Palo Alto Networks Prisma Cloud Compute Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
Prisma Cloud Compute must be configured with unique user accounts.
<VulnDiscussion>Sharing accounts, such as group accounts, reduces the accountability and integrity of Prisma Cloud Compute.</VulnDiscussio...Rule Medium Severity -
SRG-APP-000164-CTR-000400
<GroupDescription></GroupDescription>Group -
Prisma Cloud Compute local accounts must enforce strong password requirements.
<VulnDiscussion>Use of a complex password helps to increase the time and resources required to compromise the password. Password complexity, ...Rule Medium Severity -
SRG-APP-000177-CTR-000465
<GroupDescription></GroupDescription>Group -
Prisma Cloud Compute must be configured to require local user accounts to use x.509 multifactor authentication.
<VulnDiscussion>Without the use of multifactor authentication, the ease of access to privileged functions is greatly increased. Multifactor ...Rule Medium Severity -
SRG-APP-000243-CTR-000595
<GroupDescription></GroupDescription>Group -
Prisma Cloud Compute must prevent unauthorized and unintended information transfer.
<VulnDiscussion>Prisma Cloud Compute Compliance policies must be enabled to ensure running containers do not access privileged resources. Sa...Rule Medium Severity -
SRG-APP-000266-CTR-000625
<GroupDescription></GroupDescription>Group -
The node that runs Prisma Cloud Compute containers must have sufficient disk space to allocate audit record storage capacity in accordance with organization-defined audit record storage requirements.
<VulnDiscussion>To ensure sufficient storage capacity in which to write the audit logs, Prisma Cloud compute must be able to allocate audit r...Rule Medium Severity -
SRG-APP-000384-CTR-000915
<GroupDescription></GroupDescription>Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.