List Ancestors (AWS)
POST/cas/v1/aws_account/:account_id/ancestors
Lists the ancestors of the given member accounts and organizational units (OUs) for the specified cloud account ID. A successful response returns an array of accounts and/or OUs each of which is mapped to an array of ancestor resource IDs.
Request
Path Parameters
Account ID
- application/json
Body
required
Cloud Account JSON
AWS Account ID
True to enable ingestion of logs to Prisma Cloud. The default value is True. \n NOTE: Ingestion will be stopped if enabled is set to False
Name
AWS Role ARN
Possible values: [organization
]
Cloud Account Type
Array of resource IDs (account IDs and/or OU IDs)
Responses
- 200
- 400
- 404
- 412
success
- application/json; charset=UTF-8
- Schema
- Example (from schema)
Schema
- Array [
- Array [
- ]
- ]
Resource ID
ancestors object[]
List of ancestors
Node ID
Possible values: [ORG
, FOLDER
, PROJECT
, SUBSCRIPTION
, MANAGEMENT_GROUP
, TENANT
, ACCOUNT
, OU
]
Node type
Display name
Parent
Possible values: [true
, false
]
Has Child
Status
Response code
[
{
"resourceId": "string",
"ancestors": [
{
"id": "string",
"type": "ORG",
"displayName": "string",
"parent": "string",
"hasChild": true
}
],
"status": "string",
"responseCode": 0
}
]
bad_request / unauthorized_access
invalid_account_id_format
external_id_empty_or_not_generated. To generate CFT and externalId call Generate and Download the AWS CFT Template endpoint or Generate the AWS CFT Template Link Endpoint