Prisma Cloud App-Embedded Defender, validate FIPS has been enabled

• App-embedded Defenders (Fargate) do not display FIPS enabled messages in logs.
• FIPS_ENABLED=true environment variable is configured in the task definition for an App-Embedded Defender.

Product_versions

• Prisma Cloud App-Embedded Defender
• Prisma Cloud Runtime Security
• Prisma Cloud Compute Self-Hosted v30.00 and later

App-embedded Defenders do not display FIPS enabled messages in logs.

Once the environment variable is correctly set, FIPS will be used.

In order to validate that, you can check the environment variables defined for the app-embedded container.

This can be done via:

docker exec <APPEMBEDDED_CONTATINER_ID> env

Look for the value of FIPS_ENABLED=true 

Or if using AWS ECS exec:

aws ecs execute-command --cluster <cluster> --task <task> --container TwistlockDefender --interactive --command 'env'