Docs Home Pulumi IaC Pulumi ESC Pulumi Cloud Packages Tutorials
  1. Packages
  2. CrowdStrike
  3. API Docs
  4. getCloudAwsAccount
CrowdStrike v0.0.10 published on Monday, Mar 3, 2025 by CrowdStrike
crowdstrike/pulumi-crowdstrike

crowdstrike.getCloudAwsAccount

Explore with Pulumi AI

crowdstrike logo
CrowdStrike v0.0.10 published on Monday, Mar 3, 2025 by CrowdStrike
crowdstrike/pulumi-crowdstrike

    This data source provides information about AWS accounts in Falcon.

    API Scopes

    The following API scopes are required:

    • Cloud security AWS registration | Read & Write
    • CSPM registration | Read & Write

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as crowdstrike from "@pulumi/crowdstrike";

const all = crowdstrike.getCloudAwsAccount({});
const specific = crowdstrike.getCloudAwsAccount({
    accountId: "123456789012",
});
const org = crowdstrike.getCloudAwsAccount({
    organizationId: "o-123456789012",
});

    import pulumi
import pulumi_crowdstrike as crowdstrike

all = crowdstrike.get_cloud_aws_account()
specific = crowdstrike.get_cloud_aws_account(account_id="123456789012")
org = crowdstrike.get_cloud_aws_account(organization_id="o-123456789012")

    package main

import (
	"github.com/crowdstrike/pulumi-crowdstrike/sdk/go/crowdstrike"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := crowdstrike.LookupCloudAwsAccount(ctx, &crowdstrike.LookupCloudAwsAccountArgs{}, nil)
		if err != nil {
			return err
		}
		_, err = crowdstrike.LookupCloudAwsAccount(ctx, &crowdstrike.LookupCloudAwsAccountArgs{
			AccountId: pulumi.StringRef("123456789012"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = crowdstrike.LookupCloudAwsAccount(ctx, &crowdstrike.LookupCloudAwsAccountArgs{
			OrganizationId: pulumi.StringRef("o-123456789012"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Crowdstrike = Pulumi.Crowdstrike;

return await Deployment.RunAsync(() => 
{
    var all = Crowdstrike.GetCloudAwsAccount.Invoke();

    var specific = Crowdstrike.GetCloudAwsAccount.Invoke(new()
    {
        AccountId = "123456789012",
    });

    var org = Crowdstrike.GetCloudAwsAccount.Invoke(new()
    {
        OrganizationId = "o-123456789012",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.crowdstrike.CrowdstrikeFunctions;
import com.pulumi.crowdstrike.inputs.GetCloudAwsAccountArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var all = CrowdstrikeFunctions.getCloudAwsAccount();

        final var specific = CrowdstrikeFunctions.getCloudAwsAccount(GetCloudAwsAccountArgs.builder()
            .accountId("123456789012")
            .build());

        final var org = CrowdstrikeFunctions.getCloudAwsAccount(GetCloudAwsAccountArgs.builder()
            .organizationId("o-123456789012")
            .build());

    }
}

    variables:
  all:
    fn::invoke:
      function: crowdstrike:getCloudAwsAccount
      arguments: {}
  specific:
    fn::invoke:
      function: crowdstrike:getCloudAwsAccount
      arguments:
        accountId: '123456789012'
  org:
    fn::invoke:
      function: crowdstrike:getCloudAwsAccount
      arguments:
        organizationId: o-123456789012

    Using getCloudAwsAccount

    Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

    function getCloudAwsAccount(args: GetCloudAwsAccountArgs, opts?: InvokeOptions): Promise<GetCloudAwsAccountResult>
function getCloudAwsAccountOutput(args: GetCloudAwsAccountOutputArgs, opts?: InvokeOptions): Output<GetCloudAwsAccountResult>
    def get_cloud_aws_account(account_id: Optional[str] = None,
                          organization_id: Optional[str] = None,
                          opts: Optional[InvokeOptions] = None) -> GetCloudAwsAccountResult
def get_cloud_aws_account_output(account_id: Optional[pulumi.Input[str]] = None,
                          organization_id: Optional[pulumi.Input[str]] = None,
                          opts: Optional[InvokeOptions] = None) -> Output[GetCloudAwsAccountResult]
    func LookupCloudAwsAccount(ctx *Context, args *LookupCloudAwsAccountArgs, opts ...InvokeOption) (*LookupCloudAwsAccountResult, error)
func LookupCloudAwsAccountOutput(ctx *Context, args *LookupCloudAwsAccountOutputArgs, opts ...InvokeOption) LookupCloudAwsAccountResultOutput

    > Note: This function is named LookupCloudAwsAccount in the Go SDK.

