Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Prismacloud Provider
  3. API Docs
  4. OrgCloudAccount
prismacloud 1.7.0 published on Monday, Apr 14, 2025 by paloaltonetworks
paloaltonetworks/terraform-provider-prismacloud

prismacloud.OrgCloudAccount

Explore with Pulumi AI

prismacloud logo
prismacloud 1.7.0 published on Monday, Apr 14, 2025 by paloaltonetworks
paloaltonetworks/terraform-provider-prismacloud

    Manage a org cloud account on the Prisma Cloud platform.

    Create OrgCloudAccount Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new OrgCloudAccount(name: string, args?: OrgCloudAccountArgs, opts?: CustomResourceOptions);
    @overload
def OrgCloudAccount(resource_name: str,
                    args: Optional[OrgCloudAccountArgs] = None,
                    opts: Optional[ResourceOptions] = None)

@overload
def OrgCloudAccount(resource_name: str,
                    opts: Optional[ResourceOptions] = None,
                    aws: Optional[OrgCloudAccountAwsArgs] = None,
                    azure: Optional[OrgCloudAccountAzureArgs] = None,
                    disable_on_destroy: Optional[bool] = None,
                    gcp: Optional[OrgCloudAccountGcpArgs] = None,
                    oci: Optional[OrgCloudAccountOciArgs] = None,
                    org_cloud_account_id: Optional[str] = None,
                    timeouts: Optional[OrgCloudAccountTimeoutsArgs] = None)
    func NewOrgCloudAccount(ctx *Context, name string, args *OrgCloudAccountArgs, opts ...ResourceOption) (*OrgCloudAccount, error)
    public OrgCloudAccount(string name, OrgCloudAccountArgs? args = null, CustomResourceOptions? opts = null)
    public OrgCloudAccount(String name, OrgCloudAccountArgs args)
public OrgCloudAccount(String name, OrgCloudAccountArgs args, CustomResourceOptions options)

    type: prismacloud:OrgCloudAccount
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args OrgCloudAccountArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args OrgCloudAccountArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args OrgCloudAccountArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args OrgCloudAccountArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args OrgCloudAccountArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var orgCloudAccountResource = new Prismacloud.OrgCloudAccount("orgCloudAccountResource", new()
{
    Aws = new Prismacloud.Inputs.OrgCloudAccountAwsArgs
    {
        AccountId = "string",
        ExternalId = "string",
        GroupIds = new[]
        {
            "string",
        },
        MemberExternalId = "string",
        MemberRoleName = "string",
        Name = "string",
        RoleArn = "string",
        AccountType = "string",
        Enabled = false,
        HierarchySelections = new[]
        {
            new Prismacloud.Inputs.OrgCloudAccountAwsHierarchySelectionArgs
            {
                DisplayName = "string",
                NodeType = "string",
                ResourceId = "string",
                SelectionType = "string",
            },
        },
        MemberRoleStatus = false,
        ProtectionMode = "string",
    },
    Azure = new Prismacloud.Inputs.OrgCloudAccountAzureArgs
    {
        Name = "string",
        TenantId = "string",
        ClientId = "string",
        AccountId = "string",
        GroupIds = new[]
        {
            "string",
        },
        ServicePrincipalId = "string",
        Key = "string",
        MonitorFlowLogs = false,
        Enabled = false,
        ProtectionMode = "string",
        RootSyncEnabled = false,
        HierarchySelections = new[]
        {
            new Prismacloud.Inputs.OrgCloudAccountAzureHierarchySelectionArgs
            {
                DisplayName = "string",
                NodeType = "string",
                ResourceId = "string",
                SelectionType = "string",
            },
        },
        AccountType = "string",
    },
    DisableOnDestroy = false,
    Gcp = new Prismacloud.Inputs.OrgCloudAccountGcpArgs
    {
        CredentialsJson = "string",
        AccountId = "string",
        OrganizationName = "string",
        Name = "string",
        Enabled = false,
        DataflowEnabledProject = "string",
        AccountGroupCreationMode = "string",
        FlowLogStorageBucket = "string",
        GroupIds = new[]
        {
            "string",
        },
        HierarchySelections = new[]
        {
            new Prismacloud.Inputs.OrgCloudAccountGcpHierarchySelectionArgs
            {
                DisplayName = "string",
                NodeType = "string",
                ResourceId = "string",
                SelectionType = "string",
            },
        },
        CompressionEnabled = false,
        AccountType = "string",
        ProtectionMode = "string",
    },
    Oci = new Prismacloud.Inputs.OrgCloudAccountOciArgs
    {
        AccountId = "string",
        AccountType = "string",
        DefaultAccountGroupId = "string",
        Enabled = false,
        GroupName = "string",
        HomeRegion = "string",
        Name = "string",
        PolicyName = "string",
        UserName = "string",
        UserOcid = "string",
    },
    OrgCloudAccountId = "string",
    Timeouts = new Prismacloud.Inputs.OrgCloudAccountTimeoutsArgs
    {
        Create = "string",
        Delete = "string",
        Update = "string",
    },
});

    example, err := prismacloud.NewOrgCloudAccount(ctx, "orgCloudAccountResource", &prismacloud.OrgCloudAccountArgs{
	Aws: &prismacloud.OrgCloudAccountAwsArgs{
		AccountId:  pulumi.String("string"),
		ExternalId: pulumi.String("string"),
		GroupIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		MemberExternalId: pulumi.String("string"),
		MemberRoleName:   pulumi.String("string"),
		Name:             pulumi.String("string"),
		RoleArn:          pulumi.String("string"),
		AccountType:      pulumi.String("string"),
		Enabled:          pulumi.Bool(false),
		HierarchySelections: prismacloud.OrgCloudAccountAwsHierarchySelectionArray{
			&prismacloud.OrgCloudAccountAwsHierarchySelectionArgs{
				DisplayName:   pulumi.String("string"),
				NodeType:      pulumi.String("string"),
				ResourceId:    pulumi.String("string"),
				SelectionType: pulumi.String("string"),
			},
		},
		MemberRoleStatus: pulumi.Bool(false),
		ProtectionMode:   pulumi.String("string"),
	},
	Azure: &prismacloud.OrgCloudAccountAzureArgs{
		Name:      pulumi.String("string"),
		TenantId:  pulumi.String("string"),
		ClientId:  pulumi.String("string"),
		AccountId: pulumi.String("string"),
		GroupIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		ServicePrincipalId: pulumi.String("string"),
		Key:                pulumi.String("string"),
		MonitorFlowLogs:    pulumi.Bool(false),
		Enabled:            pulumi.Bool(false),
		ProtectionMode:     pulumi.String("string"),
		RootSyncEnabled:    pulumi.Bool(false),
		HierarchySelections: prismacloud.OrgCloudAccountAzureHierarchySelectionArray{
			&prismacloud.OrgCloudAccountAzureHierarchySelectionArgs{
				DisplayName:   pulumi.String("string"),
				NodeType:      pulumi.String("string"),
				ResourceId:    pulumi.String("string"),
				SelectionType: pulumi.String("string"),
			},
		},
		AccountType: pulumi.String("string"),
	},
	DisableOnDestroy: pulumi.Bool(false),
	Gcp: &prismacloud.OrgCloudAccountGcpArgs{
		CredentialsJson:          pulumi.String("string"),
		AccountId:                pulumi.String("string"),
		OrganizationName:         pulumi.String("string"),
		Name:                     pulumi.String("string"),
		Enabled:                  pulumi.Bool(false),
		DataflowEnabledProject:   pulumi.String("string"),
		AccountGroupCreationMode: pulumi.String("string"),
		FlowLogStorageBucket:     pulumi.String("string"),
		GroupIds: pulumi.StringArray{
			pulumi.String("string"),
		},
		HierarchySelections: prismacloud.OrgCloudAccountGcpHierarchySelectionArray{
			&prismacloud.OrgCloudAccountGcpHierarchySelectionArgs{
				DisplayName:   pulumi.String("string"),
				NodeType:      pulumi.String("string"),
				ResourceId:    pulumi.String("string"),
				SelectionType: pulumi.String("string"),
			},
		},
		CompressionEnabled: pulumi.Bool(false),
		AccountType:        pulumi.String("string"),
		ProtectionMode:     pulumi.String("string"),
	},
	Oci: &prismacloud.OrgCloudAccountOciArgs{
		AccountId:             pulumi.String("string"),
		AccountType:           pulumi.String("string"),
		DefaultAccountGroupId: pulumi.String("string"),
		Enabled:               pulumi.Bool(false),
		GroupName:             pulumi.String("string"),
		HomeRegion:            pulumi.String("string"),
		Name:                  pulumi.String("string"),
		PolicyName:            pulumi.String("string"),
		UserName:              pulumi.String("string"),
		UserOcid:              pulumi.String("string"),
	},
	OrgCloudAccountId: pulumi.String("string"),
	Timeouts: &prismacloud.OrgCloudAccountTimeoutsArgs{
		Create: pulumi.String("string"),
		Delete: pulumi.String("string"),
		Update: pulumi.String("string"),
	},
})

