• VULNERABILITIES
  • ACCOUNT SCOPE
  • REMEDIATION
  • QUERY LOGS

How to hunt cloud misconfigurations with your AI

Connect Prisma Cloud to your AI client to run security queries across your entire cloud footprint using natural language.

Ask AI about this page

Short answer

How can I use my AI to find cloud misconfigurations?

Your AI uses Prisma Cloud to run RQL queries against your cloud accounts to identify specific resource vulnerabilities. You'll get a clear list of security gaps to investigate. Here is how it works.

The results.

Where your findings land.

The AI processes your request and organizes the data into these categories.

VULNERABILITIES

Security gaps found

The AI identifies specific misconfigurations like open S3 buckets or permissive IAM roles. You get a direct list of what's broken.

ACCOUNT SCOPE

All accounts scanned

The AI pulls data from every account you have onboarded. You don't need to jump between different consoles to find issues.

REMEDIATION

Human review needed

The AI flags the most critical issues for you to check. You decide which fixes to apply to your infrastructure.

QUERY LOGS

RQL query history

The AI tracks the queries it runs. You can review the exact logic used to find specific resource patterns.

The workflow

What your AI does when the request arrives.

The AI handles the heavy lifting of querying Prisma Cloud so you can focus on fixing the issues.

  1. Identify target accounts

    The AI looks at your connected environment to see which cloud accounts are available for scanning.

    get_cloud_accounts

  2. Translate intent to RQL

    Your AI converts your plain English request into a valid RQL query that Prisma Cloud understands.

    run_rql_query

  3. Execute the scan

    The AI runs the query against your cloud resources to pull real-time configuration data.

    run_rql_query

  4. Summarize findings

    The AI parses the raw query results into a readable list of vulnerabilities for you.

    run_rql_query

Try it

Copy these to start.

Paste these prompts into your chat to begin hunting.

Starting points

Swap out the resource names like 'S3 buckets' or 'IAM roles' to match what you're looking for.

Prisma Cloud Connector

You're all set. Choose your MCP client and follow the setup instructions.

Connector linkhttps://edge.vinkius.com/vk_preview_x23kcdok2YsS8RTh2QLG6EDhErebwtERCnmJpprJ/mcp

Claude Desktop

Follow the steps below to connect in seconds.

  1. 1In Claude Desktop, open Settings → Connectors.
  2. 2Click “Add custom connector” and paste the connector link above as the remote MCP server URL.
  3. 3Click Add and start a new chat — Prisma Cloud capabilities are ready to use.
Configuration · claude_desktop_config.jsonCopy
{
  "mcpServers": {
    "prisma-cloud-mcp": {
      "url": "https://edge.vinkius.com/vk_preview_x23kcdok2YsS8RTh2QLG6EDhErebwtERCnmJpprJ/mcp"
    }
  }
}
Copy into chat04

  • Find all S3 buckets in my accounts that are publicly accessible.

  • Show me all IAM users that don't have MFA enabled.

  • List all security groups that allow inbound traffic on port 22.

  • Are there any unencrypted EBS volumes across my cloud accounts?

  • Claude
  • ChatGPT
  • Cursor
  • VS Code
  • Windsurf
  • Claude Code
  • JetBrains
  • Cline

Start here

Connect Prisma Cloud once, then ask.

Just link your account through the Vinkius dashboard. Your credentials stay encrypted, and you can start querying immediately.

Connect Prisma Cloud to your AI

FAQ

How this task behaves.

  • 01

    Can the AI fix the misconfigurations for me?

    No. The AI can only find and report vulnerabilities using RQL queries. You must manually apply any fixes in your cloud console.

  • 02

    Does the AI have permission to delete my resources?

    No. The tools only allow the AI to read account lists and run queries. It cannot delete, modify, or create any cloud resources.

  • 03

    How does it know which accounts to scan?

    The AI uses the get_cloud_accounts tool to see every account you have already onboarded to Prisma Cloud.

  • 04

    Can I run custom RQL queries?

    Yes. You can provide your own RQL syntax or ask the AI to write the query for you based on your description.

  • 05

    Will it scan my entire cloud environment?

    It scans all accounts that are currently connected to your Prisma Cloud instance.

  • More questions about Prisma Cloud? The Connector page answers them. See everything the Prisma Cloud Connector can do

Connect Prisma Cloud to Claude, Cursor, ChatGPT & more