Prisma Cloud's Infrastructure-as-Code (IaC) scanning engine first parses various IaC file types, including Terraform HCL, into a standardized, normalized resource model. Policies are then created by writing queries against this model, which is represented in JSON format. Therefore, even when the source file is Terraform, the build policy query is structured to evaluate a JSON object.

A. YAML is a data serialization language, but the underlying query language for Prisma Cloud policies is not based on it.

C. CloudFormation is a type of IaC template, not the query language used to create policies against it.

D. Terraform (HCL) is the language of the source file, but the policy query is written against a normalized JSON model of it.

1. Palo Alto Networks. (2023). Create a New Build Policy. Prisma Cloud Administrator's Guide. The documentation states

"Prisma Cloud ingests and evaluates policies against a structured JSON representation of the configuration file." It further explains that the policy builder uses this JSON model for creating rules.