integrate-prisma-cloud-with-microsoft-teams.adoc

Integrate Prisma Cloud with Microsoft Teams

Learn how to integrate Prisma™ Cloud with Microsoft Teams.

Microsoft Teams is a cloud-based team collaboration software that is part of the Office 365 suite of applications and is used for workplace chat, video meetings, file storage, and application integration.

Prisma™ Cloud integrates with Microsoft Teams and monitors your assets and sends alerts on resource misconfigurations, compliance violations, network security risks, and anomalous user activities either as they happen or as a consolidated summary card—determined by how you configure alert notifications. Each alert message is a webhook notification that includes details such as the cloud type, policy name, and the resource that triggered the alert and the message card indicates the severity with a red (high), yellow (medium) or gray (low) line to help you quickly assess alert severity. I don’t think “easy scanning” is what we want to say but I’m struggling to come up with a more appropriate word. I was initially thinking “for accelerated assessment” but I don’t think that sounds right, either. Maybe “to help you quickly identify high severity alerts” or “quickly assess alert severity?”.

1. Set up Microsoft Teams to view alert notifications from Prisma Cloud.

   You must create an incoming webhook connector on a new channel or on a pre-existing channel on Microsoft Teams to enable the integration with Prisma Cloud. This webhook channel helps consolidate alert notifications from Prisma Cloud in Microsoft Teams so that your operations team can review and take action on the alerts. To enable this integration, you must have administrative privileges or contact the Microsoft 365 administrator who manages Team settings for your organization.

   1. In Microsoft Teams, click More options (…​) next to the channel name and select Connectors.

   2. Scroll to Incoming Webhook, Add a webhook, and Install it.

   3. Enter a name for the webhook and Create it.

   4. Copy the webhook URL to the clipboard and save it before you click Done.

2. Set up Microsoft Teams on Prisma Cloud.

   1. Log in to Prisma Cloud to enable the integration.

   2. Select "Settings > Integrations".

   3. Set the Add Integration to Microsoft Teams.

   4. Enter an Integration Name and a Description.

   5. Enter the Webhook URL that you previously copied from Microsoft Teams

      

   6. Click Next and then Test.

      

      Note	On successful integration in the Microsoft Teams conversation, you will receive a test message card with a green line.

3. Create an Alert Rule for Run-Time Checks or modify an existing rule to receive alerts in Microsoft Teams.

   The message card includes information on the policy rules and the resource names that have violated the policy and it includes a direct link with the relevant filters to access Prisma Cloud and view the alert or scheduled notification summary directly in the app.