    public static class GetCloudAwsAccount 
{
    public static Task<GetCloudAwsAccountResult> InvokeAsync(GetCloudAwsAccountArgs args, InvokeOptions? opts = null)
    public static Output<GetCloudAwsAccountResult> Invoke(GetCloudAwsAccountInvokeArgs args, InvokeOptions? opts = null)
}
    public static CompletableFuture<GetCloudAwsAccountResult> getCloudAwsAccount(GetCloudAwsAccountArgs args, InvokeOptions options)
public static Output<GetCloudAwsAccountResult> getCloudAwsAccount(GetCloudAwsAccountArgs args, InvokeOptions options)

    fn::invoke:
  function: crowdstrike:index/getCloudAwsAccount:getCloudAwsAccount
  arguments:
    # arguments dictionary

    The following arguments are supported:

    AccountId string
    Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
    OrganizationId string
    Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching
    AccountId string
    Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
    OrganizationId string
    Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching
    accountId String
    Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
    organizationId String
    Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching
    accountId string
    Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
    organizationId string
    Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching
    account_id str
    Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
    organization_id str
    Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching
    accountId String
    Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
    organizationId String
    Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching

    getCloudAwsAccount Result

    The following output properties are available:

    Accounts List<CrowdStrike.Crowdstrike.Outputs.GetCloudAwsAccountAccount>
    The list of AWS accounts
    Id string
    The provider-assigned unique ID for this managed resource.
    AccountId string
    Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
    OrganizationId string
    Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching
    Accounts []GetCloudAwsAccountAccount
    The list of AWS accounts
    Id string
    The provider-assigned unique ID for this managed resource.
    AccountId string
    Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
    OrganizationId string
    Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching
    accounts List<GetCloudAwsAccountAccount>
    The list of AWS accounts
    id String
    The provider-assigned unique ID for this managed resource.
    accountId String
    Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
    organizationId String
    Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching
    accounts GetCloudAwsAccountAccount[]
    The list of AWS accounts
    id string
    The provider-assigned unique ID for this managed resource.
    accountId string
    Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
    organizationId string
    Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching
    accounts Sequence[GetCloudAwsAccountAccount]
    The list of AWS accounts
    id str
    The provider-assigned unique ID for this managed resource.
    account_id str
    Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
    organization_id str
    Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching
    accounts List<Property Map>
    The list of AWS accounts
    id String
    The provider-assigned unique ID for this managed resource.
    accountId String
    Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
    organizationId String
    Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching

