AWSAccountHierarchy

Determine AWS account hierarchy by looking up parent objects until the organization level is reached.

Details

ID	`AWSAccountHierarchy`
Language	python
From Version	6.10.0
Docker Image	`demisto/python3:3.12.13.10116658`

README

Determine AWS account hierarchy by looking up parent objects until the organization level is reached.

Script Data

Name	Description
Script Type	python3
Cortex XSOAR Version	6.10.0

Dependencies

This script uses the following commands and scripts.

aws-org-parent-list
aws-org-organization-unit-get
aws-org-root-list
aws-org-account-list

Inputs

Argument Name	Description
account_id	The unique identifier (ID) of the Amazon Web Services account that you want information about.

Outputs

Path	Description	Type
AWSHierarchy.id	ID of the account/OU/root object such as `111111111111`.	string
AWSHierarchy.level	Level in relation to the original AWS account such as account, 1, 2, etc.	string
AWSHierarchy.arn	ARN of the account/OU/root object such as `arn:aws:organizations::111111111111:root/o-2222222222/r-3333`.	string
AWSHierarchy.name	Human readable name of the account/OU/root object such as `aws-account-n`.	Unknown

Source

AWSAccountHierarchy.py AWSAccountHierarchy_test.py AWSAccountHierarchy.yml

Download History Raw

args:
- description: 'The unique identifier (ID) of the Amazon Web Services account that you want information about.'
  name: account_id
  required: true
comment: Determine AWS account hierarchy by looking up parent objects until the organization level is reached.
commonfields:
  id: AWSAccountHierarchy
  version: -1
dockerimage: demisto/python3:3.12.13.10116658
enabled: true
engineinfo: {}
name: AWSAccountHierarchy
outputs:
- contextPath: AWSHierarchy.id
  description: ID of the account/OU/root object such as `111111111111`.
  type: string
- contextPath: AWSHierarchy.level
  description: Level in relation to the original AWS account such as account, 1, 2, etc.
  type: string
- contextPath: AWSHierarchy.arn
  description: ARN of the account/OU/root object such as `arn:aws:organizations::111111111111:root/o-2222222222/r-3333`.
  type: string
- contextPath: AWSHierarchy.name
  description: Human readable name of the account/OU/root object such as `aws-account-n`.
runas: DBotWeakRole
runonce: false
script: ''
scripttarget: 0
subtype: python3
tags: []
type: python
fromversion: 6.10.0
tests:
- No tests (auto formatted)
supportedModules:
- agentix
- xsiam