Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. CrowdStrike
  3. API Docs
  4. CloudAwsAccount
CrowdStrike v0.0.10 published on Monday, Mar 3, 2025 by CrowdStrike
crowdstrike/pulumi-crowdstrike

crowdstrike.CloudAwsAccount

Explore with Pulumi AI

crowdstrike logo
CrowdStrike v0.0.10 published on Monday, Mar 3, 2025 by CrowdStrike
crowdstrike/pulumi-crowdstrike

    This resource allows management of an AWS account in Falcon.

    API Scopes

    The following API scopes are required:

    • Cloud security AWS registration | Read & Write
    • CSPM registration | Read & Write

    Example Usage

    Coming soon!

    Coming soon!

    Coming soon!

    Coming soon!

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.crowdstrike.CloudAwsAccount;
import com.pulumi.crowdstrike.CloudAwsAccountArgs;
import com.pulumi.crowdstrike.inputs.CloudAwsAccountDspmArgs;
import com.pulumi.crowdstrike.inputs.CloudAwsAccountIdpArgs;
import com.pulumi.crowdstrike.inputs.CloudAwsAccountRealtimeVisibilityArgs;
import com.pulumi.crowdstrike.inputs.CloudAwsAccountSensorManagementArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var org = new CloudAwsAccount("org", CloudAwsAccountArgs.builder()
            .accountId("123456789012")
            .dspm(CloudAwsAccountDspmArgs.builder()
                .enabled(true)
                .build())
            .idp(CloudAwsAccountIdpArgs.builder()
                .enabled(true)
                .build())
            .isOrganizationManagementAccount(true)
            .organizationId("o-1234567890")
            .realtimeVisibility(CloudAwsAccountRealtimeVisibilityArgs.builder()
                .cloudtrail_region("us-east-1")
                .enabled(true)
                .build())
            .sensorManagement(CloudAwsAccountSensorManagementArgs.builder()
                .enabled(true)
                .build())
            .build());

    }
}

    resources:
  org:
    type: crowdstrike:CloudAwsAccount
    properties:
      accountId: '123456789012'
      dspm:
        enabled: true
      idp:
        enabled: true
      isOrganizationManagementAccount: true
      organizationId: o-1234567890
      realtimeVisibility:
        cloudtrail_region: us-east-1
        enabled: true
      sensorManagement:
        enabled: true

    Create CloudAwsAccount Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new CloudAwsAccount(name: string, args: CloudAwsAccountArgs, opts?: CustomResourceOptions);
    @overload
def CloudAwsAccount(resource_name: str,
                    args: CloudAwsAccountArgs,
                    opts: Optional[ResourceOptions] = None)

@overload
def CloudAwsAccount(resource_name: str,
                    opts: Optional[ResourceOptions] = None,
                    account_id: Optional[str] = None,
                    account_type: Optional[str] = None,
                    asset_inventory: Optional[CloudAwsAccountAssetInventoryArgs] = None,
                    deployment_method: Optional[str] = None,
                    dspm: Optional[CloudAwsAccountDspmArgs] = None,
                    idp: Optional[CloudAwsAccountIdpArgs] = None,
                    is_organization_management_account: Optional[bool] = None,
                    organization_id: Optional[str] = None,
                    realtime_visibility: Optional[CloudAwsAccountRealtimeVisibilityArgs] = None,
                    sensor_management: Optional[CloudAwsAccountSensorManagementArgs] = None,
                    target_ouses: Optional[Sequence[str]] = None)
    func NewCloudAwsAccount(ctx *Context, name string, args CloudAwsAccountArgs, opts ...ResourceOption) (*CloudAwsAccount, error)
    public CloudAwsAccount(string name, CloudAwsAccountArgs args, CustomResourceOptions? opts = null)
    public CloudAwsAccount(String name, CloudAwsAccountArgs args)
public CloudAwsAccount(String name, CloudAwsAccountArgs args, CustomResourceOptions options)

