A large enterprise has a strict data residency policy that mandates all data for a specific project must reside and be processed only within the EU (European Union) region. They are using Prisma Cloud to monitor their AWS, Azure, and GCP environments. How can Prisma Cloud best assist in continuously enforcing this data residency requirement?
- ABy creating custom policies using RQL to identify resources deployed in non-EU regions.
- BBy manually reviewing cloud provider compliance reports for each region.
- CBy enabling automated remediation to move non-compliant data to EU regions.
- DBy configuring a global alert that flags any resource deployed outside the EU.
Show answer & explanationAnswer & explanation
Correct answer: A. By creating custom policies using RQL to identify resources deployed in non-EU regions.
To continuously enforce a specific data residency requirement across multiple cloud providers, creating custom policies with RQL is the most effective method. RQL can query for the region attribute of resources across AWS, Azure, and GCP, allowing for precise identification of non-compliant deployments. While automated remediation might be a subsequent step, it's not the primary enforcement mechanism for *identifying* the non-compliance.
Why the other options are wrong
- B. Manual review is not scalable or continuous for a large multi-cloud environment.
- C. Automated remediation can be a *response* to a policy violation, but it's not the mechanism for *identifying* the violation itself, and moving data automatically can be complex and risky.
- D. A global alert is too broad; custom policies provide precise definition and context for non-compliance.
Prisma Cloud Data Residency Enforcement (RQL)
Using Prisma Cloud's Resource Query Language (RQL) to create custom policies that continuously monitor and enforce data residency requirements across multi-cloud environments.
- Leverages RQL for granular region-based queries.
- Applicable across AWS, Azure, GCP.
- Ensures continuous monitoring for data residency compliance.
Memory trick: RQL is your multi-cloud border patrol for data.