crowdstrike.getCloudAwsAccount

CrowdStrike v0.0.14 published on Monday, May 5, 2025 by CrowdStrike

crowdstrike/pulumi-crowdstrike

API Scopes

The following API scopes are required:

Cloud security AWS registration | Read & Write
CSPM registration | Read & Write

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as crowdstrike from "@pulumi/crowdstrike";

const all = crowdstrike.getCloudAwsAccount({});
const specific = crowdstrike.getCloudAwsAccount({
    accountId: "123456789012",
});
const org = crowdstrike.getCloudAwsAccount({
    organizationId: "o-123456789012",
});

import pulumi
import pulumi_crowdstrike as crowdstrike

all = crowdstrike.get_cloud_aws_account()
specific = crowdstrike.get_cloud_aws_account(account_id="123456789012")
org = crowdstrike.get_cloud_aws_account(organization_id="o-123456789012")

package main

import (
	"github.com/crowdstrike/pulumi-crowdstrike/sdk/go/crowdstrike"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := crowdstrike.LookupCloudAwsAccount(ctx, &crowdstrike.LookupCloudAwsAccountArgs{}, nil)
		if err != nil {
			return err
		}
		_, err = crowdstrike.LookupCloudAwsAccount(ctx, &crowdstrike.LookupCloudAwsAccountArgs{
			AccountId: pulumi.StringRef("123456789012"),
		}, nil)
		if err != nil {
			return err
		}
		_, err = crowdstrike.LookupCloudAwsAccount(ctx, &crowdstrike.LookupCloudAwsAccountArgs{
			OrganizationId: pulumi.StringRef("o-123456789012"),
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Crowdstrike = Pulumi.Crowdstrike;

return await Deployment.RunAsync(() => 
{
    var all = Crowdstrike.GetCloudAwsAccount.Invoke();

    var specific = Crowdstrike.GetCloudAwsAccount.Invoke(new()
    {
        AccountId = "123456789012",
    });

    var org = Crowdstrike.GetCloudAwsAccount.Invoke(new()
    {
        OrganizationId = "o-123456789012",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.crowdstrike.CrowdstrikeFunctions;
import com.pulumi.crowdstrike.inputs.GetCloudAwsAccountArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var all = CrowdstrikeFunctions.getCloudAwsAccount(GetCloudAwsAccountArgs.builder()
            .build());

        final var specific = CrowdstrikeFunctions.getCloudAwsAccount(GetCloudAwsAccountArgs.builder()
            .accountId("123456789012")
            .build());

        final var org = CrowdstrikeFunctions.getCloudAwsAccount(GetCloudAwsAccountArgs.builder()
            .organizationId("o-123456789012")
            .build());

    }
}

variables:
  all:
    fn::invoke:
      function: crowdstrike:getCloudAwsAccount
      arguments: {}
  specific:
    fn::invoke:
      function: crowdstrike:getCloudAwsAccount
      arguments:
        accountId: '123456789012'
  org:
    fn::invoke:
      function: crowdstrike:getCloudAwsAccount
      arguments:
        organizationId: o-123456789012

Using getCloudAwsAccount

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getCloudAwsAccount(args: GetCloudAwsAccountArgs, opts?: InvokeOptions): Promise<GetCloudAwsAccountResult>
function getCloudAwsAccountOutput(args: GetCloudAwsAccountOutputArgs, opts?: InvokeOptions): Output<GetCloudAwsAccountResult>

def get_cloud_aws_account(account_id: Optional[str] = None,
                          organization_id: Optional[str] = None,
                          opts: Optional[InvokeOptions] = None) -> GetCloudAwsAccountResult
def get_cloud_aws_account_output(account_id: Optional[pulumi.Input[str]] = None,
                          organization_id: Optional[pulumi.Input[str]] = None,
                          opts: Optional[InvokeOptions] = None) -> Output[GetCloudAwsAccountResult]

func LookupCloudAwsAccount(ctx *Context, args *LookupCloudAwsAccountArgs, opts ...InvokeOption) (*LookupCloudAwsAccountResult, error)
func LookupCloudAwsAccountOutput(ctx *Context, args *LookupCloudAwsAccountOutputArgs, opts ...InvokeOption) LookupCloudAwsAccountResultOutput

> Note: This function is named LookupCloudAwsAccount in the Go SDK.

public static class GetCloudAwsAccount 
{
    public static Task<GetCloudAwsAccountResult> InvokeAsync(GetCloudAwsAccountArgs args, InvokeOptions? opts = null)
    public static Output<GetCloudAwsAccountResult> Invoke(GetCloudAwsAccountInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetCloudAwsAccountResult> getCloudAwsAccount(GetCloudAwsAccountArgs args, InvokeOptions options)
public static Output<GetCloudAwsAccountResult> getCloudAwsAccount(GetCloudAwsAccountArgs args, InvokeOptions options)

fn::invoke:
  function: crowdstrike:index/getCloudAwsAccount:getCloudAwsAccount
  arguments:
    # arguments dictionary