    type: crowdstrike:CloudAwsAccount
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args CloudAwsAccountArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CloudAwsAccountArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CloudAwsAccountArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CloudAwsAccountArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CloudAwsAccountArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var cloudAwsAccountResource = new Crowdstrike.CloudAwsAccount("cloudAwsAccountResource", new()
{
    AccountId = "string",
    AccountType = "string",
    AssetInventory = new Crowdstrike.Inputs.CloudAwsAccountAssetInventoryArgs
    {
        Enabled = false,
        RoleName = "string",
    },
    DeploymentMethod = "string",
    Dspm = new Crowdstrike.Inputs.CloudAwsAccountDspmArgs
    {
        Enabled = false,
        RoleName = "string",
    },
    Idp = new Crowdstrike.Inputs.CloudAwsAccountIdpArgs
    {
        Enabled = false,
        Status = "string",
    },
    IsOrganizationManagementAccount = false,
    OrganizationId = "string",
    RealtimeVisibility = new Crowdstrike.Inputs.CloudAwsAccountRealtimeVisibilityArgs
    {
        CloudtrailRegion = "string",
        Enabled = false,
        UseExistingCloudtrail = false,
    },
    SensorManagement = new Crowdstrike.Inputs.CloudAwsAccountSensorManagementArgs
    {
        Enabled = false,
    },
    TargetOuses = new[]
    {
        "string",
    },
});

    example, err := crowdstrike.NewCloudAwsAccount(ctx, "cloudAwsAccountResource", &crowdstrike.CloudAwsAccountArgs{
	AccountId:   pulumi.String("string"),
	AccountType: pulumi.String("string"),
	AssetInventory: &crowdstrike.CloudAwsAccountAssetInventoryArgs{
		Enabled:  pulumi.Bool(false),
		RoleName: pulumi.String("string"),
	},
	DeploymentMethod: pulumi.String("string"),
	Dspm: &crowdstrike.CloudAwsAccountDspmArgs{
		Enabled:  pulumi.Bool(false),
		RoleName: pulumi.String("string"),
	},
	Idp: &crowdstrike.CloudAwsAccountIdpArgs{
		Enabled: pulumi.Bool(false),
		Status:  pulumi.String("string"),
	},
	IsOrganizationManagementAccount: pulumi.Bool(false),
	OrganizationId:                  pulumi.String("string"),
	RealtimeVisibility: &crowdstrike.CloudAwsAccountRealtimeVisibilityArgs{
		CloudtrailRegion:      pulumi.String("string"),
		Enabled:               pulumi.Bool(false),
		UseExistingCloudtrail: pulumi.Bool(false),
	},
	SensorManagement: &crowdstrike.CloudAwsAccountSensorManagementArgs{
		Enabled: pulumi.Bool(false),
	},
	TargetOuses: pulumi.StringArray{
		pulumi.String("string"),
	},
})

    var cloudAwsAccountResource = new CloudAwsAccount("cloudAwsAccountResource", CloudAwsAccountArgs.builder()
    .accountId("string")
    .accountType("string")
    .assetInventory(CloudAwsAccountAssetInventoryArgs.builder()
        .enabled(false)
        .roleName("string")
        .build())
    .deploymentMethod("string")
    .dspm(CloudAwsAccountDspmArgs.builder()
        .enabled(false)
        .roleName("string")
        .build())
    .idp(CloudAwsAccountIdpArgs.builder()
        .enabled(false)
        .status("string")
        .build())
    .isOrganizationManagementAccount(false)
    .organizationId("string")
    .realtimeVisibility(CloudAwsAccountRealtimeVisibilityArgs.builder()
        .cloudtrailRegion("string")
        .enabled(false)
        .useExistingCloudtrail(false)
        .build())
    .sensorManagement(CloudAwsAccountSensorManagementArgs.builder()
        .enabled(false)
        .build())
    .targetOuses("string")
    .build());

    cloud_aws_account_resource = crowdstrike.CloudAwsAccount("cloudAwsAccountResource",
    account_id="string",
    account_type="string",
    asset_inventory={
        "enabled": False,
        "role_name": "string",
    },
    deployment_method="string",
    dspm={
        "enabled": False,
        "role_name": "string",
    },
    idp={
        "enabled": False,
        "status": "string",
    },
    is_organization_management_account=False,
    organization_id="string",
    realtime_visibility={
        "cloudtrail_region": "string",
        "enabled": False,
        "use_existing_cloudtrail": False,
    },
    sensor_management={
        "enabled": False,
    },
    target_ouses=["string"])