    var orgCloudAccountResource = new OrgCloudAccount("orgCloudAccountResource", OrgCloudAccountArgs.builder()
    .aws(OrgCloudAccountAwsArgs.builder()
        .accountId("string")
        .externalId("string")
        .groupIds("string")
        .memberExternalId("string")
        .memberRoleName("string")
        .name("string")
        .roleArn("string")
        .accountType("string")
        .enabled(false)
        .hierarchySelections(OrgCloudAccountAwsHierarchySelectionArgs.builder()
            .displayName("string")
            .nodeType("string")
            .resourceId("string")
            .selectionType("string")
            .build())
        .memberRoleStatus(false)
        .protectionMode("string")
        .build())
    .azure(OrgCloudAccountAzureArgs.builder()
        .name("string")
        .tenantId("string")
        .clientId("string")
        .accountId("string")
        .groupIds("string")
        .servicePrincipalId("string")
        .key("string")
        .monitorFlowLogs(false)
        .enabled(false)
        .protectionMode("string")
        .rootSyncEnabled(false)
        .hierarchySelections(OrgCloudAccountAzureHierarchySelectionArgs.builder()
            .displayName("string")
            .nodeType("string")
            .resourceId("string")
            .selectionType("string")
            .build())
        .accountType("string")
        .build())
    .disableOnDestroy(false)
    .gcp(OrgCloudAccountGcpArgs.builder()
        .credentialsJson("string")
        .accountId("string")
        .organizationName("string")
        .name("string")
        .enabled(false)
        .dataflowEnabledProject("string")
        .accountGroupCreationMode("string")
        .flowLogStorageBucket("string")
        .groupIds("string")
        .hierarchySelections(OrgCloudAccountGcpHierarchySelectionArgs.builder()
            .displayName("string")
            .nodeType("string")
            .resourceId("string")
            .selectionType("string")
            .build())
        .compressionEnabled(false)
        .accountType("string")
        .protectionMode("string")
        .build())
    .oci(OrgCloudAccountOciArgs.builder()
        .accountId("string")
        .accountType("string")
        .defaultAccountGroupId("string")
        .enabled(false)
        .groupName("string")
        .homeRegion("string")
        .name("string")
        .policyName("string")
        .userName("string")
        .userOcid("string")
        .build())
    .orgCloudAccountId("string")
    .timeouts(OrgCloudAccountTimeoutsArgs.builder()
        .create("string")
        .delete("string")
        .update("string")
        .build())
    .build());

    org_cloud_account_resource = prismacloud.OrgCloudAccount("orgCloudAccountResource",
    aws={
        "account_id": "string",
        "external_id": "string",
        "group_ids": ["string"],
        "member_external_id": "string",
        "member_role_name": "string",
        "name": "string",
        "role_arn": "string",
        "account_type": "string",
        "enabled": False,
        "hierarchy_selections": [{
            "display_name": "string",
            "node_type": "string",
            "resource_id": "string",
            "selection_type": "string",
        }],
        "member_role_status": False,
        "protection_mode": "string",
    },
    azure={
        "name": "string",
        "tenant_id": "string",
        "client_id": "string",
        "account_id": "string",
        "group_ids": ["string"],
        "service_principal_id": "string",
        "key": "string",
        "monitor_flow_logs": False,
        "enabled": False,
        "protection_mode": "string",
        "root_sync_enabled": False,
        "hierarchy_selections": [{
            "display_name": "string",
            "node_type": "string",
            "resource_id": "string",
            "selection_type": "string",
        }],
        "account_type": "string",
    },
    disable_on_destroy=False,
    gcp={
        "credentials_json": "string",
        "account_id": "string",
        "organization_name": "string",
        "name": "string",
        "enabled": False,
        "dataflow_enabled_project": "string",
        "account_group_creation_mode": "string",
        "flow_log_storage_bucket": "string",
        "group_ids": ["string"],
        "hierarchy_selections": [{
            "display_name": "string",
            "node_type": "string",
            "resource_id": "string",
            "selection_type": "string",
        }],
        "compression_enabled": False,
        "account_type": "string",
        "protection_mode": "string",
    },
    oci={
        "account_id": "string",
        "account_type": "string",
        "default_account_group_id": "string",
        "enabled": False,
        "group_name": "string",
        "home_region": "string",
        "name": "string",
        "policy_name": "string",
        "user_name": "string",
        "user_ocid": "string",
    },
    org_cloud_account_id="string",
    timeouts={
        "create": "string",
        "delete": "string",
        "update": "string",
    })

