How to set up Serverless function scanning in Prisma Cloud Compute

• Prisma Cloud Compute SaaS version
• Prisma Cloud Compute Self-Hosted version 22.01 and above

1. Search IAM in the search bar
2. Select Policies from Access Management options list on the left-hand side.
3. Select Add Policy

4. Select JSON tab and paste the following JSON to create the Policy.

{
    "Version": "2012-10-17",
    "Statement": [
        {
            "Sid": "PrismaCloudComputeServerlessAutoProtect",
            "Effect": "Allow",
            "Action": [
                "iam:SimulatePrincipalPolicy",
                "iam:ListAttachedRolePolicies",
                "iam:GetPolicy",
                "iam:GetPolicyVersion",
                "iam:ListRolePolicies",
                "iam:GetRole",
                "iam:GetRolePolicy",
                "lambda:GetFunction",
                "lambda:GetFunctionConfiguration",
                "lambda:GetLayerVersion",
                "lambda:ListFunctions",
                "lambda:PublishLayerVersion",
                "lambda:UpdateFunctionConfiguration",
                "lambda:ListLayerVersions",
                "lambda:ListLayers",
                "lambda:DeleteLayerVersion",
                "kms:decrypt"
            ],
            "Resource": "*"
        }
    ]
}

5. Once the Policy is created, go to the user to whom you want to attach this policy to.
6. After you have selected that user, select Add Permissions button.

7. Select Attach existing policies directly tab

8. Search for the policy you created in step 4 and attach it to the user.
9. Go to the Prisma Cloud Compute console.
10. Go to the following path:

Defend > Vulnerabilities > Functions > Functions

11. Click Add the first item button and you will see the following

12. Add the credentials of the AWS service user.
13. Once the scope is added, click the green Save button.
14. Go to the following path to view the scan results of the Serverless function scan

Monitor > Vulnerabilities > Functions > Scanned functions