The following arguments are supported:

AccountId string: Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
OrganizationId string: Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching

AccountId string: Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
OrganizationId string: Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching

accountId String: Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
organizationId String: Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching

accountId string: Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
organizationId string: Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching

account_id str: Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
organization_id str: Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching

accountId String: Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
organizationId String: Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching

getCloudAwsAccount Result

The following output properties are available:

Accounts List<CrowdStrike.Crowdstrike.Outputs.GetCloudAwsAccountAccount>: The list of AWS accounts
Id string: The provider-assigned unique ID for this managed resource.
AccountId string: Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
OrganizationId string: Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching

Accounts []GetCloudAwsAccountAccount: The list of AWS accounts
Id string: The provider-assigned unique ID for this managed resource.
AccountId string: Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
OrganizationId string: Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching

accounts List<GetCloudAwsAccountAccount>: The list of AWS accounts
id String: The provider-assigned unique ID for this managed resource.
accountId String: Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
organizationId String: Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching

accounts GetCloudAwsAccountAccount[]: The list of AWS accounts
id string: The provider-assigned unique ID for this managed resource.
accountId string: Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
organizationId string: Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching

accounts Sequence[GetCloudAwsAccountAccount]: The list of AWS accounts
id str: The provider-assigned unique ID for this managed resource.
account_id str: Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
organization_id str: Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching

accounts List<Property Map>: The list of AWS accounts
id String: The provider-assigned unique ID for this managed resource.
accountId String: Filter the results to a specific AWS Account ID. When specified, returns details for the matching AWS account. Can be used together with organization_id filter for OR matching
organizationId String: Filter the results to accounts within a specific AWS Organization. When specified, returns all AWS accounts associated with this organization ID. Can be used together with account_id filter for OR matching

Supporting Types

GetCloudAwsAccountAccount

AccountId string: The AWS Account ID
AccountType string: The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
AssetInventoryEnabled bool: Whether asset inventory is enabled
CloudtrailBucketName string: The name of the CloudTrail S3 bucket used for real-time visibility
CloudtrailRegion string: The AWS region of the CloudTrail bucket
DspmEnabled bool: Whether Data Security Posture Management is enabled
DspmRoleArn string: The ARN of the IAM role to be used by CrowdStrike DSPM
DspmRoleName string: The name of the IAM role to be used by CrowdStrike DSPM
EventbusArn string: The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
EventbusName string: The name of the Amazon EventBridge used by CrowdStrike to forward messages
ExternalId string: The external ID used to assume the AWS IAM role
IamRoleArn string: The ARN of the AWS IAM role used to access this AWS account
IamRoleName string: The name of the AWS IAM role used to access this AWS account
IdpEnabled bool: Whether Identity Protection is enabled
IntermediateRoleArn string: The ARN of the intermediate role used to assume the AWS IAM role
IsOrganizationManagementAccount bool: Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
OrganizationId string: The AWS Organization ID
RealtimeVisibilityEnabled bool: Whether real-time visibility is enabled
SensorManagementEnabled bool: Whether 1-click sensor deployment is enabled
TargetOuses List<string>: The list of AWS Organizational Units (OUs) targeted for this account

AccountId string: The AWS Account ID
AccountType string: The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
AssetInventoryEnabled bool: Whether asset inventory is enabled
CloudtrailBucketName string: The name of the CloudTrail S3 bucket used for real-time visibility
CloudtrailRegion string: The AWS region of the CloudTrail bucket
DspmEnabled bool: Whether Data Security Posture Management is enabled
DspmRoleArn string: The ARN of the IAM role to be used by CrowdStrike DSPM
DspmRoleName string: The name of the IAM role to be used by CrowdStrike DSPM
EventbusArn string: The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
EventbusName string: The name of the Amazon EventBridge used by CrowdStrike to forward messages
ExternalId string: The external ID used to assume the AWS IAM role
IamRoleArn string: The ARN of the AWS IAM role used to access this AWS account
IamRoleName string: The name of the AWS IAM role used to access this AWS account
IdpEnabled bool: Whether Identity Protection is enabled
IntermediateRoleArn string: The ARN of the intermediate role used to assume the AWS IAM role
IsOrganizationManagementAccount bool: Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
OrganizationId string: The AWS Organization ID
RealtimeVisibilityEnabled bool: Whether real-time visibility is enabled
SensorManagementEnabled bool: Whether 1-click sensor deployment is enabled
TargetOuses []string: The list of AWS Organizational Units (OUs) targeted for this account

