Prisma Cloud: Non-Alertable Policy types

• The following policy types are not standalone and cannot be added to alert rules:
  • API 
  • Grayware
  • Malware
  • Workload Incident
  • Workload Vulnerability

• Prisma Cloud
• Alert rules

These policies were designed to be utilized alongside the Attack Path policies.

All policies except API, Grayware, Malware, Workload Incident, and Workload Vulnerability can be alerted, as these policies were designed to be utilized alongside the Attack Path policies. Since these policies are not configuration-based, they cannot be attached to alert rules. Other modules(NOT CSPM) attach the relevant findings to the asset.

• Attack path policies documentation
• Alert rules documentation