Cloud Service Providers

Credentials for cloud service providers are managed in Manage > Cloud accounts. Other types of credentials are managed in the credentials store in Manage > Authentication > Credentials store.

Onboard Cloud Service Provider Accounts to Prisma Cloud

Use the guided onboarding flow to onboard cloud accounts onto your Prisma Cloud tenant to automatically create service accounts and roles in your cloud provider accounts. Prisma Cloud is then quickly integrated with your cloud providers.

The guided onboarding flow creates service accounts and roles for the following Compute-specific integrations.

Feature	AWS	Azure	GCP
Cloud discovery	Yes	Yes	Yes
Serverless radar	Yes	Not applicable1	Not applicable1
Registry scanning	Yes	No	Yes
Serverless scanning	Yes	Yes	Yes
VM image scanning	Yes	No	Yes
Host auto-defend	Yes	Yes	Yes
Kubernetes auditing	Yes	Yes	Yes
Agentless scanning	Yes	Yes	Yes

¹Not applicable: The feature isn’t supported in the product for this cloud service provider.

By default, Compute feature-specific minimalist permissions are added to all CloudFormation Templates for AWS, Azure and GCP accounts onboarded to Prisma Cloud. The following two onboarding modes define these permissions: Monitor and Monitor & Protect.

Large scale deployments require you to manage the number of accounts that you onboard to ensure the number of accounts remains within the workload scanning thresholds. The threshold to ensure Prisma Cloud scans all workloads in your accounts is 5000 accounts. You can manage your accounts under Runtime Security > Manage > Cloud Accounts. You must delete any accounts you don’t want to scan to remain below the threshold.

You can review the list of all features and their corresponding permissions.

Cloud Account Permission Status

Currently, cloud account status checks don’t take Prisma Cloud Compute permissions into account. They remain green even if Prisma Cloud Compute permissions are missing in order to accommodate Cloud Security Posture Management (CSPM) users who do not use Prisma Cloud Compute functionalities. For them, changing the account permissions status could cause confusion.

Contact support to request enablement of status checks on your tenant.