    const cloudAwsAccountResource = new crowdstrike.CloudAwsAccount("cloudAwsAccountResource", {
    accountId: "string",
    accountType: "string",
    assetInventory: {
        enabled: false,
        roleName: "string",
    },
    deploymentMethod: "string",
    dspm: {
        enabled: false,
        roleName: "string",
    },
    idp: {
        enabled: false,
        status: "string",
    },
    isOrganizationManagementAccount: false,
    organizationId: "string",
    realtimeVisibility: {
        cloudtrailRegion: "string",
        enabled: false,
        useExistingCloudtrail: false,
    },
    sensorManagement: {
        enabled: false,
    },
    targetOuses: ["string"],
});

    type: crowdstrike:CloudAwsAccount
properties:
    accountId: string
    accountType: string
    assetInventory:
        enabled: false
        roleName: string
    deploymentMethod: string
    dspm:
        enabled: false
        roleName: string
    idp:
        enabled: false
        status: string
    isOrganizationManagementAccount: false
    organizationId: string
    realtimeVisibility:
        cloudtrailRegion: string
        enabled: false
        useExistingCloudtrail: false
    sensorManagement:
        enabled: false
    targetOuses:
        - string

    CloudAwsAccount Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The CloudAwsAccount resource accepts the following input properties:

    AccountId string
    The AWS Account ID
    AccountType string
    The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
    AssetInventory CrowdStrike.Crowdstrike.Inputs.CloudAwsAccountAssetInventory
    DeploymentMethod string
    Dspm CrowdStrike.Crowdstrike.Inputs.CloudAwsAccountDspm
    Idp CrowdStrike.Crowdstrike.Inputs.CloudAwsAccountIdp
    IsOrganizationManagementAccount bool
    Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
    OrganizationId string
    The AWS Organization ID
    RealtimeVisibility CrowdStrike.Crowdstrike.Inputs.CloudAwsAccountRealtimeVisibility
    SensorManagement CrowdStrike.Crowdstrike.Inputs.CloudAwsAccountSensorManagement
    TargetOuses List<string>
    The list of target Organizational Units
    AccountId string
    The AWS Account ID
    AccountType string
    The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
    AssetInventory CloudAwsAccountAssetInventoryArgs
    DeploymentMethod string
    Dspm CloudAwsAccountDspmArgs
    Idp CloudAwsAccountIdpArgs
    IsOrganizationManagementAccount bool
    Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
    OrganizationId string
    The AWS Organization ID
    RealtimeVisibility CloudAwsAccountRealtimeVisibilityArgs
    SensorManagement CloudAwsAccountSensorManagementArgs
    TargetOuses []string
    The list of target Organizational Units
    accountId String
    The AWS Account ID
    accountType String
    The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
    assetInventory CloudAwsAccountAssetInventory
    deploymentMethod String
    dspm CloudAwsAccountDspm
    idp CloudAwsAccountIdp
    isOrganizationManagementAccount Boolean
    Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
    organizationId String
    The AWS Organization ID
    realtimeVisibility CloudAwsAccountRealtimeVisibility
    sensorManagement CloudAwsAccountSensorManagement
    targetOuses List<String>
    The list of target Organizational Units
    accountId string
    The AWS Account ID
    accountType string
    The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
    assetInventory CloudAwsAccountAssetInventory
    deploymentMethod string
    dspm CloudAwsAccountDspm
    idp CloudAwsAccountIdp
    isOrganizationManagementAccount boolean
    Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
    organizationId string
    The AWS Organization ID
    realtimeVisibility CloudAwsAccountRealtimeVisibility
    sensorManagement CloudAwsAccountSensorManagement
    targetOuses string[]
    The list of target Organizational Units
    account_id str
    The AWS Account ID
    account_type str
    The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
    asset_inventory CloudAwsAccountAssetInventoryArgs
    deployment_method str
    dspm CloudAwsAccountDspmArgs
    idp CloudAwsAccountIdpArgs
    is_organization_management_account bool
    Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
    organization_id str
    The AWS Organization ID
    realtime_visibility CloudAwsAccountRealtimeVisibilityArgs
    sensor_management CloudAwsAccountSensorManagementArgs
    target_ouses Sequence[str]
    The list of target Organizational Units
    accountId String
    The AWS Account ID
    accountType String
    The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
    assetInventory Property Map
    deploymentMethod String
    dspm Property Map
    idp Property Map
    isOrganizationManagementAccount Boolean
    Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
    organizationId String
    The AWS Organization ID
    realtimeVisibility Property Map
    sensorManagement Property Map
    targetOuses List<String>
    The list of target Organizational Units

