Skip to main content

Generate and Download the CFT Template (AWS)



Generates the AWS CFT template. The Generated CFT template includes Prisma Cloud generated externalId and the permissions based on selected features. The CFT template can be used to create IAM role via AWS CloudFormation stack.



    accountType stringrequired

    Possible values: [account, organization]

    Cloud Account Type

    accountId stringrequired

    Account Id

    awsPartition string

    Possible values: [us-east-1, us-gov-west-1]

    Applicable only for Prisma Government Stack( and given if the Cloud account Global Deployment option is enabled

    • us-east-1 - AWS Commercial/Global account

    • us-gov-west-1 - AWS GovCloud account.

    features string[]

    Features for which the permissions should be generated and included in the template.

    To get a list of all the supported features, call Get Supported Features endpoint

    customMemberRoleNameEnabled boolean

    Applicable only when accountType is organization the default is false. However, if set to true, you will be prompted to provide member role when using the terraform CFT template.

    cftType string

    Possible values: [org_member, org_management, org_management_member, account]

    The type of cft that you want to download.

    useTenantExternalId boolean

    Set it to true to use tenantExternalId. The default is false.


Template Generated Successfully