Which Amazon Web Services security service can provide host vulnerability information to Prisma Public Cloud?

Amazon Inspector is the native AWS automated vulnerability management service designed to continually scan AWS workloads, such as EC2 instances (hosts), for software vulnerabilities and unintended network exposure. Prisma Cloud can ingest security findings from various AWS services, typically through integration with AWS Security Hub. Amazon Inspector forwards its findings about host vulnerabilities to AWS Security Hub, which Prisma Cloud can then pull in. This allows security teams to view vulnerability data generated by the native AWS service directly within the Prisma Cloud console, consolidating security posture information from multiple sources into a single view.

A. Shield: AWS Shield is a managed Distributed Denial of Service (DDoS) protection service. It does not perform host vulnerability scanning.
C. GuardDuty: AWS GuardDuty is a threat detection service that analyzes logs for malicious activity. It identifies threats, not pre-existing software vulnerabilities on a host.
D. Amazon Web Services WAF: AWS WAF is a web application firewall that protects web applications from common exploits at the application layer, not a host vulnerability scanner.

1. Palo Alto Networks Prisma Cloud Documentation: In the section "Integrate Prisma Cloud with AWS Security Hub

" the documentation explains

"Prisma Cloud can ingest third-party alerts from AWS Security Hub... When you enable the integration

you can view the alerts from your AWS services on the Prisma Cloud console." This establishes the mechanism for ingestion.

Source: Palo Alto Networks

Prisma Cloud Administrator's Guide (SaaS)

"Integrate Prisma Cloud with AWS Security Hub."

2. Amazon Web Services Documentation (Inspector): The official documentation states

"Amazon Inspector is an automated vulnerability management service that continually scans AWS workloads for software vulnerabilities and unintended network exposure." This confirms its role as the source of host vulnerability data.

Source: Amazon Web Services

"What Is Amazon Inspector?

" Amazon Inspector User Guide.

3. Amazon Web Services Documentation (Security Hub): The documentation on Security Hub integrations explicitly lists Amazon Inspector as a service that provides findings to Security Hub. "AWS Security Hub supports integrations with other AWS services... For example

Amazon Inspector... can send findings to Security Hub."

Source: Amazon Web Services

"Available AWS service integrations with AWS Security Hub

" AWS Security Hub User Guide.