Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Lacework Provider
  3. API Docs
  4. IntegrationAwsOrgAgentlessScanning
lacework 2.0.6 published on Monday, Apr 14, 2025 by lacework
lacework/terraform-provider-lacework

lacework.IntegrationAwsOrgAgentlessScanning

Explore with Pulumi AI

lacework logo
lacework 2.0.6 published on Monday, Apr 14, 2025 by lacework
lacework/terraform-provider-lacework

    Use this resource to configure an AWS Organizations Agentless Scanning integration.

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as lacework from "@pulumi/lacework";

const accountAbc = new lacework.IntegrationAwsOrgAgentlessScanning("accountAbc", {
    scanFrequency: 24,
    queryText: _var.query_text,
    scanContainers: true,
    scanHostVulnerabilities: true,
    accountId: "0123456789",
    bucketArn: "arn:aws:s3:::bucket-arn",
    scanningAccount: "0123456789",
    managementAccount: "0123456789",
    monitoredAccounts: ["r-1234"],
    credentials: {
        roleArn: "arn:aws:iam::0123456789:role/iam-123",
        externalId: "0123456789",
    },
});

    import pulumi
import pulumi_lacework as lacework

account_abc = lacework.IntegrationAwsOrgAgentlessScanning("accountAbc",
    scan_frequency=24,
    query_text=var["query_text"],
    scan_containers=True,
    scan_host_vulnerabilities=True,
    account_id="0123456789",
    bucket_arn="arn:aws:s3:::bucket-arn",
    scanning_account="0123456789",
    management_account="0123456789",
    monitored_accounts=["r-1234"],
    credentials={
        "role_arn": "arn:aws:iam::0123456789:role/iam-123",
        "external_id": "0123456789",
    })

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/lacework/v2/lacework"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := lacework.NewIntegrationAwsOrgAgentlessScanning(ctx, "accountAbc", &lacework.IntegrationAwsOrgAgentlessScanningArgs{
			ScanFrequency:           pulumi.Float64(24),
			QueryText:               pulumi.Any(_var.Query_text),
			ScanContainers:          pulumi.Bool(true),
			ScanHostVulnerabilities: pulumi.Bool(true),
			AccountId:               pulumi.String("0123456789"),
			BucketArn:               pulumi.String("arn:aws:s3:::bucket-arn"),
			ScanningAccount:         pulumi.String("0123456789"),
			ManagementAccount:       pulumi.String("0123456789"),
			MonitoredAccounts: pulumi.StringArray{
				pulumi.String("r-1234"),
			},
			Credentials: &lacework.IntegrationAwsOrgAgentlessScanningCredentialsArgs{
				RoleArn:    pulumi.String("arn:aws:iam::0123456789:role/iam-123"),
				ExternalId: pulumi.String("0123456789"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Lacework = Pulumi.Lacework;

return await Deployment.RunAsync(() => 
{
    var accountAbc = new Lacework.IntegrationAwsOrgAgentlessScanning("accountAbc", new()
    {
        ScanFrequency = 24,
        QueryText = @var.Query_text,
        ScanContainers = true,
        ScanHostVulnerabilities = true,
        AccountId = "0123456789",
        BucketArn = "arn:aws:s3:::bucket-arn",
        ScanningAccount = "0123456789",
        ManagementAccount = "0123456789",
        MonitoredAccounts = new[]
        {
            "r-1234",
        },
        Credentials = new Lacework.Inputs.IntegrationAwsOrgAgentlessScanningCredentialsArgs
        {
            RoleArn = "arn:aws:iam::0123456789:role/iam-123",
            ExternalId = "0123456789",
        },
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.lacework.IntegrationAwsOrgAgentlessScanning;
import com.pulumi.lacework.IntegrationAwsOrgAgentlessScanningArgs;
import com.pulumi.lacework.inputs.IntegrationAwsOrgAgentlessScanningCredentialsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var accountAbc = new IntegrationAwsOrgAgentlessScanning("accountAbc", IntegrationAwsOrgAgentlessScanningArgs.builder()
            .scanFrequency(24)
            .queryText(var_.query_text())
            .scanContainers(true)
            .scanHostVulnerabilities(true)
            .accountId("0123456789")
            .bucketArn("arn:aws:s3:::bucket-arn")
            .scanningAccount("0123456789")
            .managementAccount("0123456789")
            .monitoredAccounts("r-1234")
            .credentials(IntegrationAwsOrgAgentlessScanningCredentialsArgs.builder()
                .roleArn("arn:aws:iam::0123456789:role/iam-123")
                .externalId("0123456789")
                .build())
            .build());

    }
}

    resources:
  accountAbc:
    type: lacework:IntegrationAwsOrgAgentlessScanning
    properties:
      scanFrequency: 24
      queryText: ${var.query_text}
      scanContainers: true
      scanHostVulnerabilities: true
      accountId: '0123456789'
      bucketArn: arn:aws:s3:::bucket-arn
      scanningAccount: '0123456789'
      managementAccount: '0123456789'
      monitoredAccounts:
        - r-1234
      credentials:
        roleArn: arn:aws:iam::0123456789:role/iam-123
        externalId: '0123456789'