    const orgCloudAccountResource = new prismacloud.OrgCloudAccount("orgCloudAccountResource", {
    aws: {
        accountId: "string",
        externalId: "string",
        groupIds: ["string"],
        memberExternalId: "string",
        memberRoleName: "string",
        name: "string",
        roleArn: "string",
        accountType: "string",
        enabled: false,
        hierarchySelections: [{
            displayName: "string",
            nodeType: "string",
            resourceId: "string",
            selectionType: "string",
        }],
        memberRoleStatus: false,
        protectionMode: "string",
    },
    azure: {
        name: "string",
        tenantId: "string",
        clientId: "string",
        accountId: "string",
        groupIds: ["string"],
        servicePrincipalId: "string",
        key: "string",
        monitorFlowLogs: false,
        enabled: false,
        protectionMode: "string",
        rootSyncEnabled: false,
        hierarchySelections: [{
            displayName: "string",
            nodeType: "string",
            resourceId: "string",
            selectionType: "string",
        }],
        accountType: "string",
    },
    disableOnDestroy: false,
    gcp: {
        credentialsJson: "string",
        accountId: "string",
        organizationName: "string",
        name: "string",
        enabled: false,
        dataflowEnabledProject: "string",
        accountGroupCreationMode: "string",
        flowLogStorageBucket: "string",
        groupIds: ["string"],
        hierarchySelections: [{
            displayName: "string",
            nodeType: "string",
            resourceId: "string",
            selectionType: "string",
        }],
        compressionEnabled: false,
        accountType: "string",
        protectionMode: "string",
    },
    oci: {
        accountId: "string",
        accountType: "string",
        defaultAccountGroupId: "string",
        enabled: false,
        groupName: "string",
        homeRegion: "string",
        name: "string",
        policyName: "string",
        userName: "string",
        userOcid: "string",
    },
    orgCloudAccountId: "string",
    timeouts: {
        create: "string",
        "delete": "string",
        update: "string",
    },
});

    type: prismacloud:OrgCloudAccount
properties:
    aws:
        accountId: string
        accountType: string
        enabled: false
        externalId: string
        groupIds:
            - string
        hierarchySelections:
            - displayName: string
              nodeType: string
              resourceId: string
              selectionType: string
        memberExternalId: string
        memberRoleName: string
        memberRoleStatus: false
        name: string
        protectionMode: string
        roleArn: string
    azure:
        accountId: string
        accountType: string
        clientId: string
        enabled: false
        groupIds:
            - string
        hierarchySelections:
            - displayName: string
              nodeType: string
              resourceId: string
              selectionType: string
        key: string
        monitorFlowLogs: false
        name: string
        protectionMode: string
        rootSyncEnabled: false
        servicePrincipalId: string
        tenantId: string
    disableOnDestroy: false
    gcp:
        accountGroupCreationMode: string
        accountId: string
        accountType: string
        compressionEnabled: false
        credentialsJson: string
        dataflowEnabledProject: string
        enabled: false
        flowLogStorageBucket: string
        groupIds:
            - string
        hierarchySelections:
            - displayName: string
              nodeType: string
              resourceId: string
              selectionType: string
        name: string
        organizationName: string
        protectionMode: string
    oci:
        accountId: string
        accountType: string
        defaultAccountGroupId: string
        enabled: false
        groupName: string
        homeRegion: string
        name: string
        policyName: string
        userName: string
        userOcid: string
    orgCloudAccountId: string
    timeouts:
        create: string
        delete: string
        update: string

    OrgCloudAccount Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The OrgCloudAccount resource accepts the following input properties:

    Aws OrgCloudAccountAws
    AWS org account type spec, defined below.
    Azure OrgCloudAccountAzure
    Azure org account type spec, defined below.
    DisableOnDestroy bool
    to disable cloud account instead of deleting on calling destroy
    Gcp OrgCloudAccountGcp
    GCP org account type spec, defined below.
    Oci OrgCloudAccountOci
    Oci account type spec, defined below.
    OrgCloudAccountId string
    Timeouts OrgCloudAccountTimeouts
    Aws OrgCloudAccountAwsArgs
    AWS org account type spec, defined below.
    Azure OrgCloudAccountAzureArgs
    Azure org account type spec, defined below.
    DisableOnDestroy bool
    to disable cloud account instead of deleting on calling destroy
    Gcp OrgCloudAccountGcpArgs
    GCP org account type spec, defined below.
    Oci OrgCloudAccountOciArgs
    Oci account type spec, defined below.
    OrgCloudAccountId string
    Timeouts OrgCloudAccountTimeoutsArgs
    aws OrgCloudAccountAws
    AWS org account type spec, defined below.
    azure OrgCloudAccountAzure
    Azure org account type spec, defined below.
    disableOnDestroy Boolean
    to disable cloud account instead of deleting on calling destroy
    gcp OrgCloudAccountGcp
    GCP org account type spec, defined below.
    oci OrgCloudAccountOci
    Oci account type spec, defined below.
    orgCloudAccountId String
    timeouts OrgCloudAccountTimeouts
    aws OrgCloudAccountAws
    AWS org account type spec, defined below.
    azure OrgCloudAccountAzure
    Azure org account type spec, defined below.
    disableOnDestroy boolean
    to disable cloud account instead of deleting on calling destroy
    gcp OrgCloudAccountGcp
    GCP org account type spec, defined below.
    oci OrgCloudAccountOci
    Oci account type spec, defined below.
    orgCloudAccountId string
    timeouts OrgCloudAccountTimeouts
    aws OrgCloudAccountAwsArgs
    AWS org account type spec, defined below.
    azure OrgCloudAccountAzureArgs
    Azure org account type spec, defined below.
    disable_on_destroy bool
    to disable cloud account instead of deleting on calling destroy
    gcp OrgCloudAccountGcpArgs
    GCP org account type spec, defined below.
    oci OrgCloudAccountOciArgs
    Oci account type spec, defined below.
    org_cloud_account_id str
    timeouts OrgCloudAccountTimeoutsArgs
    aws Property Map
    AWS org account type spec, defined below.
    azure Property Map
    Azure org account type spec, defined below.
    disableOnDestroy Boolean
    to disable cloud account instead of deleting on calling destroy
    gcp Property Map
    GCP org account type spec, defined below.
    oci Property Map
    Oci account type spec, defined below.
    orgCloudAccountId String
    timeouts Property Map

    Outputs

    All input properties are implicitly available as output properties. Additionally, the OrgCloudAccount resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    Id string
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.
    id string
    The provider-assigned unique ID for this managed resource.
    id str
    The provider-assigned unique ID for this managed resource.
    id String
    The provider-assigned unique ID for this managed resource.

