topic Prisma cloud Onboarding support AWS Org level || #prismacloud #cspm #cwpp #onboarding #aws in Prisma Cloud Discussions

Prisma cloud Onboarding support AWS Org level || #prismacloud #cspm #cwpp #onboarding #aws

csekhar — Thu, 06 Jun 2024 07:30:24 GMT

Hi Folks,

I am trying to onboard AWS org to Prisma cloud..

When uploading CFT template in the AWS CloudFormation portal under StackSets, I am getting an error (attached a file).

I have executed the above steps within mgmt. account as a root user!

Do I need to upload the CFT template for org-level under StackSets or Stacks?

what could be the reason for that error?

what are the required permissions for uploading and creating the stack in AWS Console?

Will the stack gets deployed in all the member account? If yes, how will those policies/ data report back to Prisma cloud?

Thanks in advance! cheers 🙂

Re: Prisma cloud Onboarding support AWS Org level || #prismacloud #cspm #cwpp #onboarding #aws

MLabadie — Tue, 11 Jun 2024 18:30:23 GMT

Onboarding as an org would be done as a stack.

Re: Prisma cloud Onboarding support AWS Org level || #prismacloud #cspm #cwpp #onboarding #aws

PBurega — Fri, 28 Jun 2024 14:52:38 GMT

Have you managed to onboard your AWS Org successfully?

Once the org is onboarded, all member accounts already onboarded in Prisma Cloud will be moved under the org. Any other accounts in the Org will automatically be onboarded.

Prisma Cloud will have the data about all onboarded accounts, which would include the AWS Org and all the Org sub-accounts, as well as the OU hierarchy which can be used in custom RQLs to write policies that depend on accounts in a specific parent OU.

For policies to generate alerts, you will need to add the appropriate cloud accounts in the ORG to the respective appropriate cloud account group and add the cloud account group to an alert rule.