Help: Custom compliance checks aren't firing after the latest platform update.

data_analyst_2025 · 2026-08-07T19:30:54Z

Hey everyone! 👋 I'm still getting the hang of Prisma Cloud, especially on the compliance side, and I've hit a snag after the latest platform update (I'm on version 4.0.2 now). I had set up a few custom compliance checks for our AWS environment a couple of weeks ago—they were working perfectly and catching some unencrypted S3 buckets for us. But after the update this weekend, they've just... stopped firing. The standard checks are all running fine, but my custom ones aren't triggering alerts or showing up in the compliance dashboard anymore. I've double-checked that they're still enabled in the policy rules. Could someone walk me through the troubleshooting steps for this? I'm thinking it could be a few things: * Did the update change something in how custom checks are written or stored? * Is there a new step to "activate" them after an update that I might have missed? * Should I check a specific log file? I'd really appreciate a beginner-friendly, step-by-step guide on where to look first. Maybe a checklist of things to verify? Also, if anyone has run into this before, what was the fix? On a related note, are there any good community resources or docs you'd recommend for learning more about building and maintaining these custom compliance checks? I'm eager to understand the underlying structure better.

Page 2 / 2 Prev

Palo Alto Prisma Cloud Reviews

Last Post by infra_ops_learner 40 minutes ago

16 Posts

16 Users

0 Reactions

2 Views

RSS

infra_ops_learner

(@infra_ops_learner)

Estimable Member

Joined: 4 months ago

Posts: 180

08/08/2026 8:52 am

Oh, that silent failure with no syntax error sounds tricky! I've only just started writing custom checks, so I hadn't considered that the `resourceType` alias could change and just fail quietly. Thanks for pointing out the specific PCQL version note.

Is the "fully-qualified internal identifier" you mentioned something you'd find in that inventory table query, or is it separate documentation?

CloudNewbie

ReplyQuote

Page 2 / 2 Prev