    Look up Existing OrgCloudAccount Resource

    Get an existing OrgCloudAccount resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: OrgCloudAccountState, opts?: CustomResourceOptions): OrgCloudAccount
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        aws: Optional[OrgCloudAccountAwsArgs] = None,
        azure: Optional[OrgCloudAccountAzureArgs] = None,
        disable_on_destroy: Optional[bool] = None,
        gcp: Optional[OrgCloudAccountGcpArgs] = None,
        oci: Optional[OrgCloudAccountOciArgs] = None,
        org_cloud_account_id: Optional[str] = None,
        timeouts: Optional[OrgCloudAccountTimeoutsArgs] = None) -> OrgCloudAccount
    func GetOrgCloudAccount(ctx *Context, name string, id IDInput, state *OrgCloudAccountState, opts ...ResourceOption) (*OrgCloudAccount, error)
    public static OrgCloudAccount Get(string name, Input<string> id, OrgCloudAccountState? state, CustomResourceOptions? opts = null)
    public static OrgCloudAccount get(String name, Output<String> id, OrgCloudAccountState state, CustomResourceOptions options)
    resources:  _:    type: prismacloud:OrgCloudAccount    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Aws OrgCloudAccountAws
    AWS org account type spec, defined below.
    Azure OrgCloudAccountAzure
    Azure org account type spec, defined below.
    DisableOnDestroy bool
    to disable cloud account instead of deleting on calling destroy
    Gcp OrgCloudAccountGcp
    GCP org account type spec, defined below.
    Oci OrgCloudAccountOci
    Oci account type spec, defined below.
    OrgCloudAccountId string
    Timeouts OrgCloudAccountTimeouts
    Aws OrgCloudAccountAwsArgs
    AWS org account type spec, defined below.
    Azure OrgCloudAccountAzureArgs
    Azure org account type spec, defined below.
    DisableOnDestroy bool
    to disable cloud account instead of deleting on calling destroy
    Gcp OrgCloudAccountGcpArgs
    GCP org account type spec, defined below.
    Oci OrgCloudAccountOciArgs
    Oci account type spec, defined below.
    OrgCloudAccountId string
    Timeouts OrgCloudAccountTimeoutsArgs
    aws OrgCloudAccountAws
    AWS org account type spec, defined below.
    azure OrgCloudAccountAzure
    Azure org account type spec, defined below.
    disableOnDestroy Boolean
    to disable cloud account instead of deleting on calling destroy
    gcp OrgCloudAccountGcp
    GCP org account type spec, defined below.
    oci OrgCloudAccountOci
    Oci account type spec, defined below.
    orgCloudAccountId String
    timeouts OrgCloudAccountTimeouts
    aws OrgCloudAccountAws
    AWS org account type spec, defined below.
    azure OrgCloudAccountAzure
    Azure org account type spec, defined below.
    disableOnDestroy boolean
    to disable cloud account instead of deleting on calling destroy
    gcp OrgCloudAccountGcp
    GCP org account type spec, defined below.
    oci OrgCloudAccountOci
    Oci account type spec, defined below.
    orgCloudAccountId string
    timeouts OrgCloudAccountTimeouts
    aws OrgCloudAccountAwsArgs
    AWS org account type spec, defined below.
    azure OrgCloudAccountAzureArgs
    Azure org account type spec, defined below.
    disable_on_destroy bool
    to disable cloud account instead of deleting on calling destroy
    gcp OrgCloudAccountGcpArgs
    GCP org account type spec, defined below.
    oci OrgCloudAccountOciArgs
    Oci account type spec, defined below.
    org_cloud_account_id str
    timeouts OrgCloudAccountTimeoutsArgs
    aws Property Map
    AWS org account type spec, defined below.
    azure Property Map
    Azure org account type spec, defined below.
    disableOnDestroy Boolean
    to disable cloud account instead of deleting on calling destroy
    gcp Property Map
    GCP org account type spec, defined below.
    oci Property Map
    Oci account type spec, defined below.
    orgCloudAccountId String
    timeouts Property Map

    Supporting Types

    OrgCloudAccountAws, OrgCloudAccountAwsArgs

    AccountId string
    AWS account ID
    ExternalId string
    AWS account external ID
    GroupIds List<string>
    List of account IDs to which you are assigning this account
    MemberExternalId string
    AWS Member account role's external ID
    MemberRoleName string
    AWS Member account role name
    Name string
    Name to be used for the account on the Prisma Cloud platform (must be unique)
    RoleArn string
    Unique identifier for an AWS resource (ARN)
    AccountType string
    Account type - organization or account
    Enabled bool
    Whether or not the account is enabled
    HierarchySelections List<OrgCloudAccountAwsHierarchySelection>
    List of hierarchy selection. Each item has resource id, display name, node type and selection type
    MemberRoleStatus bool
    true = The member role created using stack set exists in all the member accounts. All the Org accounts will be added. false = Only the master account will be added.
    ProtectionMode string
    Monitor or Monitor and Protect
    AccountId string
    AWS account ID
    ExternalId string
    AWS account external ID
    GroupIds []string
    List of account IDs to which you are assigning this account
    MemberExternalId string
    AWS Member account role's external ID
    MemberRoleName string
    AWS Member account role name
    Name string
    Name to be used for the account on the Prisma Cloud platform (must be unique)
    RoleArn string
    Unique identifier for an AWS resource (ARN)
    AccountType string
    Account type - organization or account
    Enabled bool
    Whether or not the account is enabled
    HierarchySelections []OrgCloudAccountAwsHierarchySelection
    List of hierarchy selection. Each item has resource id, display name, node type and selection type
    MemberRoleStatus bool
    true = The member role created using stack set exists in all the member accounts. All the Org accounts will be added. false = Only the master account will be added.
    ProtectionMode string
    Monitor or Monitor and Protect
    accountId String
    AWS account ID
    externalId String
    AWS account external ID
    groupIds List<String>
    List of account IDs to which you are assigning this account
    memberExternalId String
    AWS Member account role's external ID
    memberRoleName String
    AWS Member account role name
    name String
    Name to be used for the account on the Prisma Cloud platform (must be unique)
    roleArn String
    Unique identifier for an AWS resource (ARN)
    accountType String
    Account type - organization or account
    enabled Boolean
    Whether or not the account is enabled
    hierarchySelections List<OrgCloudAccountAwsHierarchySelection>
    List of hierarchy selection. Each item has resource id, display name, node type and selection type
    memberRoleStatus Boolean
    true = The member role created using stack set exists in all the member accounts. All the Org accounts will be added. false = Only the master account will be added.
    protectionMode String
    Monitor or Monitor and Protect
    accountId string
    AWS account ID
    externalId string
    AWS account external ID
    groupIds string[]
    List of account IDs to which you are assigning this account
    memberExternalId string
    AWS Member account role's external ID
    memberRoleName string
    AWS Member account role name
    name string
    Name to be used for the account on the Prisma Cloud platform (must be unique)
    roleArn string
    Unique identifier for an AWS resource (ARN)
    accountType string
    Account type - organization or account
    enabled boolean
    Whether or not the account is enabled
    hierarchySelections OrgCloudAccountAwsHierarchySelection[]
    List of hierarchy selection. Each item has resource id, display name, node type and selection type
    memberRoleStatus boolean
    true = The member role created using stack set exists in all the member accounts. All the Org accounts will be added. false = Only the master account will be added.
    protectionMode string
    Monitor or Monitor and Protect
    account_id str
    AWS account ID
    external_id str
    AWS account external ID
    group_ids Sequence[str]
    List of account IDs to which you are assigning this account
    member_external_id str
    AWS Member account role's external ID
    member_role_name str
    AWS Member account role name
    name str
    Name to be used for the account on the Prisma Cloud platform (must be unique)
    role_arn str
    Unique identifier for an AWS resource (ARN)
    account_type str
    Account type - organization or account
    enabled bool
    Whether or not the account is enabled
    hierarchy_selections Sequence[OrgCloudAccountAwsHierarchySelection]
    List of hierarchy selection. Each item has resource id, display name, node type and selection type
    member_role_status bool
    true = The member role created using stack set exists in all the member accounts. All the Org accounts will be added. false = Only the master account will be added.
    protection_mode str
    Monitor or Monitor and Protect
    accountId String
    AWS account ID
    externalId String
    AWS account external ID
    groupIds List<String>
    List of account IDs to which you are assigning this account
    memberExternalId String
    AWS Member account role's external ID
    memberRoleName String
    AWS Member account role name
    name String
    Name to be used for the account on the Prisma Cloud platform (must be unique)
    roleArn String
    Unique identifier for an AWS resource (ARN)
    accountType String
    Account type - organization or account
    enabled Boolean
    Whether or not the account is enabled
    hierarchySelections List<Property Map>
    List of hierarchy selection. Each item has resource id, display name, node type and selection type
    memberRoleStatus Boolean
    true = The member role created using stack set exists in all the member accounts. All the Org accounts will be added. false = Only the master account will be added.
    protectionMode String
    Monitor or Monitor and Protect