    Outputs

    All input properties are implicitly available as output properties. Additionally, the CloudAwsAccount resource produces the following output properties:

    CloudtrailBucketName string
    The name of the CloudTrail S3 bucket used for real-time visibility
    DspmRoleArn string
    The ARN of the IAM role to be used by CrowdStrike Data Security Posture Management
    EventbusArn string
    The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
    EventbusName string
    The name of the Amazon EventBridge used by CrowdStrike to forward messages
    ExternalId string
    The external ID used to assume the AWS IAM role
    IamRoleArn string
    The ARN of the AWS IAM role used to access this AWS account
    Id string
    The provider-assigned unique ID for this managed resource.
    IntermediateRoleArn string
    The ARN of the intermediate role used to assume the AWS IAM role
    CloudtrailBucketName string
    The name of the CloudTrail S3 bucket used for real-time visibility
    DspmRoleArn string
    The ARN of the IAM role to be used by CrowdStrike Data Security Posture Management
    EventbusArn string
    The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
    EventbusName string
    The name of the Amazon EventBridge used by CrowdStrike to forward messages
    ExternalId string
    The external ID used to assume the AWS IAM role
    IamRoleArn string
    The ARN of the AWS IAM role used to access this AWS account
    Id string
    The provider-assigned unique ID for this managed resource.
    IntermediateRoleArn string
    The ARN of the intermediate role used to assume the AWS IAM role
    cloudtrailBucketName String
    The name of the CloudTrail S3 bucket used for real-time visibility
    dspmRoleArn String
    The ARN of the IAM role to be used by CrowdStrike Data Security Posture Management
    eventbusArn String
    The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
    eventbusName String
    The name of the Amazon EventBridge used by CrowdStrike to forward messages
    externalId String
    The external ID used to assume the AWS IAM role
    iamRoleArn String
    The ARN of the AWS IAM role used to access this AWS account
    id String
    The provider-assigned unique ID for this managed resource.
    intermediateRoleArn String
    The ARN of the intermediate role used to assume the AWS IAM role
    cloudtrailBucketName string
    The name of the CloudTrail S3 bucket used for real-time visibility
    dspmRoleArn string
    The ARN of the IAM role to be used by CrowdStrike Data Security Posture Management
    eventbusArn string
    The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
    eventbusName string
    The name of the Amazon EventBridge used by CrowdStrike to forward messages
    externalId string
    The external ID used to assume the AWS IAM role
    iamRoleArn string
    The ARN of the AWS IAM role used to access this AWS account
    id string
    The provider-assigned unique ID for this managed resource.
    intermediateRoleArn string
    The ARN of the intermediate role used to assume the AWS IAM role
    cloudtrail_bucket_name str
    The name of the CloudTrail S3 bucket used for real-time visibility
    dspm_role_arn str
    The ARN of the IAM role to be used by CrowdStrike Data Security Posture Management
    eventbus_arn str
    The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
    eventbus_name str
    The name of the Amazon EventBridge used by CrowdStrike to forward messages
    external_id str
    The external ID used to assume the AWS IAM role
    iam_role_arn str
    The ARN of the AWS IAM role used to access this AWS account
    id str
    The provider-assigned unique ID for this managed resource.
    intermediate_role_arn str
    The ARN of the intermediate role used to assume the AWS IAM role
    cloudtrailBucketName String
    The name of the CloudTrail S3 bucket used for real-time visibility
    dspmRoleArn String
    The ARN of the IAM role to be used by CrowdStrike Data Security Posture Management
    eventbusArn String
    The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
    eventbusName String
    The name of the Amazon EventBridge used by CrowdStrike to forward messages
    externalId String
    The external ID used to assume the AWS IAM role
    iamRoleArn String
    The ARN of the AWS IAM role used to access this AWS account
    id String
    The provider-assigned unique ID for this managed resource.
    intermediateRoleArn String
    The ARN of the intermediate role used to assume the AWS IAM role