    Create IntegrationAwsOrgAgentlessScanning Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new IntegrationAwsOrgAgentlessScanning(name: string, args: IntegrationAwsOrgAgentlessScanningArgs, opts?: CustomResourceOptions);
    @overload
def IntegrationAwsOrgAgentlessScanning(resource_name: str,
                                       args: IntegrationAwsOrgAgentlessScanningArgs,
                                       opts: Optional[ResourceOptions] = None)

@overload
def IntegrationAwsOrgAgentlessScanning(resource_name: str,
                                       opts: Optional[ResourceOptions] = None,
                                       monitored_accounts: Optional[Sequence[str]] = None,
                                       scanning_account: Optional[str] = None,
                                       scan_frequency: Optional[float] = None,
                                       integration_aws_org_agentless_scanning_id: Optional[str] = None,
                                       retries: Optional[float] = None,
                                       management_account: Optional[str] = None,
                                       enabled: Optional[bool] = None,
                                       name: Optional[str] = None,
                                       org_account_mappings: Optional[Sequence[IntegrationAwsOrgAgentlessScanningOrgAccountMappingArgs]] = None,
                                       query_text: Optional[str] = None,
                                       account_id: Optional[str] = None,
                                       scan_containers: Optional[bool] = None,
                                       credentials: Optional[IntegrationAwsOrgAgentlessScanningCredentialsArgs] = None,
                                       scan_host_vulnerabilities: Optional[bool] = None,
                                       scan_multi_volume: Optional[bool] = None,
                                       scan_stopped_instances: Optional[bool] = None,
                                       bucket_arn: Optional[str] = None)
    func NewIntegrationAwsOrgAgentlessScanning(ctx *Context, name string, args IntegrationAwsOrgAgentlessScanningArgs, opts ...ResourceOption) (*IntegrationAwsOrgAgentlessScanning, error)
    public IntegrationAwsOrgAgentlessScanning(string name, IntegrationAwsOrgAgentlessScanningArgs args, CustomResourceOptions? opts = null)
    public IntegrationAwsOrgAgentlessScanning(String name, IntegrationAwsOrgAgentlessScanningArgs args)
public IntegrationAwsOrgAgentlessScanning(String name, IntegrationAwsOrgAgentlessScanningArgs args, CustomResourceOptions options)

    type: lacework:IntegrationAwsOrgAgentlessScanning
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args IntegrationAwsOrgAgentlessScanningArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args IntegrationAwsOrgAgentlessScanningArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args IntegrationAwsOrgAgentlessScanningArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args IntegrationAwsOrgAgentlessScanningArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args IntegrationAwsOrgAgentlessScanningArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var integrationAwsOrgAgentlessScanningResource = new Lacework.IntegrationAwsOrgAgentlessScanning("integrationAwsOrgAgentlessScanningResource", new()
{
    MonitoredAccounts = new[]
    {
        "string",
    },
    ScanningAccount = "string",
    ScanFrequency = 0,
    IntegrationAwsOrgAgentlessScanningId = "string",
    Retries = 0,
    ManagementAccount = "string",
    Enabled = false,
    Name = "string",
    OrgAccountMappings = new[]
    {
        new Lacework.Inputs.IntegrationAwsOrgAgentlessScanningOrgAccountMappingArgs
        {
            DefaultLaceworkAccount = "string",
            Mappings = new[]
            {
                new Lacework.Inputs.IntegrationAwsOrgAgentlessScanningOrgAccountMappingMappingArgs
                {
                    AwsAccounts = new[]
                    {
                        "string",
                    },
                    LaceworkAccount = "string",
                },
            },
        },
    },
    QueryText = "string",
    AccountId = "string",
    ScanContainers = false,
    Credentials = new Lacework.Inputs.IntegrationAwsOrgAgentlessScanningCredentialsArgs
    {
        ExternalId = "string",
        RoleArn = "string",
    },
    ScanHostVulnerabilities = false,
    ScanMultiVolume = false,
    ScanStoppedInstances = false,
    BucketArn = "string",
});

