Prisma Cloud - What is the explanation for N/A and "Not accessed in the tracking period" status in "Last Access" Column of IAM RQL results ?
281
Created On 06/13/24 09:30 AM - Last Modified 01/15/26 20:59 PM
Question
What is the explanation for the below status in "Last Access" Column of IAM RQL results ?
1. N/A
2. Not accessed in the tracking period
Environment
- Prisma Cloud
- Investigate Tab
- IAM RQL query
Answer
N/A - means that either Prisma Cloud does not have any way of assessing the Last Access time of the policy from the resource (not supported) or the access is not being tracked by the components like Cloudtrail which Prisma Cloud uses to get the access data.
Not accessed in the tracking period - means that this permission was never used since IAM subscription was enabled and hence we don’t have ‘Last Access’ data to show.
Additional Information
For more information on 'Not accessed in the tracking period', refer Viewing last accessed information for IAM