    OrgCloudAccountAwsHierarchySelection, OrgCloudAccountAwsHierarchySelectionArgs

    DisplayName string
    Display name for AWS OU, AWS account, or AWS organization
    NodeType string
    Valid values: OU, ACCOUNT, ORG
    ResourceId string
    Resource ID. Valid values are AWS OU ID, AWS account ID, or AWS Organization ID. Note you must escape any double quotes in the resource ID with a backslash.
    SelectionType string
    Selection type. Valid values: INCLUDE to include the specified resource to onboard, EXCLUDE to exclude the specified resource and onboard the rest, ALL to onboard all resources in the organization.
    DisplayName string
    Display name for AWS OU, AWS account, or AWS organization
    NodeType string
    Valid values: OU, ACCOUNT, ORG
    ResourceId string
    Resource ID. Valid values are AWS OU ID, AWS account ID, or AWS Organization ID. Note you must escape any double quotes in the resource ID with a backslash.
    SelectionType string
    Selection type. Valid values: INCLUDE to include the specified resource to onboard, EXCLUDE to exclude the specified resource and onboard the rest, ALL to onboard all resources in the organization.
    displayName String
    Display name for AWS OU, AWS account, or AWS organization
    nodeType String
    Valid values: OU, ACCOUNT, ORG
    resourceId String
    Resource ID. Valid values are AWS OU ID, AWS account ID, or AWS Organization ID. Note you must escape any double quotes in the resource ID with a backslash.
    selectionType String
    Selection type. Valid values: INCLUDE to include the specified resource to onboard, EXCLUDE to exclude the specified resource and onboard the rest, ALL to onboard all resources in the organization.
    displayName string
    Display name for AWS OU, AWS account, or AWS organization
    nodeType string
    Valid values: OU, ACCOUNT, ORG
    resourceId string
    Resource ID. Valid values are AWS OU ID, AWS account ID, or AWS Organization ID. Note you must escape any double quotes in the resource ID with a backslash.
    selectionType string
    Selection type. Valid values: INCLUDE to include the specified resource to onboard, EXCLUDE to exclude the specified resource and onboard the rest, ALL to onboard all resources in the organization.
    display_name str
    Display name for AWS OU, AWS account, or AWS organization
    node_type str
    Valid values: OU, ACCOUNT, ORG
    resource_id str
    Resource ID. Valid values are AWS OU ID, AWS account ID, or AWS Organization ID. Note you must escape any double quotes in the resource ID with a backslash.
    selection_type str
    Selection type. Valid values: INCLUDE to include the specified resource to onboard, EXCLUDE to exclude the specified resource and onboard the rest, ALL to onboard all resources in the organization.
    displayName String
    Display name for AWS OU, AWS account, or AWS organization
    nodeType String
    Valid values: OU, ACCOUNT, ORG
    resourceId String
    Resource ID. Valid values are AWS OU ID, AWS account ID, or AWS Organization ID. Note you must escape any double quotes in the resource ID with a backslash.
    selectionType String
    Selection type. Valid values: INCLUDE to include the specified resource to onboard, EXCLUDE to exclude the specified resource and onboard the rest, ALL to onboard all resources in the organization.

    OrgCloudAccountAzure, OrgCloudAccountAzureArgs

    AccountId string
    Azure org account ID.
    ClientId string
    Application ID registered with Active Directory.
    GroupIds List<string>
    List of account IDs to which you are assigning this account.
    Key string
    Application ID key.
    MonitorFlowLogs bool
    Automatically ingest flow logs.
    Name string
    Name to be used for the account on the Prisma Cloud platform (must be unique).
    ServicePrincipalId string
    Unique ID of the service principal object associated with the Prisma Cloud application that you create.
    TenantId string
    Active Directory ID associated with Azure.
    AccountType string
    Defaults to "tenant" if not specified.
    Enabled bool
    Whether or not the account is enabled (defualt: true).
    HierarchySelections List<OrgCloudAccountAzureHierarchySelection>
    List of subscriptions and/or management groups to onboard, as defined below.
    ProtectionMode string
    Defaults to MONITOR. Valid values : MONITOR or MONITOR_AND_PROTECT
    RootSyncEnabled bool
    Defaults to false. Azure tenant has children. Must be set to true when azure tenant is onboarded with children.
    AccountId string
    Azure org account ID.
    ClientId string
    Application ID registered with Active Directory.
    GroupIds []string
    List of account IDs to which you are assigning this account.
    Key string
    Application ID key.
    MonitorFlowLogs bool
    Automatically ingest flow logs.
    Name string
    Name to be used for the account on the Prisma Cloud platform (must be unique).
    ServicePrincipalId string
    Unique ID of the service principal object associated with the Prisma Cloud application that you create.
    TenantId string
    Active Directory ID associated with Azure.
    AccountType string
    Defaults to "tenant" if not specified.
    Enabled bool
    Whether or not the account is enabled (defualt: true).
    HierarchySelections []OrgCloudAccountAzureHierarchySelection
    List of subscriptions and/or management groups to onboard, as defined below.
    ProtectionMode string
    Defaults to MONITOR. Valid values : MONITOR or MONITOR_AND_PROTECT
    RootSyncEnabled bool
    Defaults to false. Azure tenant has children. Must be set to true when azure tenant is onboarded with children.
    accountId String
    Azure org account ID.
    clientId String
    Application ID registered with Active Directory.
    groupIds List<String>
    List of account IDs to which you are assigning this account.
    key String
    Application ID key.
    monitorFlowLogs Boolean
    Automatically ingest flow logs.
    name String
    Name to be used for the account on the Prisma Cloud platform (must be unique).
    servicePrincipalId String
    Unique ID of the service principal object associated with the Prisma Cloud application that you create.
    tenantId String
    Active Directory ID associated with Azure.
    accountType String
    Defaults to "tenant" if not specified.
    enabled Boolean
    Whether or not the account is enabled (defualt: true).
    hierarchySelections List<OrgCloudAccountAzureHierarchySelection>
    List of subscriptions and/or management groups to onboard, as defined below.
    protectionMode String
    Defaults to MONITOR. Valid values : MONITOR or MONITOR_AND_PROTECT
    rootSyncEnabled Boolean
    Defaults to false. Azure tenant has children. Must be set to true when azure tenant is onboarded with children.
    accountId string
    Azure org account ID.
    clientId string
    Application ID registered with Active Directory.
    groupIds string[]
    List of account IDs to which you are assigning this account.
    key string
    Application ID key.
    monitorFlowLogs boolean
    Automatically ingest flow logs.
    name string
    Name to be used for the account on the Prisma Cloud platform (must be unique).
    servicePrincipalId string
    Unique ID of the service principal object associated with the Prisma Cloud application that you create.
    tenantId string
    Active Directory ID associated with Azure.
    accountType string
    Defaults to "tenant" if not specified.
    enabled boolean
    Whether or not the account is enabled (defualt: true).
    hierarchySelections OrgCloudAccountAzureHierarchySelection[]
    List of subscriptions and/or management groups to onboard, as defined below.
    protectionMode string
    Defaults to MONITOR. Valid values : MONITOR or MONITOR_AND_PROTECT
    rootSyncEnabled boolean
    Defaults to false. Azure tenant has children. Must be set to true when azure tenant is onboarded with children.
    account_id str
    Azure org account ID.
    client_id str
    Application ID registered with Active Directory.
    group_ids Sequence[str]
    List of account IDs to which you are assigning this account.
    key str
    Application ID key.
    monitor_flow_logs bool
    Automatically ingest flow logs.
    name str
    Name to be used for the account on the Prisma Cloud platform (must be unique).
    service_principal_id str
    Unique ID of the service principal object associated with the Prisma Cloud application that you create.
    tenant_id str
    Active Directory ID associated with Azure.
    account_type str
    Defaults to "tenant" if not specified.
    enabled bool
    Whether or not the account is enabled (defualt: true).
    hierarchy_selections Sequence[OrgCloudAccountAzureHierarchySelection]
    List of subscriptions and/or management groups to onboard, as defined below.
    protection_mode str
    Defaults to MONITOR. Valid values : MONITOR or MONITOR_AND_PROTECT
    root_sync_enabled bool
    Defaults to false. Azure tenant has children. Must be set to true when azure tenant is onboarded with children.
    accountId String
    Azure org account ID.
    clientId String
    Application ID registered with Active Directory.
    groupIds List<String>
    List of account IDs to which you are assigning this account.
    key String
    Application ID key.
    monitorFlowLogs Boolean
    Automatically ingest flow logs.
    name String
    Name to be used for the account on the Prisma Cloud platform (must be unique).
    servicePrincipalId String
    Unique ID of the service principal object associated with the Prisma Cloud application that you create.
    tenantId String
    Active Directory ID associated with Azure.
    accountType String
    Defaults to "tenant" if not specified.
    enabled Boolean
    Whether or not the account is enabled (defualt: true).
    hierarchySelections List<Property Map>
    List of subscriptions and/or management groups to onboard, as defined below.
    protectionMode String
    Defaults to MONITOR. Valid values : MONITOR or MONITOR_AND_PROTECT
    rootSyncEnabled Boolean
    Defaults to false. Azure tenant has children. Must be set to true when azure tenant is onboarded with children.

