Skip to content

Commit

Permalink
sme feedback
Browse files Browse the repository at this point in the history
  • Loading branch information
jenjoe22 committed Jan 10, 2025
1 parent 722658e commit 9d99f03
Show file tree
Hide file tree
Showing 2 changed files with 30 additions and 9 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@

Here are the changes planned in the next Prisma Cloud release to ensure the security of your infrastructure.

Read this section to learn about what is planned in the 25.1.1 CSPM Platform, Agentless Container Host, Agentless Host Security, CIEM, Data Security, and CDEM releases.
Read this section to learn about what is planned in the 25.2.1 CSPM Platform, Agentless Container Host, Agentless Host Security, CIEM, Data Security, and CDEM releases.

The Look Ahead announcements are for an upcoming release and is not a cumulative list of all announcements.

Expand Down Expand Up @@ -756,16 +756,25 @@ Additional permissions needed:

The Reader role includes the permissions.

|*Azure SQL Databases*
//RLP-154253/154255/154257

|*Azure Data Protection*
//RLP-154220
|*azure-data-protection-backup-vaults*
tt:[Update]
|*azure-sql-db-data-masking-policies*
*azure-sql-db-data-masking-rules*
*azure-sql-db-transparent-data-encryption*

Additional permission needed:
This API now restricts data fetching to when the database is in the 'Online' or 'Ready' states. This ensures operations are only performed during these optimal states, This targeted approach prevents data fetching in any other non-active states effectively reducing costs and improving performance.

* `Microsoft.DataProtection/backupVaults/read`
Behaviour when the database transitions into a 'Paused' state or any other non-optimal state:

The Reader role includes the permission.
* Data ingestion for affected resources is suspended.
* The deleted status for these specific resources in Prisma is set to "true".
* All alerts related to the paused resources are automatically marked as resolved during this pause.
* Upon the database's return to an 'Online' state, and when data ingestion recommences:

* The "deleted" status in Prisma is reverted to "false".
* Any alerts that were marked as resolved during the pause are reopened.


|===
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ tt:[Secure the Infrastructure]

tt:[25.1.1]

|Enhanced Remediation improves the quality and effective of Prisma Cloud security alert remediation guidance. It leverages artificial intelligence (AI) to assist your teams in enhancing remediation content for existing alerts and policies, while ensuring all recommendations undergo rigorous human review and QA validation. The recommendations now provide AI-assisted remediation steps for Critical and High Alerts. It provides you with a seamless and intuitive experience allowing you to quickly access and understand the remediation steps.
|Enhanced Remediation improves the quality and effectiveness of Prisma Cloud security alert remediation guidance. It leverages artificial intelligence (AI) to assist your teams in enhancing remediation content for existing alerts and policies, while ensuring all recommendations undergo rigorous human review and QA validation. The recommendations now provide AI-assisted remediation steps for Critical and High Alerts. It provides you with a seamless and intuitive experience allowing you to quickly access and understand the remediation steps.

* *Alerts* includes a new *Enhanced Remediation* Saved View. When you select *Enhanced Remediation* filter option as *Yes*, you can view the alerts that you can resolve using enhanced remediation.
+
Expand Down Expand Up @@ -76,7 +76,7 @@ tt:[25.1.1]
tt:[Secure the Runtime]

tt:[33.03.138]
|To ensure accurate vulnerability reporting, Intelligence Stream will include RPM module and stream information for RHEL in the reports. This approach improves detection of vulnerabilities and ensures that all associated RPM packages installed by a module are examined during the scan.
|To ensure accurate vulnerability reporting, Intelligence Stream includes RPM module and stream information for RHEL in the reports. This approach improves detection of vulnerabilities and ensures that all associated RPM packages installed by a module are examined during the scan.

*What are RPM Modules and Streams?*

Expand Down Expand Up @@ -250,6 +250,18 @@ Additional permissions needed:
The Security Audit role includes the permissions.

|*Amazon Cognito*
//RLP-154122

tt:[Update]
|*aws-cognito-user-pool*

The resource JSON for the API has been updated to include new fields:

* `passwordPolicy`
* `AdvancedSecurityMode`
* `riskConfiguration`
|*AWS Directory Service*
//RLP-153814
Expand Down

0 comments on commit 9d99f03

Please sign in to comment.