To protect the pods hosting a web front end from Layer 7 attacks, the development team should create a Web Application and API Security (WAAS) rule targeted at the image name of the pods. This approach allows the policy to specifically protect the applications running within the pods against sophisticated attacks that target the application layer.
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/waas/deploy_waas

https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/continuous_integration
/jenkins_plugin.html
https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/continuous_integration
/jenkins_pipeline_project
To scan container images in Jenkins pipelines, Prisma Cloud offers two specific tools:
* D. Twistcli: This is a command-line interface tool provided by Prisma Cloud that allows users to scan container images for vulnerabilities and compliance issues. It can be integrated into Jenkins pipelines to automate the scanning process as part of the CI/CD workflow1.
* E. Compute Jenkins plugin: This plugin integrates Prisma Cloud's capabilities directly into Jenkins, enabling automated scanning of container images during the build process. It provides a seamless way to include security checks within the Jenkins pipeline1.
Both Twistcli and the Compute Jenkins plugin are designed to work within the Jenkins environment to ensure that container images are scanned for security risks before they are deployed. By integrating these tools into the pipeline, developers can identify and address vulnerabilities early in the development cycle, contributing to a more secure software delivery process

the default when using the script is twistlock, but you can use whatever you want. https://docs.
paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/configure
/set_diff_paths_daemon_sets

In the Prisma Cloud Software Release 22.06, referred to as the Kepler release, the addition of Google Artifact Registry as a supported Registry type was a significant update. Google Artifact Registry is designed to store, manage, and secure your container images and language packages (such as Maven and npm). It provides a single place for teams to manage their artifacts and dependencies, improving consistency and security across software development and deployment processes. This update in Prisma Cloud reflects the platform's commitment to supporting the latest cloud-native technologies and services, enhancing its capabilities in securing modern cloud environments.

To configure serverless scanning in a cloud security platform like Prisma Cloud, the system needs to know where (Region) the serverless functions are deployed, how to access them (Credential), and on which cloud platform they are running (Provider). These settings ensure that the scanning tool can accurately locate and authenticate to the serverless functions across different cloud environments for vulnerability assessment. This aligns with the principle of providing comprehensive visibility and consistent security across multi-cloud environments as outlined in the "Guide to Cloud Security Posture Management Tools" document.
Reference: https://docs.paloaltonetworks.com/prisma/prisma-cloud/21-04/prisma-cloud-compute-edition- admin/vulnerability_management/serverless_functions.html