Workloads Settings

Image Assurance

You can set the period after which CloudGuard can delete inactive images, separately for KubernetesClosed Kubernetes, often abbreviated as “K8s”, orchestrates containerized applications to run on a cluster of hosts. and ShiftLeftClosed The ShiftLeft tool scans source code, containers and serverless functions, looking for vulnerabilities including those associated with the Log4j tool. This tool alerts the security and DevOps teams if any vulnerabilities are detected in the pre-build phase, ensuring that vulnerable code is not deployed. images. The period ranges from 1 to 365 days. CloudGuard considers Kubernetes or ShiftLeft images inactive if none of their related workloads are running. To learn more about your images, see Images.

To set the period:

  1. In CloudGuard, navigate to Settings > Configuration > Workloads.

  2. In the Image Assurance section, enter the number of days for Kubernetes and ShiftLeft images.

  3. Click Save changes.

Agentless Workload Protection

You can configure some AWP parameters individually for each account onboarded to AWP. For more information, see Viewing AWP Details.

To configure these parameters for all onboarded environments, use the Workloads Settings.

Caution - These settings are global and, when applied, override existing AWP settings in all onboarded accounts. To set custom AWP parameters for an environment, change the parameters individually in each specific environment after you finish to configure an OU.

To set the scan preferences for OU:

  1. Navigate to Settings > Configuration > Workloads and see the Agentless Workload Protection section.

  2. To set the period between consecutive scans of the same VM, enter a number between 24 and 1000 (by default, 24) in Scan interval (hours).

  3. To set the maximal number of simultaneous scans in the same region, enter a number between 1 and 20 (by default, 20) in Max Concurrent scans (scans per region).

  4. To configure a custom tag, click Add and enter the tag's key and value. For more information on custom tags, see Custom Tags.

  5. Click Save changes.