Given the following JSON query:
$.resource[*].aws_s3_bucket exists
Which tab is the correct place to add the JSON query when creating a Config policy?
Given the following JSON query:
$.resource[*].aws_s3_bucket exists
Which tab is the correct place to add the JSON query when creating a Config policy?
When creating a Config policy, the JSON query must be added in the 'Build Your Rule (Build tab)'. This section is specifically designed for defining conditions and rules using JSON-based queries, suitable for policies that scan Infrastructure as Code (IaC) templates.
E --> Check question 77
D You can choose one or both the policy subtypes options: Run subtype enables you to scan cloud resources that are already deployed on a supported cloud platform. Build subtype enables you to scan code repositories and IaC templates that are used to deploy cloud resources.
Correction E* JSON query is employed when scanning an IAC .. hence policy type would be Build.
E --> The correct place to add the JSON query when creating a Config policy is in the "Build Your Rule (Build tab)" of the Config policy creation. In the Build Your Rule section, you can define the conditions and rules using JSON-based queries to specify the desired policy criteria. RQL type is run JSON query type is build --> The policies used for scanning IaC templates use a JSON query instead of RQL.
D The doc below shows: in Step 3 select Subtype Select Run or Build in Step 5 Under Run tab Build the query to define the match criteria for your policy. 2) Add a rule for the Build phase. *Build phase policies do not support remediation CLI; however add the instructions for manually fixing the issue. (https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/create-a-policy)
E. Build Your Rule (Build tab)
C https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/create-a-policy
Correct is D https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-policies/create-a-policy
Agree: config from cloud.resource where json.rule = $.resource[*].aws_s3_bucket exists is OK