    example, err := lacework.NewIntegrationAwsOrgAgentlessScanning(ctx, "integrationAwsOrgAgentlessScanningResource", &lacework.IntegrationAwsOrgAgentlessScanningArgs{
	MonitoredAccounts: pulumi.StringArray{
		pulumi.String("string"),
	},
	ScanningAccount:                      pulumi.String("string"),
	ScanFrequency:                        pulumi.Float64(0),
	IntegrationAwsOrgAgentlessScanningId: pulumi.String("string"),
	Retries:                              pulumi.Float64(0),
	ManagementAccount:                    pulumi.String("string"),
	Enabled:                              pulumi.Bool(false),
	Name:                                 pulumi.String("string"),
	OrgAccountMappings: lacework.IntegrationAwsOrgAgentlessScanningOrgAccountMappingArray{
		&lacework.IntegrationAwsOrgAgentlessScanningOrgAccountMappingArgs{
			DefaultLaceworkAccount: pulumi.String("string"),
			Mappings: lacework.IntegrationAwsOrgAgentlessScanningOrgAccountMappingMappingArray{
				&lacework.IntegrationAwsOrgAgentlessScanningOrgAccountMappingMappingArgs{
					AwsAccounts: pulumi.StringArray{
						pulumi.String("string"),
					},
					LaceworkAccount: pulumi.String("string"),
				},
			},
		},
	},
	QueryText:      pulumi.String("string"),
	AccountId:      pulumi.String("string"),
	ScanContainers: pulumi.Bool(false),
	Credentials: &lacework.IntegrationAwsOrgAgentlessScanningCredentialsArgs{
		ExternalId: pulumi.String("string"),
		RoleArn:    pulumi.String("string"),
	},
	ScanHostVulnerabilities: pulumi.Bool(false),
	ScanMultiVolume:         pulumi.Bool(false),
	ScanStoppedInstances:    pulumi.Bool(false),
	BucketArn:               pulumi.String("string"),
})

    var integrationAwsOrgAgentlessScanningResource = new IntegrationAwsOrgAgentlessScanning("integrationAwsOrgAgentlessScanningResource", IntegrationAwsOrgAgentlessScanningArgs.builder()
    .monitoredAccounts("string")
    .scanningAccount("string")
    .scanFrequency(0)
    .integrationAwsOrgAgentlessScanningId("string")
    .retries(0)
    .managementAccount("string")
    .enabled(false)
    .name("string")
    .orgAccountMappings(IntegrationAwsOrgAgentlessScanningOrgAccountMappingArgs.builder()
        .defaultLaceworkAccount("string")
        .mappings(IntegrationAwsOrgAgentlessScanningOrgAccountMappingMappingArgs.builder()
            .awsAccounts("string")
            .laceworkAccount("string")
            .build())
        .build())
    .queryText("string")
    .accountId("string")
    .scanContainers(false)
    .credentials(IntegrationAwsOrgAgentlessScanningCredentialsArgs.builder()
        .externalId("string")
        .roleArn("string")
        .build())
    .scanHostVulnerabilities(false)
    .scanMultiVolume(false)
    .scanStoppedInstances(false)
    .bucketArn("string")
    .build());

    integration_aws_org_agentless_scanning_resource = lacework.IntegrationAwsOrgAgentlessScanning("integrationAwsOrgAgentlessScanningResource",
    monitored_accounts=["string"],
    scanning_account="string",
    scan_frequency=0,
    integration_aws_org_agentless_scanning_id="string",
    retries=0,
    management_account="string",
    enabled=False,
    name="string",
    org_account_mappings=[{
        "default_lacework_account": "string",
        "mappings": [{
            "aws_accounts": ["string"],
            "lacework_account": "string",
        }],
    }],
    query_text="string",
    account_id="string",
    scan_containers=False,
    credentials={
        "external_id": "string",
        "role_arn": "string",
    },
    scan_host_vulnerabilities=False,
    scan_multi_volume=False,
    scan_stopped_instances=False,
    bucket_arn="string")

    const integrationAwsOrgAgentlessScanningResource = new lacework.IntegrationAwsOrgAgentlessScanning("integrationAwsOrgAgentlessScanningResource", {
    monitoredAccounts: ["string"],
    scanningAccount: "string",
    scanFrequency: 0,
    integrationAwsOrgAgentlessScanningId: "string",
    retries: 0,
    managementAccount: "string",
    enabled: false,
    name: "string",
    orgAccountMappings: [{
        defaultLaceworkAccount: "string",
        mappings: [{
            awsAccounts: ["string"],
            laceworkAccount: "string",
        }],
    }],
    queryText: "string",
    accountId: "string",
    scanContainers: false,
    credentials: {
        externalId: "string",
        roleArn: "string",
    },
    scanHostVulnerabilities: false,
    scanMultiVolume: false,
    scanStoppedInstances: false,
    bucketArn: "string",
});

    type: lacework:IntegrationAwsOrgAgentlessScanning
properties:
    accountId: string
    bucketArn: string
    credentials:
        externalId: string
        roleArn: string
    enabled: false
    integrationAwsOrgAgentlessScanningId: string
    managementAccount: string
    monitoredAccounts:
        - string
    name: string
    orgAccountMappings:
        - defaultLaceworkAccount: string
          mappings:
            - awsAccounts:
                - string
              laceworkAccount: string
    queryText: string
    retries: 0
    scanContainers: false
    scanFrequency: 0
    scanHostVulnerabilities: false
    scanMultiVolume: false
    scanStoppedInstances: false
    scanningAccount: string