    Supporting Types

    GetCloudAwsAccountAccount

    AccountId string
    The AWS Account ID
    AccountType string
    The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
    AssetInventoryEnabled bool
    Whether asset inventory is enabled
    CloudtrailBucketName string
    The name of the CloudTrail S3 bucket used for real-time visibility
    CloudtrailRegion string
    The AWS region of the CloudTrail bucket
    DspmEnabled bool
    Whether Data Security Posture Management is enabled
    DspmRoleArn string
    The ARN of the IAM role to be used by CrowdStrike DSPM
    EventbusArn string
    The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
    EventbusName string
    The name of the Amazon EventBridge used by CrowdStrike to forward messages
    ExternalId string
    The external ID used to assume the AWS IAM role
    IamRoleArn string
    The ARN of the AWS IAM role used to access this AWS account
    IdpEnabled bool
    Whether Identity Protection is enabled
    IntermediateRoleArn string
    The ARN of the intermediate role used to assume the AWS IAM role
    IsOrganizationManagementAccount bool
    Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
    OrganizationId string
    The AWS Organization ID
    RealtimeVisibilityEnabled bool
    Whether real-time visibility is enabled
    SensorManagementEnabled bool
    Whether 1-click sensor deployment is enabled
    TargetOuses List<string>
    The list of AWS Organizational Units (OUs) targeted for this account
    AccountId string
    The AWS Account ID
    AccountType string
    The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
    AssetInventoryEnabled bool
    Whether asset inventory is enabled
    CloudtrailBucketName string
    The name of the CloudTrail S3 bucket used for real-time visibility
    CloudtrailRegion string
    The AWS region of the CloudTrail bucket
    DspmEnabled bool
    Whether Data Security Posture Management is enabled
    DspmRoleArn string
    The ARN of the IAM role to be used by CrowdStrike DSPM
    EventbusArn string
    The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
    EventbusName string
    The name of the Amazon EventBridge used by CrowdStrike to forward messages
    ExternalId string
    The external ID used to assume the AWS IAM role
    IamRoleArn string
    The ARN of the AWS IAM role used to access this AWS account
    IdpEnabled bool
    Whether Identity Protection is enabled
    IntermediateRoleArn string
    The ARN of the intermediate role used to assume the AWS IAM role
    IsOrganizationManagementAccount bool
    Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
    OrganizationId string
    The AWS Organization ID
    RealtimeVisibilityEnabled bool
    Whether real-time visibility is enabled
    SensorManagementEnabled bool
    Whether 1-click sensor deployment is enabled
    TargetOuses []string
    The list of AWS Organizational Units (OUs) targeted for this account
    accountId String
    The AWS Account ID
    accountType String
    The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
    assetInventoryEnabled Boolean
    Whether asset inventory is enabled
    cloudtrailBucketName String
    The name of the CloudTrail S3 bucket used for real-time visibility
    cloudtrailRegion String
    The AWS region of the CloudTrail bucket
    dspmEnabled Boolean
    Whether Data Security Posture Management is enabled
    dspmRoleArn String
    The ARN of the IAM role to be used by CrowdStrike DSPM
    eventbusArn String
    The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
    eventbusName String
    The name of the Amazon EventBridge used by CrowdStrike to forward messages
    externalId String
    The external ID used to assume the AWS IAM role
    iamRoleArn String
    The ARN of the AWS IAM role used to access this AWS account
    idpEnabled Boolean
    Whether Identity Protection is enabled
    intermediateRoleArn String
    The ARN of the intermediate role used to assume the AWS IAM role
    isOrganizationManagementAccount Boolean
    Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
    organizationId String
    The AWS Organization ID
    realtimeVisibilityEnabled Boolean
    Whether real-time visibility is enabled
    sensorManagementEnabled Boolean
    Whether 1-click sensor deployment is enabled
    targetOuses List<String>
    The list of AWS Organizational Units (OUs) targeted for this account
    accountId string
    The AWS Account ID
    accountType string
    The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
    assetInventoryEnabled boolean
    Whether asset inventory is enabled
    cloudtrailBucketName string
    The name of the CloudTrail S3 bucket used for real-time visibility
    cloudtrailRegion string
    The AWS region of the CloudTrail bucket
    dspmEnabled boolean
    Whether Data Security Posture Management is enabled
    dspmRoleArn string
    The ARN of the IAM role to be used by CrowdStrike DSPM
    eventbusArn string
    The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
    eventbusName string
    The name of the Amazon EventBridge used by CrowdStrike to forward messages
    externalId string
    The external ID used to assume the AWS IAM role
    iamRoleArn string
    The ARN of the AWS IAM role used to access this AWS account
    idpEnabled boolean
    Whether Identity Protection is enabled
    intermediateRoleArn string
    The ARN of the intermediate role used to assume the AWS IAM role
    isOrganizationManagementAccount boolean
    Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
    organizationId string
    The AWS Organization ID
    realtimeVisibilityEnabled boolean
    Whether real-time visibility is enabled
    sensorManagementEnabled boolean
    Whether 1-click sensor deployment is enabled
    targetOuses string[]
    The list of AWS Organizational Units (OUs) targeted for this account
    account_id str
    The AWS Account ID
    account_type str
    The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
    asset_inventory_enabled bool
    Whether asset inventory is enabled
    cloudtrail_bucket_name str
    The name of the CloudTrail S3 bucket used for real-time visibility
    cloudtrail_region str
    The AWS region of the CloudTrail bucket
    dspm_enabled bool
    Whether Data Security Posture Management is enabled
    dspm_role_arn str
    The ARN of the IAM role to be used by CrowdStrike DSPM
    eventbus_arn str
    The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
    eventbus_name str
    The name of the Amazon EventBridge used by CrowdStrike to forward messages
    external_id str
    The external ID used to assume the AWS IAM role
    iam_role_arn str
    The ARN of the AWS IAM role used to access this AWS account
    idp_enabled bool
    Whether Identity Protection is enabled
    intermediate_role_arn str
    The ARN of the intermediate role used to assume the AWS IAM role
    is_organization_management_account bool
    Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
    organization_id str
    The AWS Organization ID
    realtime_visibility_enabled bool
    Whether real-time visibility is enabled
    sensor_management_enabled bool
    Whether 1-click sensor deployment is enabled
    target_ouses Sequence[str]
    The list of AWS Organizational Units (OUs) targeted for this account
    accountId String
    The AWS Account ID
    accountType String
    The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
    assetInventoryEnabled Boolean
    Whether asset inventory is enabled
    cloudtrailBucketName String
    The name of the CloudTrail S3 bucket used for real-time visibility
    cloudtrailRegion String
    The AWS region of the CloudTrail bucket
    dspmEnabled Boolean
    Whether Data Security Posture Management is enabled
    dspmRoleArn String
    The ARN of the IAM role to be used by CrowdStrike DSPM
    eventbusArn String
    The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
    eventbusName String
    The name of the Amazon EventBridge used by CrowdStrike to forward messages
    externalId String
    The external ID used to assume the AWS IAM role
    iamRoleArn String
    The ARN of the AWS IAM role used to access this AWS account
    idpEnabled Boolean
    Whether Identity Protection is enabled
    intermediateRoleArn String
    The ARN of the intermediate role used to assume the AWS IAM role
    isOrganizationManagementAccount Boolean
    Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
    organizationId String
    The AWS Organization ID
    realtimeVisibilityEnabled Boolean
    Whether real-time visibility is enabled
    sensorManagementEnabled Boolean
    Whether 1-click sensor deployment is enabled
    targetOuses List<String>
    The list of AWS Organizational Units (OUs) targeted for this account

    Package Details

    Repository
    crowdstrike crowdstrike/pulumi-crowdstrike
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the crowdstrike Terraform Provider.
    crowdstrike logo
    CrowdStrike v0.0.10 published on Monday, Mar 3, 2025 by CrowdStrike
    crowdstrike/pulumi-crowdstrike