RFC-005: Prisma → Wiz Conversion Specification

RFC-005: Prisma → Wiz Conversion Specification

PRIVATE AND PROPRIETARY — NOT A PUBLIC RFC. Owned by Kanjani AI Research & Causum. See NOTICE.md.

1. Source Model (Prisma)

• Policy metadata
• RQL query
• saved search (optional)

2. Target Model (Wiz)

• Cloud Configuration Rule
• GraphQL object
• Rego logic (optional)

3. Conversion Pipeline

RQL AST NPS Wiz Query / Rego

4. Mapping Rules

Prisma	Wiz
api.name	resource type
json.rule	condition
severity	severity
compliance	control/framework

---

5. Known Transformations

Example

Prisma

config where api.name = ‘aws-s3api-get-bucket-acl’

AND json.rule = bucket.acl.grants[*].uri contains “AllUsers”

NPS

| {

“resource”: “S3Bucket”,

“conditions”: [

{

  "field": "acl.public",

  "operator": "true"

}

]

}

Wiz

S3Bucket

where publicAccess == true