PCCSE practice question 10 of 35

A business unit has acquired a company that has a very large AWS account footprint. The plan is to immediately start onboarding the new company’s AWS…

A business unit has acquired a company that has a very large AWS account footprint. The plan is to immediately start onboarding the new company’s AWS accounts into Prisma Cloud Enterprise tenant immediately. The current company is currently not using AWS Organizations and will require each account to be onboarded individually. The business unit has decided to cover the scope of this action and determined that a script should be written to onboard each of these accounts with general settings to gain immediate posture visibility across the accounts. Which API endpoint will specifically add these accounts into the Prisma Cloud Enterprise tenant?

Answer options

A: https://api.prismacloud.io/cloud/

B: https://api.prismacloud.io/account/aws

C: https://api.prismacloud.io/cloud/aws Correct answer

D: https://api.prismacloud.io/accountgroup/aws

Correct Answer:

C. https://api.prismacloud.io/cloud/aws

Explanation

The correct API endpoint to programmatically onboard AWS cloud accounts to a Prisma Cloud Enterprise tenant is https://api.prismacloud.io/cloud/aws. A POST request to this endpoint is used to add a new AWS account. The path /cloud designates the resource type as a cloud service provider, and /aws specifies the particular provider. This endpoint is designed for the singular action of onboarding accounts, which aligns with the scenario's requirement to script the process for multiple individual accounts.

Why Incorrect

A: .../cloud/ is a generic parent endpoint for cloud resources and is not the specific endpoint used for onboarding an AWS account. B: .../account/aws is incorrect. The /account endpoint typically refers to user accounts within the Prisma Cloud platform, not cloud provider accounts. D: .../accountgroup/aws is used for managing account groups (collections of cloud accounts), not for onboarding the individual cloud accounts themselves.

References

1. Palo Alto Networks, "Prisma Cloud API Reference". The "Cloud Accounts" section details the endpoint for "Onboard an AWS Account". The documented request is POST /cloud/aws. This explicitly confirms the correct endpoint structure.

2. Palo Alto Networks, "Prisma Cloud API Reference". The "Account Groups" section shows endpoints like GET /cloud/group and POST /cloud/group, confirming that /accountgroup is not the correct path for this operation.

Keep practicing

Take the free PCCSE practice test

Ten exam-style questions with answers and explanations, plus the exam facts and study guides.

Start the free practice test