Get FalconCloudAwsAccount - CrowdStrike/psfalcon GitHub Wiki
Search for Falcon Cloud Security AWS accounts
A properly provisioned AWS account will display the status 'Event_DiscoverAccountStatusOperational'.
Requires 'CSPM registration: Read'.
| Name | Type | Description | Min | Max | Allowed | Pipeline | PipelineByName |
|---|---|---|---|---|---|---|---|
| Id | String[] | AWS account identifier | X | X | |||
| OrganizationId | String[] | AWS organization identifier | |||||
| ScanType | String | Scan type |
fulldry
|
||||
| Status | String | AWS account status |
provisionedoperational
|
||||
| GroupBy | String | Field to group by | organization |
||||
| IamRoleArn | String[] | AWS IAM role ARNs | |||||
| Migrated | Boolean | Only return migrated Discover for Cloud accounts | |||||
| CspmLite | Boolean | Only return CSPM Lite accounts | |||||
| Limit | Int32 | Maximum number of results per request | 1 |
500 |
|||
| Offset | Int32 | Position to begin retrieving results | |||||
| All | Switch | Repeat requests until all available results are retrieved | |||||
| Total | Switch | Display total result count instead of results |
Get-FalconCloudAwsAccount [-Id <String[]>] [[-OrganizationId] <String[]>] [[-ScanType] <String>] [[-Status] <String>] [[-GroupBy] <String>] [[-IamRoleArn] <String[]>] [[-Migrated] <Boolean>] [[-CspmLite] <Boolean>] [[-Limit] <Int32>] [-Offset <Int32>] [-All] [-Total] [-WhatIf] [-Confirm] [<CommonParameters>]GET /cloud-connect-cspm-aws/entities/account/v1
2024-09-03: PSFalcon v2.2.7