    IntegrationAwsOrgAgentlessScanning Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The IntegrationAwsOrgAgentlessScanning resource accepts the following input properties:

    MonitoredAccounts List<string>
    The list of monitroed AWS account IDs or OUs.
    ScanFrequency double
    How often, in hours, the scan will run.
    ScanningAccount string
    The scanning AWS account ID.
    AccountId string
    The AWS account ID.
    BucketArn string
    The bucket ARN.
    Credentials IntegrationAwsOrgAgentlessScanningCredentials
    The credentials needed by the integration. See Credentials below for details.
    Enabled bool
    The state of the external integration. Defaults to true.
    IntegrationAwsOrgAgentlessScanningId string
    ManagementAccount string
    The management AWS account ID.
    Name string
    The AWS Organizations Agentless Scanning integration name.
    OrgAccountMappings List<IntegrationAwsOrgAgentlessScanningOrgAccountMapping>
    Mapping of AWS accounts to Lacework accounts within a Lacework organization.
    QueryText string
    The LQL query.
    Retries double
    The number of attempts to create the external integration. Defaults to 5.
    ScanContainers bool
    Whether to includes scanning for containers.
    ScanHostVulnerabilities bool
    Whether to includes scanning for host vulnerabilities.
    ScanMultiVolume bool
    Whether to scan secondary volumes (true) or only root volumes (false). Defaults to false
    ScanStoppedInstances bool
    Whether to scan stopped instances (true). Defaults to true
    MonitoredAccounts []string
    The list of monitroed AWS account IDs or OUs.
    ScanFrequency float64
    How often, in hours, the scan will run.
    ScanningAccount string
    The scanning AWS account ID.
    AccountId string
    The AWS account ID.
    BucketArn string
    The bucket ARN.
    Credentials IntegrationAwsOrgAgentlessScanningCredentialsArgs
    The credentials needed by the integration. See Credentials below for details.
    Enabled bool
    The state of the external integration. Defaults to true.
    IntegrationAwsOrgAgentlessScanningId string
    ManagementAccount string
    The management AWS account ID.
    Name string
    The AWS Organizations Agentless Scanning integration name.
    OrgAccountMappings []IntegrationAwsOrgAgentlessScanningOrgAccountMappingArgs
    Mapping of AWS accounts to Lacework accounts within a Lacework organization.
    QueryText string
    The LQL query.
    Retries float64
    The number of attempts to create the external integration. Defaults to 5.
    ScanContainers bool
    Whether to includes scanning for containers.
    ScanHostVulnerabilities bool
    Whether to includes scanning for host vulnerabilities.
    ScanMultiVolume bool
    Whether to scan secondary volumes (true) or only root volumes (false). Defaults to false
    ScanStoppedInstances bool
    Whether to scan stopped instances (true). Defaults to true
    monitoredAccounts List<String>
    The list of monitroed AWS account IDs or OUs.
    scanFrequency Double
    How often, in hours, the scan will run.
    scanningAccount String
    The scanning AWS account ID.
    accountId String
    The AWS account ID.
    bucketArn String
    The bucket ARN.
    credentials IntegrationAwsOrgAgentlessScanningCredentials
    The credentials needed by the integration. See Credentials below for details.
    enabled Boolean
    The state of the external integration. Defaults to true.
    integrationAwsOrgAgentlessScanningId String
    managementAccount String
    The management AWS account ID.
    name String
    The AWS Organizations Agentless Scanning integration name.
    orgAccountMappings List<IntegrationAwsOrgAgentlessScanningOrgAccountMapping>
    Mapping of AWS accounts to Lacework accounts within a Lacework organization.
    queryText String
    The LQL query.
    retries Double
    The number of attempts to create the external integration. Defaults to 5.
    scanContainers Boolean
    Whether to includes scanning for containers.
    scanHostVulnerabilities Boolean
    Whether to includes scanning for host vulnerabilities.
    scanMultiVolume Boolean
    Whether to scan secondary volumes (true) or only root volumes (false). Defaults to false
    scanStoppedInstances Boolean
    Whether to scan stopped instances (true). Defaults to true
    monitoredAccounts string[]
    The list of monitroed AWS account IDs or OUs.
    scanFrequency number
    How often, in hours, the scan will run.
    scanningAccount string
    The scanning AWS account ID.
    accountId string
    The AWS account ID.
    bucketArn string
    The bucket ARN.
    credentials IntegrationAwsOrgAgentlessScanningCredentials
    The credentials needed by the integration. See Credentials below for details.
    enabled boolean
    The state of the external integration. Defaults to true.
    integrationAwsOrgAgentlessScanningId string
    managementAccount string
    The management AWS account ID.
    name string
    The AWS Organizations Agentless Scanning integration name.
    orgAccountMappings IntegrationAwsOrgAgentlessScanningOrgAccountMapping[]
    Mapping of AWS accounts to Lacework accounts within a Lacework organization.
    queryText string
    The LQL query.
    retries number
    The number of attempts to create the external integration. Defaults to 5.
    scanContainers boolean
    Whether to includes scanning for containers.
    scanHostVulnerabilities boolean
    Whether to includes scanning for host vulnerabilities.
    scanMultiVolume boolean
    Whether to scan secondary volumes (true) or only root volumes (false). Defaults to false
    scanStoppedInstances boolean
    Whether to scan stopped instances (true). Defaults to true
    monitored_accounts Sequence[str]
    The list of monitroed AWS account IDs or OUs.
    scan_frequency float
    How often, in hours, the scan will run.
    scanning_account str
    The scanning AWS account ID.
    account_id str
    The AWS account ID.
    bucket_arn str
    The bucket ARN.
    credentials IntegrationAwsOrgAgentlessScanningCredentialsArgs
    The credentials needed by the integration. See Credentials below for details.
    enabled bool
    The state of the external integration. Defaults to true.
    integration_aws_org_agentless_scanning_id str
    management_account str
    The management AWS account ID.
    name str
    The AWS Organizations Agentless Scanning integration name.
    org_account_mappings Sequence[IntegrationAwsOrgAgentlessScanningOrgAccountMappingArgs]
    Mapping of AWS accounts to Lacework accounts within a Lacework organization.
    query_text str
    The LQL query.
    retries float
    The number of attempts to create the external integration. Defaults to 5.
    scan_containers bool
    Whether to includes scanning for containers.
    scan_host_vulnerabilities bool
    Whether to includes scanning for host vulnerabilities.
    scan_multi_volume bool
    Whether to scan secondary volumes (true) or only root volumes (false). Defaults to false
    scan_stopped_instances bool
    Whether to scan stopped instances (true). Defaults to true
    monitoredAccounts List<String>
    The list of monitroed AWS account IDs or OUs.
    scanFrequency Number
    How often, in hours, the scan will run.
    scanningAccount String
    The scanning AWS account ID.
    accountId String
    The AWS account ID.
    bucketArn String
    The bucket ARN.
    credentials Property Map
    The credentials needed by the integration. See Credentials below for details.
    enabled Boolean
    The state of the external integration. Defaults to true.
    integrationAwsOrgAgentlessScanningId String
    managementAccount String
    The management AWS account ID.
    name String
    The AWS Organizations Agentless Scanning integration name.
    orgAccountMappings List<Property Map>
    Mapping of AWS accounts to Lacework accounts within a Lacework organization.
    queryText String
    The LQL query.
    retries Number
    The number of attempts to create the external integration. Defaults to 5.
    scanContainers Boolean
    Whether to includes scanning for containers.
    scanHostVulnerabilities Boolean
    Whether to includes scanning for host vulnerabilities.
    scanMultiVolume Boolean
    Whether to scan secondary volumes (true) or only root volumes (false). Defaults to false
    scanStoppedInstances Boolean
    Whether to scan stopped instances (true). Defaults to true

