Sam can finally finish his building block sets thanks to Prisma Cloud, and Danielle learns all about where all the time savings came from. 

Learn how to seamlessly maintain a robust security posture across a multi-cloud architecture. For more information about Palo Alto Networks’ Cloud Security Posture Management, visit us here. 

https://www.paloaltonetworks.com/prisma/cloud/cloud-security-posture-management 

Transcript: 

SAM: Hello hello my good friend. 

DANIELLE: Hello, what’s with the good attitude…? Finally finish that LEGO set? 

SAM: Well, yeah, but it’s because I've been able to put all my work stress behind me and just focus on the bricks. 

DANIELLE: You’re like a whole new you! All because of Prisma Cloud? 

SAM: All because of Prisma Cloud. It’s made work so easy. Our hybrid cloud security posture management is so smooth and functional…like two 2x2 bricks slotting on top of a 2x4. 

DANIELLE: In the spirit of DevSecOps partnership, could you walk me through what's happening? I bet it'll be easier for me to code if I know what's going on behind the screens. 

SAM: Wow, I’ve never heard that term before. Security and developers. DevSec. DevSecOps. I like it…yeah, let's go through this together. 

DANIELLE: I'm ready when you are. 

SAM: So our problem was maintaining security and compliance posture of all of our cloud resources. It's always a moving target because threats get smarter and we have to respond. 

DANIELLE: Right, sounds like a lot. 

SAM: It is! And we have more than one cloud environment, so we have to track so much across so many places. It was so much to manage, and nothing we tried in the past could handle all the environments we used at once. It turned into a patchwork of security features. 

DANIELLE: No wonder you were so stressed all the time. And irritable. And moody… 

SAM: My Burj Khalifa LEGO set sat in the box for months. Months! 

DANIELLE: So what did you need to do to wrap it all up? 

SAM: We focused on four key aspects. One: visibility/compliance/governance. Two: threat detection. Three: integrated data security. And four: automation for remediation. 

DANIELLE: You lost me. Can you explain the security engineer talk?  

SAM: Most definitely. Basically we have to monitor everything, detect anomalies and correlate them to types of threats with contextualized data, build that security info back into our cloud system, and automate small actions so the security engineering teams can focus on bigger issues. 

DANIELLE: Hm…I guess I just don't understand why things weren't working before then. We had those other services, right? What changed? 

SAM: Not all cloud service providers mesh with other services. But Prisma Cloud swooped in and organized everything for us across all of our clouds——with more automation and smarter rules, too, so we could be even more hands off. 

DANIELLE: Okay, yeah, that makes sense. 

SAM: When we added a new cloud service provider on top of our old one, I just added our new cloud to our existing Prisma Cloud configuration and let the system handle the rest. Before I would've had to find new security management software, troubleshoot it, bug chase— 

DANIELLE: And stay late while the LEGOs collected dust. 

SAM: They don't collect dust when they're in the box, Danielle. 

DANIELLE: It's a figure of speech. 

SAM: Irregardless, Prisma Cloud's central dash lets me and the security engineering team monitor everything all at once, and the automated remediations and dynamic baseline formation across every cloud environment let us sit back until something really pressing comes through. 

DANIELLE: You must be really satisfied with it; this is the most I've ever heard you talk about anything. 

SAM: Yeah I really do love it. We're going to keep this going as long as I can. 

NARRATOR: Palo Alto Networks. We’ve got next.