https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin-compute/continuous_integration/se

In Prisma Cloud Enterprise, for alerts to be generated for configuration assets in an onboarded public cloud account, it is essential that the account is associated with an alert rule that matches the enabled config policies.
If the account is not linked to an alert rule or if the existing alert rules do not match the config policies, no alerts will be generated even though configuration resource ingestion is visible, and RQL statements return config resource results. This requirement emphasizes the need for a well-structured alerting mechanism to ensure that security incidents are promptly identified and addressed.

Web Application and API Security (WAAS) bot protection within the Prisma Cloud ecosystem includes various types of bots, with "User-defined bots" and "Unknown bots" being two key categories. User-defined bots refer to bots that organizations have explicitly identified and categorized based on their behavior and purpose. These can include legitimate bots such as search engine crawlers or internal automation tools, which are recognized and allowed based on predefined criteria set by the user.
Unknown bots, on the other hand, encompass bots that have not been explicitly identified or categorized by the user or the system. These can potentially include malicious bots that attempt to scrape data, perform DDoS attacks, or exploit vulnerabilities in web applications and APIs. The categorization of unknown bots is crucial for maintaining security, as it allows for the monitoring and analysis of bot behavior to identify potential threats and take appropriate actions.
In the context of Prisma Cloud and its emphasis on securing cloud-native applications, the differentiation between user-defined and unknown bots is significant. Prisma Cloud's approach to WAAS bot protection is designed to provide granular control over bot traffic, enabling organizations to distinguish between beneficial and harmful bot activities. This aligns with the broader goal of ensuring the security and integrity of web applications and APIs in a cloud environment, as highlighted in documents such as the
"Prisma-Cloud-Visibility-and-Control-Qualification-Guide" and "Guide-to-CSPM-Tools-Email-Social
-LP-Copy." These resources emphasize the importance of comprehensive security measures that include the management of bot traffic to protect against a wide range of web-based threats.
References:
* "Prisma-Cloud-Visibility-and-Control-Qualification-Guide" discusses the importance of visibility and control in cloud environments, including the management of bot traffic as part of a comprehensive security strategy.
* "Guide-to-CSPM-Tools-Email-Social -LP-Copy" highlights the need for advanced security tools and practices, such as WAAS bot protection, to manage and mitigate the risks associated with web applications and APIs in the cloud.

https://prismacloud.ideas.aha.io/ideas
To submit an external new feature request for Prisma Cloud, users can utilize the Aha platform. By accessing the Palo Alto Networks Aha portal, users can submit their feature requests, suggest enhancements, and contribute to shaping the future of Prisma Cloud. Aha provides a structured way to collect and prioritize customer feedback, ensuring that valuable insights reach the product development teams.
For those seeking to propose new features or improvements, visiting the Aha portal and submitting their ideas is the recommended approach. It allows users to participate in the ongoing evolution of Prisma Cloud by sharing their requirements and vision for the platform

In WAAS Access control for file uploads, Prisma Cloud supports various file types out-of-the-box to ensure secure and controlled file upload functionality. The supported file types include Text, Images, and Documents.
These categories cover a wide range of commonly used file formats, allowing organizations to manage and restrict file uploads based on the content type. This feature helps in preventing malicious file uploads and ensures that only approved file types are uploaded to applications and services.