    Outputs

    All input properties are implicitly available as output properties. Additionally, the IntegrationAwsOrgAgentlessScanning resource produces the following output properties:

    CreatedOrUpdatedBy string
    CreatedOrUpdatedTime string
    Id string
    The provider-assigned unique ID for this managed resource.
    IntgGuid string
    OrgLevel bool
    ServerToken string
    TypeName string
    Uri string
    CreatedOrUpdatedBy string
    CreatedOrUpdatedTime string
    Id string
    The provider-assigned unique ID for this managed resource.
    IntgGuid string
    OrgLevel bool
    ServerToken string
    TypeName string
    Uri string
    createdOrUpdatedBy String
    createdOrUpdatedTime String
    id String
    The provider-assigned unique ID for this managed resource.
    intgGuid String
    orgLevel Boolean
    serverToken String
    typeName String
    uri String
    createdOrUpdatedBy string
    createdOrUpdatedTime string
    id string
    The provider-assigned unique ID for this managed resource.
    intgGuid string
    orgLevel boolean
    serverToken string
    typeName string
    uri string
    created_or_updated_by str
    created_or_updated_time str
    id str
    The provider-assigned unique ID for this managed resource.
    intg_guid str
    org_level bool
    server_token str
    type_name str
    uri str
    createdOrUpdatedBy String
    createdOrUpdatedTime String
    id String
    The provider-assigned unique ID for this managed resource.
    intgGuid String
    orgLevel Boolean
    serverToken String
    typeName String
    uri String

