The agentless security scan monitors hosts and containers for vulnerabilities and compliance risks by scanning the root volumes of snapshots without the need to install an agent. Supported cloud service provider platforms for agentless scanning:
- Hosts - Amazon AWS, Google Cloud Platform, Microsoft Azure, and Oracle Cloud Infrastructure.
- Containers- AWS, Azure, and GCP
When you add a cloud account in the Prisma Cloud Compute (Manage > Cloud accounts), enable the agentless scan option and configure the scan scope.
- Authorization: required (string): Authenticates with the Base64-encoded "username:password" credentials.
JWT Access Token
Use POST, /api/vVERSION/authenticate for authorization
- Authorization: required (string): Authenticates with the Bearer authentication scheme to transmit the access token. Example: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJk…………
📄️ View the Agentless Scan Progress
Shows the progress of an ongoing scan on hosts or containers for vulnerabilities and compliance.
📄️ Start Agentless Scan
Scans the hosts or containers for vulnerabilities and compliance.
📄️ Stop an Ongoing Scan
Stops an ongoing scan on hosts or containers for vulnerabilities and compliance.
📄️ Download Agentless Permission Templates
Downloads a tarball file that contains the agentless resource permission templates for the cloud accounts. Apply these permission templates to complete the onboarding process for agentless scanning.