    Look up Existing CloudAwsAccount Resource

    Get an existing CloudAwsAccount resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: CloudAwsAccountState, opts?: CustomResourceOptions): CloudAwsAccount
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        account_id: Optional[str] = None,
        account_type: Optional[str] = None,
        asset_inventory: Optional[CloudAwsAccountAssetInventoryArgs] = None,
        cloudtrail_bucket_name: Optional[str] = None,
        deployment_method: Optional[str] = None,
        dspm: Optional[CloudAwsAccountDspmArgs] = None,
        dspm_role_arn: Optional[str] = None,
        eventbus_arn: Optional[str] = None,
        eventbus_name: Optional[str] = None,
        external_id: Optional[str] = None,
        iam_role_arn: Optional[str] = None,
        idp: Optional[CloudAwsAccountIdpArgs] = None,
        intermediate_role_arn: Optional[str] = None,
        is_organization_management_account: Optional[bool] = None,
        organization_id: Optional[str] = None,
        realtime_visibility: Optional[CloudAwsAccountRealtimeVisibilityArgs] = None,
        sensor_management: Optional[CloudAwsAccountSensorManagementArgs] = None,
        target_ouses: Optional[Sequence[str]] = None) -> CloudAwsAccount
    func GetCloudAwsAccount(ctx *Context, name string, id IDInput, state *CloudAwsAccountState, opts ...ResourceOption) (*CloudAwsAccount, error)
    public static CloudAwsAccount Get(string name, Input<string> id, CloudAwsAccountState? state, CustomResourceOptions? opts = null)
    public static CloudAwsAccount get(String name, Output<String> id, CloudAwsAccountState state, CustomResourceOptions options)
    resources:  _:    type: crowdstrike:CloudAwsAccount    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    AccountId string
    The AWS Account ID
    AccountType string
    The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
    AssetInventory CrowdStrike.Crowdstrike.Inputs.CloudAwsAccountAssetInventory
    CloudtrailBucketName string
    The name of the CloudTrail S3 bucket used for real-time visibility
    DeploymentMethod string
    Dspm CrowdStrike.Crowdstrike.Inputs.CloudAwsAccountDspm
    DspmRoleArn string
    The ARN of the IAM role to be used by CrowdStrike Data Security Posture Management
    EventbusArn string
    The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
    EventbusName string
    The name of the Amazon EventBridge used by CrowdStrike to forward messages
    ExternalId string
    The external ID used to assume the AWS IAM role
    IamRoleArn string
    The ARN of the AWS IAM role used to access this AWS account
    Idp CrowdStrike.Crowdstrike.Inputs.CloudAwsAccountIdp
    IntermediateRoleArn string
    The ARN of the intermediate role used to assume the AWS IAM role
    IsOrganizationManagementAccount bool
    Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
    OrganizationId string
    The AWS Organization ID
    RealtimeVisibility CrowdStrike.Crowdstrike.Inputs.CloudAwsAccountRealtimeVisibility
    SensorManagement CrowdStrike.Crowdstrike.Inputs.CloudAwsAccountSensorManagement
    TargetOuses List<string>
    The list of target Organizational Units
    AccountId string
    The AWS Account ID
    AccountType string
    The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
    AssetInventory CloudAwsAccountAssetInventoryArgs
    CloudtrailBucketName string
    The name of the CloudTrail S3 bucket used for real-time visibility
    DeploymentMethod string
    Dspm CloudAwsAccountDspmArgs
    DspmRoleArn string
    The ARN of the IAM role to be used by CrowdStrike Data Security Posture Management
    EventbusArn string
    The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
    EventbusName string
    The name of the Amazon EventBridge used by CrowdStrike to forward messages
    ExternalId string
    The external ID used to assume the AWS IAM role
    IamRoleArn string
    The ARN of the AWS IAM role used to access this AWS account
    Idp CloudAwsAccountIdpArgs
    IntermediateRoleArn string
    The ARN of the intermediate role used to assume the AWS IAM role
    IsOrganizationManagementAccount bool
    Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
    OrganizationId string
    The AWS Organization ID
    RealtimeVisibility CloudAwsAccountRealtimeVisibilityArgs
    SensorManagement CloudAwsAccountSensorManagementArgs
    TargetOuses []string
    The list of target Organizational Units
    accountId String
    The AWS Account ID
    accountType String
    The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
    assetInventory CloudAwsAccountAssetInventory
    cloudtrailBucketName String
    The name of the CloudTrail S3 bucket used for real-time visibility
    deploymentMethod String
    dspm CloudAwsAccountDspm