    Look up Existing IntegrationAwsOrgAgentlessScanning Resource

    Get an existing IntegrationAwsOrgAgentlessScanning resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: IntegrationAwsOrgAgentlessScanningState, opts?: CustomResourceOptions): IntegrationAwsOrgAgentlessScanning
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        bucket_arn: Optional[str] = None,
        created_or_updated_by: Optional[str] = None,
        created_or_updated_time: Optional[str] = None,
        credentials: Optional[IntegrationAwsOrgAgentlessScanningCredentialsArgs] = None,
        enabled: Optional[bool] = None,
        integration_aws_org_agentless_scanning_id: Optional[str] = None,
        intg_guid: Optional[str] = None,
        management_account: Optional[str] = None,
        monitored_accounts: Optional[Sequence[str]] = None,
        name: Optional[str] = None,
        org_account_mappings: Optional[Sequence[IntegrationAwsOrgAgentlessScanningOrgAccountMappingArgs]] = None,
        org_level: Optional[bool] = None,
        query_text: Optional[str] = None,
        retries: Optional[float] = None,
        scan_containers: Optional[bool] = None,
        scan_frequency: Optional[float] = None,
        scan_host_vulnerabilities: Optional[bool] = None,
        scan_multi_volume: Optional[bool] = None,
        scan_stopped_instances: Optional[bool] = None,
        scanning_account: Optional[str] = None,
        server_token: Optional[str] = None,
        type_name: Optional[str] = None,
        uri: Optional[str] = None) -> IntegrationAwsOrgAgentlessScanning
    func GetIntegrationAwsOrgAgentlessScanning(ctx *Context, name string, id IDInput, state *IntegrationAwsOrgAgentlessScanningState, opts ...ResourceOption) (*IntegrationAwsOrgAgentlessScanning, error)
    public static IntegrationAwsOrgAgentlessScanning Get(string name, Input<string> id, IntegrationAwsOrgAgentlessScanningState? state, CustomResourceOptions? opts = null)
    public static IntegrationAwsOrgAgentlessScanning get(String name, Output<String> id, IntegrationAwsOrgAgentlessScanningState state, CustomResourceOptions options)
    resources:  _:    type: lacework:IntegrationAwsOrgAgentlessScanning    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    The AWS account ID.
    BucketArn string
    The bucket ARN.
    CreatedOrUpdatedBy string
    CreatedOrUpdatedTime string
    Credentials IntegrationAwsOrgAgentlessScanningCredentials
    The credentials needed by the integration. See Credentials below for details.
    Enabled bool
    The state of the external integration. Defaults to true.
    IntegrationAwsOrgAgentlessScanningId string
    IntgGuid string
    ManagementAccount string
    The management AWS account ID.
    MonitoredAccounts List<string>
    The list of monitroed AWS account IDs or OUs.
    Name string
    The AWS Organizations Agentless Scanning integration name.
    OrgAccountMappings List<IntegrationAwsOrgAgentlessScanningOrgAccountMapping>
    Mapping of AWS accounts to Lacework accounts within a Lacework organization.
    OrgLevel bool
    QueryText string
    The LQL query.
    Retries double
    The number of attempts to create the external integration. Defaults to 5.
    ScanContainers bool
    Whether to includes scanning for containers.
    ScanFrequency double
    How often, in hours, the scan will run.
    ScanHostVulnerabilities bool
    Whether to includes scanning for host vulnerabilities.
    ScanMultiVolume bool
    Whether to scan secondary volumes (true) or only root volumes (false). Defaults to false
    ScanStoppedInstances bool
    Whether to scan stopped instances (true). Defaults to true
    ScanningAccount string
    The scanning AWS account ID.
    ServerToken string
    TypeName string
    Uri string
    AccountId string
    The AWS account ID.
    BucketArn string
    The bucket ARN.
    CreatedOrUpdatedBy string
    CreatedOrUpdatedTime string
    Credentials IntegrationAwsOrgAgentlessScanningCredentialsArgs
    The credentials needed by the integration. See Credentials below for details.
    Enabled bool
    The state of the external integration. Defaults to true.
    IntegrationAwsOrgAgentlessScanningId string
    IntgGuid string
    ManagementAccount string
    The management AWS account ID.
    MonitoredAccounts []string
    The list of monitroed AWS account IDs or OUs.
    Name string
    The AWS Organizations Agentless Scanning integration name.
    OrgAccountMappings []IntegrationAwsOrgAgentlessScanningOrgAccountMappingArgs
    Mapping of AWS accounts to Lacework accounts within a Lacework organization.
    OrgLevel bool
    QueryText string
    The LQL query.
    Retries float64
    The number of attempts to create the external integration. Defaults to 5.
    ScanContainers bool
    Whether to includes scanning for containers.
    ScanFrequency float64
    How often, in hours, the scan will run.
    ScanHostVulnerabilities bool
    Whether to includes scanning for host vulnerabilities.
    ScanMultiVolume bool
    Whether to scan secondary volumes (true) or only root volumes (false). Defaults to false
    ScanStoppedInstances bool
    Whether to scan stopped instances (true). Defaults to true
    ScanningAccount string
    The scanning AWS account ID.
    ServerToken string
    TypeName string
    Uri string
    accountId String
    The AWS account ID.
    bucketArn String
    The bucket ARN.
    createdOrUpdatedBy String
    createdOrUpdatedTime String
    credentials IntegrationAwsOrgAgentlessScanningCredentials
    The credentials needed by the integration. See Credentials below for details.
    enabled Boolean
    The state of the external integration. Defaults to true.
    integrationAwsOrgAgentlessScanningId String
