Table: prismacloud_account - Query Prisma Cloud accounts using SQL

The Prisma Cloud account table in Steampipe provides you with information about accounts within Prisma Cloud. This table allows you, as a security engineer or cloud administrator, to query account-specific details, including account type, status, cloud type, and more. You can utilize this table to gather insights on accounts, such as account status, last modification details, and more. The schema outlines the various attributes of the Prisma Cloud account for you, including the account ID, name, and associated groups.

Table Usage Guide

The prismacloud_account table in Steampipe provides information about accounts within Prisma Cloud. This table allows you to query details such as the account's cloud type, status, and more, enabling you to manage and monitor your cloud accounts effectively.

Examples

Basic Info

Retrieve basic information about Prisma Cloud accounts, such as account ID, name, cloud type, and status. This query helps you to understand the overall configuration and status of your accounts.

select
  account_id,
  name,
  cloud_type,
  status,
  enabled
from
  prismacloud_account;

select
  account_id,
  name,
  cloud_type,
  status,
  enabled
from
  prismacloud_account;

List of enabled accounts

Get a list of all enabled Prisma Cloud accounts. This is useful for identifying which accounts are currently active and enabled.

select
  account_id,
  name,
  cloud_type,
  status
from
  prismacloud_account
where
  enabled = true;

select
  account_id,
  name,
  cloud_type,
  status
from
  prismacloud_account
where
  enabled = 1;

Accounts modified by a specific user

Identify accounts that were last modified by a specific user. This helps in tracking changes made by administrators or other users.

select
  account_id,
  name,
  last_modified_by,
  last_modified_ts
from
  prismacloud_account
where
  last_modified_by = 'admin_user';

select
  account_id,
  name,
  last_modified_by,
  last_modified_ts
from
  prismacloud_account
where
  last_modified_by = 'admin_user';

List accounts with storage scan enabled

Retrieve accounts where storage scan is enabled. This is useful for ensuring that storage scanning is properly configured for security purposes.

select
  account_id,
  name,
  storage_scan_enabled
from
  prismacloud_account
where
  storage_scan_enabled = true;

select
  account_id,
  name,
  storage_scan_enabled
from
  prismacloud_account
where
  storage_scan_enabled = 1;

List accounts and their groups

Get a list of accounts along with their associated groups. This can help in understanding the organizational structure and group assignments within your cloud environment.

select
  account_id,
  name,
  group_ids,
  groups
from
  prismacloud_account;

select
  account_id,
  name,
  group_ids,
  groups
from
  prismacloud_account;

Schema for prismacloud_account

Name	Type	Operators	Description
_ctx	jsonb		Steampipe context in JSON form.
account_details	jsonb		The account details based on cloud type.
account_id	text		The unique identifier for the account.
account_type	text		The type of the account.
added_on	bigint		The timestamp when the account was added.
cloud_type	text		The type of cloud (e.g., AWS, Azure, GCP).
email	text	=, !=, ~~, ~~, !~~, !~~	Email address of the current session user.
enabled	boolean		Indicates if the account is enabled.
group_ids	jsonb		The IDs of the groups associated with the account.
groups	jsonb		The groups associated with the account.
ingestion_mode	bigint		The ingestion mode of the account.
last_modified_by	text		The user who last modified the account.
last_modified_ts	timestamp with time zone		The timestamp of the last modification.
name	text		The name of the account.
number_of_child_accounts	bigint		The number of child accounts associated with the account.
protection_mode	text		The protection mode of the account.
sp_connection_name	text	=, !=, ~~, ~~, !~~, !~~	Steampipe connection name.
sp_ctx	jsonb		Steampipe context in JSON form.
status	text		The status of the account.
storage_scan_enabled	boolean		Indicates if the storage scan is enabled.
title	text		Title of the account.

Export

This table is available as a standalone Exporter CLI. Steampipe exporters are stand-alone binaries that allow you to extract data using Steampipe plugins without a database.

You can download the tarball for your platform from the Releases page, but it is simplest to install them with the steampipe_export_installer.sh script:

/bin/sh -c "$(curl -fsSL https://steampipe.io/install/export.sh)" -- prismacloud

You can pass the configuration to the command with the --config argument:

steampipe_export_prismacloud --config '<your_config>' prismacloud_account