topic Re: Onboarding AWS Organization - Terraform Style in Prisma Cloud Discussions

Onboarding AWS Organization - Terraform Style

SBASSAID — Thu, 08 Jun 2023 12:59:43 GMT

Hello guys,

I'm looking for a way to onboard an AWS Organization using Terraform and bypass the need of using the old CloudFormation template.

So when deploying the CFT (for basic features) we get 4 custom policies + SecurityAudit attached to a "PrismaRole". I've seen that there was also a need to enable trust access at AWS Organization for CloudFormation.

I've wanted to know if there's already someone who's automated Orga onboarding to Prisma by using Terraform, and if so, was kind of "Trust Access" is their to enable? (I've deployed the same resources created through CloudFormation by using Terraform, but I'm still unable to click on "Next" when onboarding the Org inside Prisma)

Thank you in advance 🙂

Syphax,

Re: Onboarding AWS Organization - Terraform Style

BCastillo — Fri, 09 Jun 2023 18:29:28 GMT

Hello ,

There is a Terraform Registry which is released under an as-is, best effort, support policy.

https://registry.terraform.io/providers/PaloAltoNetworks/prismacloud/latest/docs/resources/org_cloud_account_v2#example-usage-1-aws-cloud-organization-onboarding:~:text=Prisma%20Cloud%20platform.-,Example%20Usage%201%3A%20AWS%20cloud%20Organization%20onboarding,-Step%201%3A%20Fetch

The link above will provide you more information on how to get started. Please follow step 4 which will provide you information on onboarding the AWS org onto Prisma Cloud.

* Please note that these scripts should be seen as community supported and Palo Alto Networks will contribute our expertise as and when possible.