    intgGuid String
    managementAccount String
    The management AWS account ID.
    monitoredAccounts List<String>
    The list of monitroed AWS account IDs or OUs.
    name String
    The AWS Organizations Agentless Scanning integration name.
    orgAccountMappings List<IntegrationAwsOrgAgentlessScanningOrgAccountMapping>
    Mapping of AWS accounts to Lacework accounts within a Lacework organization.
    orgLevel Boolean
    queryText String
    The LQL query.
    retries Double
    The number of attempts to create the external integration. Defaults to 5.
    scanContainers Boolean
    Whether to includes scanning for containers.
    scanFrequency Double
    How often, in hours, the scan will run.
    scanHostVulnerabilities Boolean
    Whether to includes scanning for host vulnerabilities.
    scanMultiVolume Boolean
    Whether to scan secondary volumes (true) or only root volumes (false). Defaults to false
    scanStoppedInstances Boolean
    Whether to scan stopped instances (true). Defaults to true
    scanningAccount String
    The scanning AWS account ID.
    serverToken String
    typeName String
    uri String
    accountId string
    The AWS account ID.
    bucketArn string
    The bucket ARN.
    createdOrUpdatedBy string
    createdOrUpdatedTime string
    credentials IntegrationAwsOrgAgentlessScanningCredentials
    The credentials needed by the integration. See Credentials below for details.
    enabled boolean
    The state of the external integration. Defaults to true.
    integrationAwsOrgAgentlessScanningId string
    intgGuid string
    managementAccount string
    The management AWS account ID.
    monitoredAccounts string[]
    The list of monitroed AWS account IDs or OUs.
    name string
    The AWS Organizations Agentless Scanning integration name.
    orgAccountMappings IntegrationAwsOrgAgentlessScanningOrgAccountMapping[]
    Mapping of AWS accounts to Lacework accounts within a Lacework organization.
    orgLevel boolean
    queryText string
    The LQL query.
    retries number
    The number of attempts to create the external integration. Defaults to 5.
    scanContainers boolean
    Whether to includes scanning for containers.
    scanFrequency number
    How often, in hours, the scan will run.
    scanHostVulnerabilities boolean
    Whether to includes scanning for host vulnerabilities.
    scanMultiVolume boolean
    Whether to scan secondary volumes (true) or only root volumes (false). Defaults to false
    scanStoppedInstances boolean
    Whether to scan stopped instances (true). Defaults to true
    scanningAccount string
    The scanning AWS account ID.
    serverToken string
    typeName string
    uri string
    account_id str
    The AWS account ID.
    bucket_arn str
    The bucket ARN.
    created_or_updated_by str
    created_or_updated_time str
    credentials IntegrationAwsOrgAgentlessScanningCredentialsArgs
    The credentials needed by the integration. See Credentials below for details.
    enabled bool
    The state of the external integration. Defaults to true.
    integration_aws_org_agentless_scanning_id str
    intg_guid str
    management_account str
    The management AWS account ID.
    monitored_accounts Sequence[str]
    The list of monitroed AWS account IDs or OUs.
    name str
    The AWS Organizations Agentless Scanning integration name.
    org_account_mappings Sequence[IntegrationAwsOrgAgentlessScanningOrgAccountMappingArgs]
    Mapping of AWS accounts to Lacework accounts within a Lacework organization.
    org_level bool
    query_text str
    The LQL query.
    retries float
    The number of attempts to create the external integration. Defaults to 5.
    scan_containers bool
    Whether to includes scanning for containers.
    scan_frequency float
    How often, in hours, the scan will run.
    scan_host_vulnerabilities bool
    Whether to includes scanning for host vulnerabilities.
    scan_multi_volume bool
    Whether to scan secondary volumes (true) or only root volumes (false). Defaults to false
    scan_stopped_instances bool
    Whether to scan stopped instances (true). Defaults to true
    scanning_account str
    The scanning AWS account ID.
    server_token str
    type_name str
    uri str
    accountId String
    The AWS account ID.
    bucketArn String
    The bucket ARN.
    createdOrUpdatedBy String
    createdOrUpdatedTime String
    credentials Property Map
    The credentials needed by the integration. See Credentials below for details.
    enabled Boolean
    The state of the external integration. Defaults to true.
    integrationAwsOrgAgentlessScanningId String
    intgGuid String
    managementAccount String
    The management AWS account ID.
    monitoredAccounts List<String>
    The list of monitroed AWS account IDs or OUs.
    name String
    The AWS Organizations Agentless Scanning integration name.
    orgAccountMappings List<Property Map>
    Mapping of AWS accounts to Lacework accounts within a Lacework organization.
    orgLevel Boolean
    queryText String
    The LQL query.
    retries Number
    The number of attempts to create the external integration. Defaults to 5.
    scanContainers Boolean
    Whether to includes scanning for containers.
    scanFrequency Number
    How often, in hours, the scan will run.
    scanHostVulnerabilities Boolean
    Whether to includes scanning for host vulnerabilities.
    scanMultiVolume Boolean
    Whether to scan secondary volumes (true) or only root volumes (false). Defaults to false
    scanStoppedInstances Boolean
    Whether to scan stopped instances (true). Defaults to true
    scanningAccount String
    The scanning AWS account ID.
    serverToken String
    typeName String
    uri String

