba Cloud Account on Prisma Cloud
Add your Alibaba Cloud account to Prisma Cloud to start monitoring the resources in the account.
After creating a RAM role with permissions that allow Prisma Cloud programmatic access to your cloud resources on Alibaba Cloud, the next step is to add the account you want to monitor for changes on the cloud infrastructure. The graphic below provides a visual overview of the steps you need to take to onboard your account.
Get Started.
If you haven’t activated your account, check your email for the welcome to Prisma Cloud email containing your username, and create a new password to log in.
On first-time login to Prisma Cloud in the Alibaba Mainland China region, you must accept the EULA. When you click the EULA, a new page displays where you can review the content. As a temporary work around, to Agree and Submit, refresh the page and log in again with your credentials.
Select Settings > Providers > Connect Provider and choose Cloud Account.
Select Alibaba Cloud as the cloud account you want to onboard.
Select Account under Scope.
Select the Deployment Type you need. new step added for RLP-93641
This option is visible only if your Prisma Cloud instance is on https://app.prismacloud.cn.
Public—Monitors all the resources in the Alibaba China region but does not monitor resources in the Alibaba Finance region.
Finance—Monitors resources located only in the Alibaba Finance regions.
The Misconfigurations (Foundational capability) is enabled by default. It scans cloud resources and ingestion metadata for vulnerabilities.
Click Next.
Configure Account.
Enter a Cloud Account Name.
A cloud account name is auto-populated for you. Replace it with a cloud account name that uniquely identifies your Alibaba Cloud account on Prisma® Cloud.
Enter the Alibaba Cloud Resource Name (ARN) as RAM Role.
The ARN is the unique identifier for the RAM role you created to authorize API access for Prisma Cloud. When you enter the ARN, the Alibaba Cloud Account ID gets added automatically.
Select one or more account groups or select Default Account Group.
You must assign each cloud account to an account group, and create an alert rule to associate the account group with it to generate alerts when a policy violation occurs.
Click Next.
Review Status.
Ensure that all the account details and the misconfiguration security capability display a green Successful or Enabled checkmark.
Click Save and Close to complete onboarding or Save and Onboard Another Account.
You can view the newly onboarded Alibaba account on the Cloud Accounts page.
If an onboarded account displays a yellow or red status, you can either reload or refresh the cloud account and it’s associated security capabilities. Select Home > Settings > Providers > Cloud Accounts and click on the Status of the cloud account you want to refresh. Next, select the refresh button on the Status window to reload your cloud account.
Next Steps
Review the Prisma Cloud default Policies for Alibaba Cloud.
Select Governance > Overview, set the Cloud Type filter as Alibaba Cloud, and view all the Config policies that are available to detect any misconfigurations in your infrastructure.
Start using the Prisma Cloud Asset Inventory for visibility.
Last updated
Was this helpful?