accountId String: The AWS Account ID
accountType String: The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
assetInventoryEnabled Boolean: Whether asset inventory is enabled
cloudtrailBucketName String: The name of the CloudTrail S3 bucket used for real-time visibility
cloudtrailRegion String: The AWS region of the CloudTrail bucket
dspmEnabled Boolean: Whether Data Security Posture Management is enabled
dspmRoleArn String: The ARN of the IAM role to be used by CrowdStrike DSPM
dspmRoleName String: The name of the IAM role to be used by CrowdStrike DSPM
eventbusArn String: The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
eventbusName String: The name of the Amazon EventBridge used by CrowdStrike to forward messages
externalId String: The external ID used to assume the AWS IAM role
iamRoleArn String: The ARN of the AWS IAM role used to access this AWS account
iamRoleName String: The name of the AWS IAM role used to access this AWS account
idpEnabled Boolean: Whether Identity Protection is enabled
intermediateRoleArn String: The ARN of the intermediate role used to assume the AWS IAM role
isOrganizationManagementAccount Boolean: Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
organizationId String: The AWS Organization ID
realtimeVisibilityEnabled Boolean: Whether real-time visibility is enabled
sensorManagementEnabled Boolean: Whether 1-click sensor deployment is enabled
targetOuses List<String>: The list of AWS Organizational Units (OUs) targeted for this account

accountId string: The AWS Account ID
accountType string: The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
assetInventoryEnabled boolean: Whether asset inventory is enabled
cloudtrailBucketName string: The name of the CloudTrail S3 bucket used for real-time visibility
cloudtrailRegion string: The AWS region of the CloudTrail bucket
dspmEnabled boolean: Whether Data Security Posture Management is enabled
dspmRoleArn string: The ARN of the IAM role to be used by CrowdStrike DSPM
dspmRoleName string: The name of the IAM role to be used by CrowdStrike DSPM
eventbusArn string: The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
eventbusName string: The name of the Amazon EventBridge used by CrowdStrike to forward messages
externalId string: The external ID used to assume the AWS IAM role
iamRoleArn string: The ARN of the AWS IAM role used to access this AWS account
iamRoleName string: The name of the AWS IAM role used to access this AWS account
idpEnabled boolean: Whether Identity Protection is enabled
intermediateRoleArn string: The ARN of the intermediate role used to assume the AWS IAM role
isOrganizationManagementAccount boolean: Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
organizationId string: The AWS Organization ID
realtimeVisibilityEnabled boolean: Whether real-time visibility is enabled
sensorManagementEnabled boolean: Whether 1-click sensor deployment is enabled
targetOuses string[]: The list of AWS Organizational Units (OUs) targeted for this account

account_id str: The AWS Account ID
account_type str: The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
asset_inventory_enabled bool: Whether asset inventory is enabled
cloudtrail_bucket_name str: The name of the CloudTrail S3 bucket used for real-time visibility
cloudtrail_region str: The AWS region of the CloudTrail bucket
dspm_enabled bool: Whether Data Security Posture Management is enabled
dspm_role_arn str: The ARN of the IAM role to be used by CrowdStrike DSPM
dspm_role_name str: The name of the IAM role to be used by CrowdStrike DSPM
eventbus_arn str: The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
eventbus_name str: The name of the Amazon EventBridge used by CrowdStrike to forward messages
external_id str: The external ID used to assume the AWS IAM role
iam_role_arn str: The ARN of the AWS IAM role used to access this AWS account
iam_role_name str: The name of the AWS IAM role used to access this AWS account
idp_enabled bool: Whether Identity Protection is enabled
intermediate_role_arn str: The ARN of the intermediate role used to assume the AWS IAM role
is_organization_management_account bool: Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
organization_id str: The AWS Organization ID
realtime_visibility_enabled bool: Whether real-time visibility is enabled
sensor_management_enabled bool: Whether 1-click sensor deployment is enabled
target_ouses Sequence[str]: The list of AWS Organizational Units (OUs) targeted for this account

accountId String: The AWS Account ID
accountType String: The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
assetInventoryEnabled Boolean: Whether asset inventory is enabled
cloudtrailBucketName String: The name of the CloudTrail S3 bucket used for real-time visibility
cloudtrailRegion String: The AWS region of the CloudTrail bucket
dspmEnabled Boolean: Whether Data Security Posture Management is enabled
dspmRoleArn String: The ARN of the IAM role to be used by CrowdStrike DSPM
dspmRoleName String: The name of the IAM role to be used by CrowdStrike DSPM
eventbusArn String: The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
eventbusName String: The name of the Amazon EventBridge used by CrowdStrike to forward messages
externalId String: The external ID used to assume the AWS IAM role
iamRoleArn String: The ARN of the AWS IAM role used to access this AWS account
iamRoleName String: The name of the AWS IAM role used to access this AWS account
idpEnabled Boolean: Whether Identity Protection is enabled
intermediateRoleArn String: The ARN of the intermediate role used to assume the AWS IAM role
isOrganizationManagementAccount Boolean: Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
organizationId String: The AWS Organization ID
realtimeVisibilityEnabled Boolean: Whether real-time visibility is enabled
sensorManagementEnabled Boolean: Whether 1-click sensor deployment is enabled
targetOuses List<String>: The list of AWS Organizational Units (OUs) targeted for this account