    Supporting Types

    IntegrationAwsOrgAgentlessScanningCredentials, IntegrationAwsOrgAgentlessScanningCredentialsArgs

    ExternalId string
    The external id.
    RoleArn string
    The role arn.
    ExternalId string
    The external id.
    RoleArn string
    The role arn.
    externalId String
    The external id.
    roleArn String
    The role arn.
    externalId string
    The external id.
    roleArn string
    The role arn.
    external_id str
    The external id.
    role_arn str
    The role arn.
    externalId String
    The external id.
    roleArn String
    The role arn.

    IntegrationAwsOrgAgentlessScanningOrgAccountMapping, IntegrationAwsOrgAgentlessScanningOrgAccountMappingArgs

    DefaultLaceworkAccount string
    The default Lacework account name where any non-mapped AWS account will appear
    Mappings List<IntegrationAwsOrgAgentlessScanningOrgAccountMappingMapping>
    A map of AWS accounts to Lacework account. This can be specified multiple times to map multiple Lacework accounts.
    DefaultLaceworkAccount string
    The default Lacework account name where any non-mapped AWS account will appear
    Mappings []IntegrationAwsOrgAgentlessScanningOrgAccountMappingMapping
    A map of AWS accounts to Lacework account. This can be specified multiple times to map multiple Lacework accounts.
    defaultLaceworkAccount String
    The default Lacework account name where any non-mapped AWS account will appear
    mappings List<IntegrationAwsOrgAgentlessScanningOrgAccountMappingMapping>
    A map of AWS accounts to Lacework account. This can be specified multiple times to map multiple Lacework accounts.
    defaultLaceworkAccount string
    The default Lacework account name where any non-mapped AWS account will appear
    mappings IntegrationAwsOrgAgentlessScanningOrgAccountMappingMapping[]
    A map of AWS accounts to Lacework account. This can be specified multiple times to map multiple Lacework accounts.
    default_lacework_account str
    The default Lacework account name where any non-mapped AWS account will appear
    mappings Sequence[IntegrationAwsOrgAgentlessScanningOrgAccountMappingMapping]
    A map of AWS accounts to Lacework account. This can be specified multiple times to map multiple Lacework accounts.
    defaultLaceworkAccount String
    The default Lacework account name where any non-mapped AWS account will appear
    mappings List<Property Map>
    A map of AWS accounts to Lacework account. This can be specified multiple times to map multiple Lacework accounts.

    IntegrationAwsOrgAgentlessScanningOrgAccountMappingMapping, IntegrationAwsOrgAgentlessScanningOrgAccountMappingMappingArgs

    AwsAccounts List<string>
    The list of AWS account IDs to map.
    LaceworkAccount string
    The Lacework account name where the CloudTrail activity from the selected AWS accounts will appear.
    AwsAccounts []string
    The list of AWS account IDs to map.
    LaceworkAccount string
    The Lacework account name where the CloudTrail activity from the selected AWS accounts will appear.
    awsAccounts List<String>
    The list of AWS account IDs to map.
    laceworkAccount String
    The Lacework account name where the CloudTrail activity from the selected AWS accounts will appear.
    awsAccounts string[]
    The list of AWS account IDs to map.
    laceworkAccount string
    The Lacework account name where the CloudTrail activity from the selected AWS accounts will appear.
    aws_accounts Sequence[str]
    The list of AWS account IDs to map.
    lacework_account str
    The Lacework account name where the CloudTrail activity from the selected AWS accounts will appear.
    awsAccounts List<String>
    The list of AWS account IDs to map.
    laceworkAccount String
    The Lacework account name where the CloudTrail activity from the selected AWS accounts will appear.

    Import

    A Lacework AWS Organizations Agentless Scanning integration can be imported using a INT_GUID, e.g.

    $ pulumi import lacework:index/integrationAwsOrgAgentlessScanning:IntegrationAwsOrgAgentlessScanning account_abc EXAMPLE_1234BAE1E42182964D23973F44CFEA3C4AB63B99E9A1EC5

    -> Note: To retrieve the INT_GUID from existing integrations in your account, use the Lacework CLI command lacework cloud-accounts list. To install this tool follow this documentation.

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    lacework lacework/terraform-provider-lacework
    License
    Notes
    This Pulumi package is based on the lacework Terraform Provider.
    lacework logo
    lacework 2.0.6 published on Monday, Apr 14, 2025 by lacework
    lacework/terraform-provider-lacework