A customer wants to monitor the company’s AWS accounts via Prisma Cloud, but only needs the resource configuration to be monitored for now. Which two…

To onboard an AWS account into Prisma Cloud for the purpose of monitoring resource

configurations, the necessary information includes the Role ARN (Amazon Resource Name) and

CloudTrail setup. The Role ARN (Option E) is crucial because Prisma Cloud requires permission to

access and monitor resources within the AWS account, which is facilitated through an IAM role that

Prisma Cloud can assume. This IAM role must have the necessary permissions to access AWS services

and resources that Prisma Cloud needs to monitor. CloudTrail (Option A) is essential for auditing and

monitoring API calls within the AWS environment, including those related to resource configurations.

It provides visibility into user and resource activity by recording API calls made on the account.

CloudTrail logs are used by Prisma Cloud to detect changes in resource configurations and ensure

compliance with security policies. Subscription ID (Option B) and Active Directory ID (Option C) are

more relevant to Azure cloud environments, not AWS. External ID (Option D) is used in a cross-

account role trust relationship to prevent the "confused deputy" problem, but it's not specifically

required just to onboard the account for resource configuration monitoring.