    dspmRoleArn String
    The ARN of the IAM role to be used by CrowdStrike Data Security Posture Management
    eventbusArn String
    The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
    eventbusName String
    The name of the Amazon EventBridge used by CrowdStrike to forward messages
    externalId String
    The external ID used to assume the AWS IAM role
    iamRoleArn String
    The ARN of the AWS IAM role used to access this AWS account
    idp CloudAwsAccountIdp
    intermediateRoleArn String
    The ARN of the intermediate role used to assume the AWS IAM role
    isOrganizationManagementAccount Boolean
    Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
    organizationId String
    The AWS Organization ID
    realtimeVisibility CloudAwsAccountRealtimeVisibility
    sensorManagement CloudAwsAccountSensorManagement
    targetOuses List<String>
    The list of target Organizational Units
    accountId string
    The AWS Account ID
    accountType string
    The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
    assetInventory CloudAwsAccountAssetInventory
    cloudtrailBucketName string
    The name of the CloudTrail S3 bucket used for real-time visibility
    deploymentMethod string
    dspm CloudAwsAccountDspm
    dspmRoleArn string
    The ARN of the IAM role to be used by CrowdStrike Data Security Posture Management
    eventbusArn string
    The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
    eventbusName string
    The name of the Amazon EventBridge used by CrowdStrike to forward messages
    externalId string
    The external ID used to assume the AWS IAM role
    iamRoleArn string
    The ARN of the AWS IAM role used to access this AWS account
    idp CloudAwsAccountIdp
    intermediateRoleArn string
    The ARN of the intermediate role used to assume the AWS IAM role
    isOrganizationManagementAccount boolean
    Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
    organizationId string
    The AWS Organization ID
    realtimeVisibility CloudAwsAccountRealtimeVisibility
    sensorManagement CloudAwsAccountSensorManagement
    targetOuses string[]
    The list of target Organizational Units
    account_id str
    The AWS Account ID
    account_type str
    The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
    asset_inventory CloudAwsAccountAssetInventoryArgs
    cloudtrail_bucket_name str
    The name of the CloudTrail S3 bucket used for real-time visibility
    deployment_method str
    dspm CloudAwsAccountDspmArgs
    dspm_role_arn str
    The ARN of the IAM role to be used by CrowdStrike Data Security Posture Management
    eventbus_arn str
    The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
    eventbus_name str
    The name of the Amazon EventBridge used by CrowdStrike to forward messages
    external_id str
    The external ID used to assume the AWS IAM role
    iam_role_arn str
    The ARN of the AWS IAM role used to access this AWS account
    idp CloudAwsAccountIdpArgs
    intermediate_role_arn str
    The ARN of the intermediate role used to assume the AWS IAM role
    is_organization_management_account bool
    Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
    organization_id str
    The AWS Organization ID
    realtime_visibility CloudAwsAccountRealtimeVisibilityArgs
    sensor_management CloudAwsAccountSensorManagementArgs
    target_ouses Sequence[str]
    The list of target Organizational Units
    accountId String
    The AWS Account ID
    accountType String
    The AWS account type. Value is 'commercial' for Commercial cloud accounts. For GovCloud environments, value can be either 'commercial' or 'gov' depending on the account type
    assetInventory Property Map
    cloudtrailBucketName String
    The name of the CloudTrail S3 bucket used for real-time visibility
    deploymentMethod String
    dspm Property Map
    dspmRoleArn String
    The ARN of the IAM role to be used by CrowdStrike Data Security Posture Management
    eventbusArn String
    The ARN of the Amazon EventBridge used by CrowdStrike to forward messages
    eventbusName String
    The name of the Amazon EventBridge used by CrowdStrike to forward messages
    externalId String
    The external ID used to assume the AWS IAM role
    iamRoleArn String
    The ARN of the AWS IAM role used to access this AWS account
    idp Property Map
    intermediateRoleArn String
    The ARN of the intermediate role used to assume the AWS IAM role
    isOrganizationManagementAccount Boolean
    Indicates whether this is the management account (formerly known as the root account) of an AWS Organization
    organizationId String
    The AWS Organization ID
    realtimeVisibility Property Map
    sensorManagement Property Map
    targetOuses List<String>
    The list of target Organizational Units