    OrgCloudAccountAzureHierarchySelection, OrgCloudAccountAzureHierarchySelectionArgs

    DisplayName string
    Display name for management group or subscription
    NodeType string
    Node type. Valid values: SUBSCRIPTION, TENANT, MANAGEMENT_GROUP
    ResourceId string
    Resource ID. Management group ID or subscription ID. Note you must escape any double quotes in the resource ID with a backslash.
    SelectionType string
    Selection type. Valid values: INCLUDE to include the specified resource to onboard, EXCLUDE to exclude the specified resource and onboard the rest, ALL to onboard all resources in the tenant.
    DisplayName string
    Display name for management group or subscription
    NodeType string
    Node type. Valid values: SUBSCRIPTION, TENANT, MANAGEMENT_GROUP
    ResourceId string
    Resource ID. Management group ID or subscription ID. Note you must escape any double quotes in the resource ID with a backslash.
    SelectionType string
    Selection type. Valid values: INCLUDE to include the specified resource to onboard, EXCLUDE to exclude the specified resource and onboard the rest, ALL to onboard all resources in the tenant.
    displayName String
    Display name for management group or subscription
    nodeType String
    Node type. Valid values: SUBSCRIPTION, TENANT, MANAGEMENT_GROUP
    resourceId String
    Resource ID. Management group ID or subscription ID. Note you must escape any double quotes in the resource ID with a backslash.
    selectionType String
    Selection type. Valid values: INCLUDE to include the specified resource to onboard, EXCLUDE to exclude the specified resource and onboard the rest, ALL to onboard all resources in the tenant.
    displayName string
    Display name for management group or subscription
    nodeType string
    Node type. Valid values: SUBSCRIPTION, TENANT, MANAGEMENT_GROUP
    resourceId string
    Resource ID. Management group ID or subscription ID. Note you must escape any double quotes in the resource ID with a backslash.
    selectionType string
    Selection type. Valid values: INCLUDE to include the specified resource to onboard, EXCLUDE to exclude the specified resource and onboard the rest, ALL to onboard all resources in the tenant.
    display_name str
    Display name for management group or subscription
    node_type str
    Node type. Valid values: SUBSCRIPTION, TENANT, MANAGEMENT_GROUP
    resource_id str
    Resource ID. Management group ID or subscription ID. Note you must escape any double quotes in the resource ID with a backslash.
    selection_type str
    Selection type. Valid values: INCLUDE to include the specified resource to onboard, EXCLUDE to exclude the specified resource and onboard the rest, ALL to onboard all resources in the tenant.
    displayName String
    Display name for management group or subscription
    nodeType String
    Node type. Valid values: SUBSCRIPTION, TENANT, MANAGEMENT_GROUP
    resourceId String
    Resource ID. Management group ID or subscription ID. Note you must escape any double quotes in the resource ID with a backslash.
    selectionType String
    Selection type. Valid values: INCLUDE to include the specified resource to onboard, EXCLUDE to exclude the specified resource and onboard the rest, ALL to onboard all resources in the tenant.

