args:
- description: List of Prisma Cloud assets to return.
  isArray: true
  name: assets
- defaultValue: id,cloudType,resourceName,resourceType,regionId,accountId,accountName,hasAlert,service,ip,fqdn
  description: Fields to be returned (comma separated string).
  name: fields
  isArray: true
comment: Recursively extracts specified fields from provided list of assets for Prisma Cloud attribution use case.
commonfields:
  id: PrismaCloudAttribution
  version: -1
dockerimage: demisto/python3:3.12.13.10116658
enabled: true
name: PrismaCloudAttribution
outputs:
- contextPath: PrismaCloud.Attribution.accountId
  description: Cloud Account ID.
- contextPath: PrismaCloud.Attribution.accountName
  description: Cloud Account Name.
- contextPath: PrismaCloud.Attribution.cloudType
  description: Cloud Type.
- contextPath: PrismaCloud.Attribution.fqdn
  description: FQDNs associated to the resource.
- contextPath: PrismaCloud.Attribution.rrn
  description: Resource RRN.
- contextPath: PrismaCloud.Attribution.ip
  description: IPs associated to the resource.
- contextPath: PrismaCloud.Attribution.regionId
  description: Cloud Region ID.
- contextPath: PrismaCloud.Attribution.hasAlert
  description: Resource has Prisma Cloud Alert.
- contextPath: PrismaCloud.Attribution.resourceName
  description: Resource Name.
- contextPath: PrismaCloud.Attribution.resourceType
  description: Resource Type.
- contextPath: PrismaCloud.Attribution.service
  description: Cloud Service.
runas: DBotWeakRole
script: ''
scripttarget: 0
subtype: python3
tags: []
type: python
fromversion: 6.0.0
tests:
- No tests (auto formatted)