AWS Accounts

The AWS accounts your tenant works with: onboarding one or several so that Prism can reach into them, a pre-flight check that its role can be assumed, paginated listing and single-account reads of Prism's own records, and a guarded removal that refuses while permission set assignments still point at an account.

List AWS accounts

Returns one page of the AWS accounts registered with your tenant, ordered

Get an AWS account

Returns one registered AWS account in full: the identity provider fields

Deboard an AWS account

Deletes Prism's record of an AWS account, refusing while permission set

Onboard one AWS account

Onboards a single AWS account: Prism assumes its role into the account,

Onboard several AWS accounts

Onboards a list of AWS accounts. Each one gets exactly the treatment

Check that Prism can assume its role in an account

Checks whether Prism can assume its switch role in an AWS account, and