What is the primary purpose of registering cloud accounts in Falcon Cloud Security?

The primary purpose of registering a cloud account with Falcon Cloud Security is to establish a secure, API-based connection to the cloud provider's control plane (e.g., AWS, Azure, GCP). This integration grants the Falcon platform the necessary permissions to continuously discover and monitor cloud assets, configurations, and activity logs. This foundational visibility is essential for all Falcon Cloud Security modules, including Cloud Security Posture Management (CSPM) for identifying misconfigurations, Cloud Workload Protection (CWP) for workload discovery, and Cloud Detection and Response (CDR) for identifying threats in the cloud environment.

A. Runtime policy enforcement is a function of the Falcon sensor installed on individual workloads, not the primary purpose of the cloud account API integration.
C. Assigning compliance scores is a specific outcome of the CSPM module, which is enabled by the API integration, but it is not the fundamental purpose of the registration.
D. Falcon identifies identity risks (CIEM) but does not function as a real-time identity provider or access gateway to block unauthorized users directly.

1. CrowdStrike Falcon® Documentation, "Cloud Security: Getting Started," Section: "Connect your cloud accounts." This official guide details that connecting a cloud account allows Falcon to "discover your cloud assets and assess their security posture" by integrating with the cloud provider's APIs. This establishes the monitoring foundation.

2. CrowdStrike Falcon® Documentation, "Cloud Security Posture Management (CSPM)," Section: "How CSPM Works." The documentation specifies that Falcon CSPM "continuously monitors your cloud accounts by integrating with cloud provider APIs to detect misconfigurations, policy violations, and threats." This confirms that API integration is the core mechanism for monitoring.

3. CrowdStrike Falcon® Documentation, "Discover for Cloud and Container Environments," Section: "Cloud account registration." This section explains that registering an account is the first step to "gain visibility into your cloud assets." The process involves granting Falcon read-only permissions to the cloud provider APIs for discovery and assessment.