    OrgCloudAccountGcp, OrgCloudAccountGcpArgs

    AccountId string
    GCP org project ID.
    CredentialsJson string
    Content of the JSON credentials file (read in using file()).
    Name string
    Name to be used for the account on the Prisma Cloud platform (must be unique).
    OrganizationName string
    GCP org organization name.
    AccountGroupCreationMode string
    Cloud account group creation mode. Valid values : MANUAL: Create account groups manually, AUTO: Create high-level account groups based on folders identified, or RECURSIVE: Drill down in folder tree to create account groups (default : MANUAL). AUTO can't be used if selection_type in hierarchy_selection is EXCLUDE.
    AccountType string
    Account type. Defaults to organization if not specified.
    CompressionEnabled bool
    Enable flow log compression.
    DataflowEnabledProject string
    GCP project for flow log compression.
    Enabled bool
    Whether or not the account is enabled (defualt: true).
    FlowLogStorageBucket string
    GCP Flow logs storage bucket.
    GroupIds List<string>
    List of account IDs to which you are assigning this account.
    HierarchySelections List<OrgCloudAccountGcpHierarchySelection>
    List of hierarchy selection. Each item has resource ID, display name, node type and selection type, as defined below.
    ProtectionMode string
    Protection Mode. Valid values : MONITOR or MONITOR_AND_PROTECT. Defaults to MONITOR if not specified.
    AccountId string
    GCP org project ID.
    CredentialsJson string
    Content of the JSON credentials file (read in using file()).
    Name string
    Name to be used for the account on the Prisma Cloud platform (must be unique).
    OrganizationName string
    GCP org organization name.
    AccountGroupCreationMode string
    Cloud account group creation mode. Valid values : MANUAL: Create account groups manually, AUTO: Create high-level account groups based on folders identified, or RECURSIVE: Drill down in folder tree to create account groups (default : MANUAL). AUTO can't be used if selection_type in hierarchy_selection is EXCLUDE.
    AccountType string
    Account type. Defaults to organization if not specified.
    CompressionEnabled bool
    Enable flow log compression.
    DataflowEnabledProject string
    GCP project for flow log compression.
    Enabled bool
    Whether or not the account is enabled (defualt: true).
    FlowLogStorageBucket string
    GCP Flow logs storage bucket.
    GroupIds []string
    List of account IDs to which you are assigning this account.
    HierarchySelections []OrgCloudAccountGcpHierarchySelection
    List of hierarchy selection. Each item has resource ID, display name, node type and selection type, as defined below.
    ProtectionMode string
    Protection Mode. Valid values : MONITOR or MONITOR_AND_PROTECT. Defaults to MONITOR if not specified.
    accountId String
    GCP org project ID.
    credentialsJson String
    Content of the JSON credentials file (read in using file()).
    name String
    Name to be used for the account on the Prisma Cloud platform (must be unique).
    organizationName String
    GCP org organization name.
    accountGroupCreationMode String
    Cloud account group creation mode. Valid values : MANUAL: Create account groups manually, AUTO: Create high-level account groups based on folders identified, or RECURSIVE: Drill down in folder tree to create account groups (default : MANUAL). AUTO can't be used if selection_type in hierarchy_selection is EXCLUDE.
    accountType String
    Account type. Defaults to organization if not specified.
    compressionEnabled Boolean
    Enable flow log compression.
    dataflowEnabledProject String
    GCP project for flow log compression.
    enabled Boolean
    Whether or not the account is enabled (defualt: true).
    flowLogStorageBucket String
    GCP Flow logs storage bucket.
    groupIds List<String>
    List of account IDs to which you are assigning this account.
    hierarchySelections List<OrgCloudAccountGcpHierarchySelection>
    List of hierarchy selection. Each item has resource ID, display name, node type and selection type, as defined below.
    protectionMode String
    Protection Mode. Valid values : MONITOR or MONITOR_AND_PROTECT. Defaults to MONITOR if not specified.
    accountId string
    GCP org project ID.
    credentialsJson string
    Content of the JSON credentials file (read in using file()).
    name string
    Name to be used for the account on the Prisma Cloud platform (must be unique).
    organizationName string
    GCP org organization name.
    accountGroupCreationMode string
    Cloud account group creation mode. Valid values : MANUAL: Create account groups manually, AUTO: Create high-level account groups based on folders identified, or RECURSIVE: Drill down in folder tree to create account groups (default : MANUAL). AUTO can't be used if selection_type in hierarchy_selection is EXCLUDE.
    accountType string
    Account type. Defaults to organization if not specified.
    compressionEnabled boolean
    Enable flow log compression.
    dataflowEnabledProject string
    GCP project for flow log compression.
    enabled boolean
    Whether or not the account is enabled (defualt: true).
    flowLogStorageBucket string
    GCP Flow logs storage bucket.
    groupIds string[]
    List of account IDs to which you are assigning this account.
    hierarchySelections OrgCloudAccountGcpHierarchySelection[]
    List of hierarchy selection. Each item has resource ID, display name, node type and selection type, as defined below.
    protectionMode string
    Protection Mode. Valid values : MONITOR or MONITOR_AND_PROTECT. Defaults to MONITOR if not specified.
    account_id str
    GCP org project ID.
    credentials_json str
    Content of the JSON credentials file (read in using file()).
    name str
    Name to be used for the account on the Prisma Cloud platform (must be unique).
    organization_name str
    GCP org organization name.
    account_group_creation_mode str
    Cloud account group creation mode. Valid values : MANUAL: Create account groups manually, AUTO: Create high-level account groups based on folders identified, or RECURSIVE: Drill down in folder tree to create account groups (default : MANUAL). AUTO can't be used if selection_type in hierarchy_selection is EXCLUDE.
    account_type str
    Account type. Defaults to organization if not specified.
    compression_enabled bool
    Enable flow log compression.
    dataflow_enabled_project str
    GCP project for flow log compression.
    enabled bool
    Whether or not the account is enabled (defualt: true).
    flow_log_storage_bucket str
    GCP Flow logs storage bucket.
    group_ids Sequence[str]
    List of account IDs to which you are assigning this account.
    hierarchy_selections Sequence[OrgCloudAccountGcpHierarchySelection]
    List of hierarchy selection. Each item has resource ID, display name, node type and selection type, as defined below.
    protection_mode str
    Protection Mode. Valid values : MONITOR or MONITOR_AND_PROTECT. Defaults to MONITOR if not specified.
    accountId String
    GCP org project ID.
    credentialsJson String
    Content of the JSON credentials file (read in using file()).
    name String
    Name to be used for the account on the Prisma Cloud platform (must be unique).
    organizationName String
    GCP org organization name.
    accountGroupCreationMode String
    Cloud account group creation mode. Valid values : MANUAL: Create account groups manually, AUTO: Create high-level account groups based on folders identified, or RECURSIVE: Drill down in folder tree to create account groups (default : MANUAL). AUTO can't be used if selection_type in hierarchy_selection is EXCLUDE.
    accountType String
    Account type. Defaults to organization if not specified.
    compressionEnabled Boolean
    Enable flow log compression.
    dataflowEnabledProject String
    GCP project for flow log compression.
    enabled Boolean
    Whether or not the account is enabled (defualt: true).
    flowLogStorageBucket String
    GCP Flow logs storage bucket.
    groupIds List<String>
    List of account IDs to which you are assigning this account.
    hierarchySelections List<Property Map>
    List of hierarchy selection. Each item has resource ID, display name, node type and selection type, as defined below.
    protectionMode String
    Protection Mode. Valid values : MONITOR or MONITOR_AND_PROTECT. Defaults to MONITOR if not specified.