    Supporting Types

    CloudAwsAccountAssetInventory, CloudAwsAccountAssetInventoryArgs

    Enabled bool
    Enable asset inventory
    RoleName string
    Custom AWS IAM role name
    Enabled bool
    Enable asset inventory
    RoleName string
    Custom AWS IAM role name
    enabled Boolean
    Enable asset inventory
    roleName String
    Custom AWS IAM role name
    enabled boolean
    Enable asset inventory
    roleName string
    Custom AWS IAM role name
    enabled bool
    Enable asset inventory
    role_name str
    Custom AWS IAM role name
    enabled Boolean
    Enable asset inventory
    roleName String
    Custom AWS IAM role name

    CloudAwsAccountDspm, CloudAwsAccountDspmArgs

    Enabled bool
    Enable Data Security Posture Management
    RoleName string
    Custom AWS IAM role name for Data Security Posture Management
    Enabled bool
    Enable Data Security Posture Management
    RoleName string
    Custom AWS IAM role name for Data Security Posture Management
    enabled Boolean
    Enable Data Security Posture Management
    roleName String
    Custom AWS IAM role name for Data Security Posture Management
    enabled boolean
    Enable Data Security Posture Management
    roleName string
    Custom AWS IAM role name for Data Security Posture Management
    enabled bool
    Enable Data Security Posture Management
    role_name str
    Custom AWS IAM role name for Data Security Posture Management
    enabled Boolean
    Enable Data Security Posture Management
    roleName String
    Custom AWS IAM role name for Data Security Posture Management

    CloudAwsAccountIdp, CloudAwsAccountIdpArgs

    Enabled bool
    Enable Identity Protection
    Status string
    Current status of the Identity Protection integration
    Enabled bool
    Enable Identity Protection
    Status string
    Current status of the Identity Protection integration
    enabled Boolean
    Enable Identity Protection
    status String
    Current status of the Identity Protection integration
    enabled boolean
    Enable Identity Protection
    status string
    Current status of the Identity Protection integration
    enabled bool
    Enable Identity Protection
    status str
    Current status of the Identity Protection integration
    enabled Boolean
    Enable Identity Protection
    status String
    Current status of the Identity Protection integration

    CloudAwsAccountRealtimeVisibility, CloudAwsAccountRealtimeVisibilityArgs

    CloudtrailRegion string
    The AWS region of the CloudTrail bucket
    Enabled bool
    Enable real-time visibility and detection
    UseExistingCloudtrail bool
    Set to true if a CloudTrail already exists
    CloudtrailRegion string
    The AWS region of the CloudTrail bucket
    Enabled bool
    Enable real-time visibility and detection
    UseExistingCloudtrail bool
    Set to true if a CloudTrail already exists
    cloudtrailRegion String
    The AWS region of the CloudTrail bucket
    enabled Boolean
    Enable real-time visibility and detection
    useExistingCloudtrail Boolean
    Set to true if a CloudTrail already exists
    cloudtrailRegion string
    The AWS region of the CloudTrail bucket
    enabled boolean
    Enable real-time visibility and detection
    useExistingCloudtrail boolean
    Set to true if a CloudTrail already exists
    cloudtrail_region str
    The AWS region of the CloudTrail bucket
    enabled bool
    Enable real-time visibility and detection
    use_existing_cloudtrail bool
    Set to true if a CloudTrail already exists
    cloudtrailRegion String
    The AWS region of the CloudTrail bucket
    enabled Boolean
    Enable real-time visibility and detection
    useExistingCloudtrail Boolean
    Set to true if a CloudTrail already exists

    CloudAwsAccountSensorManagement, CloudAwsAccountSensorManagementArgs

    Enabled bool
    Enable 1-click sensor deployment
    Enabled bool
    Enable 1-click sensor deployment
    enabled Boolean
    Enable 1-click sensor deployment
    enabled boolean
    Enable 1-click sensor deployment
    enabled bool
    Enable 1-click sensor deployment
    enabled Boolean
    Enable 1-click sensor deployment

    Package Details

    Repository
    crowdstrike crowdstrike/pulumi-crowdstrike
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the crowdstrike Terraform Provider.
    crowdstrike logo
    CrowdStrike v0.0.10 published on Monday, Mar 3, 2025 by CrowdStrike
    crowdstrike/pulumi-crowdstrike