Automate Newly created cloud account in Prisma cloud

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Automate Newly created cloud account in Prisma cloud

L0 Member


Can anyone direct me to a document or script that can be used to automate account onboarding whenever a new AWS account is created in the organisation. I have this on github but the seems to be the entire process of onboarding Prisma cloud;


L1 Bithead

Currently, there is no automated onboarding mechanism for AWS, which mimics our GCP capability.


This is in the works, but a timeframe has not been defined at this moment.

Respectfully Submitted,
Francisco Breijo

L2 Linker



Thank you for your question. Its been a while since you have asked but I wanted to make sure that I can answer this question for you.
Prisma Cloud now automatically updates your AWS Org by adding on the Cloud Accounts (child account) once the account has been added or created under your AWS Org. 


During the process of an AWS Org onboarding, on the Select Member Accounts section. Make sure to select all. This will include all member accounts under your organization to be added to Prisma Cloud every time you update your ORG with child accounts. This choice can also be changed later as well.


Please note that when you remove an account from your Organization, that will also update on Prisma Cloud as well.

Hope this helps.



L3 Networker

It's documented here.

I like BCastillo's advice too.

Don't forget to deploy an AWS Managed StackSet to your AWS master account.

That StackSet will be an AWS CloudFormationTemplate containing the twistlock IAM user and policy.

The StackSet should be configured to deploy with the AWSStackSetAdministrativeRole.

Tommy Hunt AWS-CSA, Java-CEA, PMP, SAFe Program Consultant
  • 3 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!