    OrgCloudAccountGcpHierarchySelection, OrgCloudAccountGcpHierarchySelectionArgs

    DisplayName string
    Display name for folder, project, or organization
    NodeType string
    Node type. Valid values - FOLDER, PROJECT, ORG
    ResourceId string
    Resource ID. For folders, format is folders/{folder ID}. For projects, format is {project number}. For orgs, format is organizations/{org ID}
    SelectionType string
    Selection type. Valid values: INCLUDE, EXCLUDE, ALL. If hierarchySelection.nodeType is PROJECT or FOLDER, then a valid value is either INCLUDE or EXCLUDE
    DisplayName string
    Display name for folder, project, or organization
    NodeType string
    Node type. Valid values - FOLDER, PROJECT, ORG
    ResourceId string
    Resource ID. For folders, format is folders/{folder ID}. For projects, format is {project number}. For orgs, format is organizations/{org ID}
    SelectionType string
    Selection type. Valid values: INCLUDE, EXCLUDE, ALL. If hierarchySelection.nodeType is PROJECT or FOLDER, then a valid value is either INCLUDE or EXCLUDE
    displayName String
    Display name for folder, project, or organization
    nodeType String
    Node type. Valid values - FOLDER, PROJECT, ORG
    resourceId String
    Resource ID. For folders, format is folders/{folder ID}. For projects, format is {project number}. For orgs, format is organizations/{org ID}
    selectionType String
    Selection type. Valid values: INCLUDE, EXCLUDE, ALL. If hierarchySelection.nodeType is PROJECT or FOLDER, then a valid value is either INCLUDE or EXCLUDE
    displayName string
    Display name for folder, project, or organization
    nodeType string
    Node type. Valid values - FOLDER, PROJECT, ORG
    resourceId string
    Resource ID. For folders, format is folders/{folder ID}. For projects, format is {project number}. For orgs, format is organizations/{org ID}
    selectionType string
    Selection type. Valid values: INCLUDE, EXCLUDE, ALL. If hierarchySelection.nodeType is PROJECT or FOLDER, then a valid value is either INCLUDE or EXCLUDE
    display_name str
    Display name for folder, project, or organization
    node_type str
    Node type. Valid values - FOLDER, PROJECT, ORG
    resource_id str
    Resource ID. For folders, format is folders/{folder ID}. For projects, format is {project number}. For orgs, format is organizations/{org ID}
    selection_type str
    Selection type. Valid values: INCLUDE, EXCLUDE, ALL. If hierarchySelection.nodeType is PROJECT or FOLDER, then a valid value is either INCLUDE or EXCLUDE
    displayName String
    Display name for folder, project, or organization
    nodeType String
    Node type. Valid values - FOLDER, PROJECT, ORG
    resourceId String
    Resource ID. For folders, format is folders/{folder ID}. For projects, format is {project number}. For orgs, format is organizations/{org ID}
    selectionType String
    Selection type. Valid values: INCLUDE, EXCLUDE, ALL. If hierarchySelection.nodeType is PROJECT or FOLDER, then a valid value is either INCLUDE or EXCLUDE

    OrgCloudAccountOci, OrgCloudAccountOciArgs

    AccountId string
    OCI account ID.
    AccountType string
    Account type - account or tenant.
    DefaultAccountGroupId string
    account ID to which you are assigning this account.
    Enabled bool
    Whether or not the account is enabled (default: true).
    GroupName string
    OCI identity group name that you define. Can be an existing group.
    HomeRegion string
    OCI tenancy home region.
    Name string
    Name to be used for the account on the Prisma Cloud platform (must be unique).
    PolicyName string
    OCI identity policy name that you define. Can be an existing policy that has the right policy statements.
    UserName string
    OCI identity user name that you define. Can be an existing user that has the right privileges.
    UserOcid string
    OCI identity user Ocid that you define. Can be an existing user that has the right privileges.
    AccountId string
    OCI account ID.
    AccountType string
    Account type - account or tenant.
    DefaultAccountGroupId string
    account ID to which you are assigning this account.
    Enabled bool
    Whether or not the account is enabled (default: true).
    GroupName string
    OCI identity group name that you define. Can be an existing group.
    HomeRegion string
    OCI tenancy home region.
    Name string
    Name to be used for the account on the Prisma Cloud platform (must be unique).
    PolicyName string
    OCI identity policy name that you define. Can be an existing policy that has the right policy statements.
    UserName string
    OCI identity user name that you define. Can be an existing user that has the right privileges.
    UserOcid string
    OCI identity user Ocid that you define. Can be an existing user that has the right privileges.
    accountId String
    OCI account ID.
    accountType String
    Account type - account or tenant.
    defaultAccountGroupId String
    account ID to which you are assigning this account.
    enabled Boolean
    Whether or not the account is enabled (default: true).
    groupName String
    OCI identity group name that you define. Can be an existing group.
    homeRegion String
    OCI tenancy home region.
    name String
    Name to be used for the account on the Prisma Cloud platform (must be unique).
    policyName String
    OCI identity policy name that you define. Can be an existing policy that has the right policy statements.
    userName String
    OCI identity user name that you define. Can be an existing user that has the right privileges.
    userOcid String
    OCI identity user Ocid that you define. Can be an existing user that has the right privileges.
    accountId string
    OCI account ID.
    accountType string
    Account type - account or tenant.
    defaultAccountGroupId string
    account ID to which you are assigning this account.
    enabled boolean
    Whether or not the account is enabled (default: true).
    groupName string
    OCI identity group name that you define. Can be an existing group.
    homeRegion string
    OCI tenancy home region.
    name string
    Name to be used for the account on the Prisma Cloud platform (must be unique).
    policyName string
    OCI identity policy name that you define. Can be an existing policy that has the right policy statements.
    userName string
    OCI identity user name that you define. Can be an existing user that has the right privileges.
    userOcid string
    OCI identity user Ocid that you define. Can be an existing user that has the right privileges.
    account_id str
    OCI account ID.
    account_type str
    Account type - account or tenant.
    default_account_group_id str
    account ID to which you are assigning this account.
    enabled bool
    Whether or not the account is enabled (default: true).
    group_name str
    OCI identity group name that you define. Can be an existing group.
    home_region str
    OCI tenancy home region.
    name str
    Name to be used for the account on the Prisma Cloud platform (must be unique).
    policy_name str
    OCI identity policy name that you define. Can be an existing policy that has the right policy statements.
    user_name str
    OCI identity user name that you define. Can be an existing user that has the right privileges.
    user_ocid str
    OCI identity user Ocid that you define. Can be an existing user that has the right privileges.
    accountId String
    OCI account ID.
    accountType String
    Account type - account or tenant.
    defaultAccountGroupId String
    account ID to which you are assigning this account.
    enabled Boolean
    Whether or not the account is enabled (default: true).
    groupName String
    OCI identity group name that you define. Can be an existing group.
    homeRegion String
    OCI tenancy home region.
    name String
    Name to be used for the account on the Prisma Cloud platform (must be unique).
    policyName String
    OCI identity policy name that you define. Can be an existing policy that has the right policy statements.
    userName String
    OCI identity user name that you define. Can be an existing user that has the right privileges.
    userOcid String
    OCI identity user Ocid that you define. Can be an existing user that has the right privileges.

    OrgCloudAccountTimeouts, OrgCloudAccountTimeoutsArgs

    Create string
    Delete string
    Update string
    Create string
    Delete string
    Update string
    create String
    delete String
    update String
    create string
    delete string
    update string
    create str
    delete str
    update str
    create String
    delete String
    update String

    Import

    Resources can be imported using the cloud type (aws, azure, gcp, or oci) and the ID:

    $ pulumi import prismacloud:index/orgCloudAccount:OrgCloudAccount aws_example aws:accountIdHere

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    prismacloud paloaltonetworks/terraform-provider-prismacloud
    License
    Notes
    This Pulumi package is based on the prismacloud Terraform Provider.
    prismacloud logo
    prismacloud 1.7.0 published on Monday, Apr 14, 2025 by paloaltonetworks
    paloaltonetworks/terraform-provider-prismacloud