You are tasked with configuring a Prisma Cloud build policy for Terraform. What type of query is necessary to complete this policy?

Prisma Cloud policies that scan Infrastructure as Code (IaC), such as Terraform, are known as "build" policies. These policies are created using a proprietary query language based on a JSON structure. When Prisma Cloud ingests a Terraform file, it converts it into a normalized JSON model. The policy then uses JSON-based queries to inspect this model for misconfigurations. The policy editor requires the administrator to define the resource logic using this JSON query format, not the native format of the IaC file itself.

A. YAML is a data serialization language, but Prisma Cloud's build policy query language is based on JSON, not YAML.
C. CloudFormation is an IaC language from AWS. Policies are written in JSON, not in CloudFormation syntax.
D. Terraform (HCL) is the language of the file being scanned, not the language used to write the Prisma Cloud policy query.

1. Palo Alto Networks, Prisma Cloud Administrator's Guide (SaaS), "Create a Config Build Policy". The documentation states, "Prisma Cloud provides a JSON parser for you to create custom build policies." It further explains that the policy structure involves defining resource blocks and attributes using a JSON query format to check for misconfigurations in the IaC resource model.