> For the complete documentation index, see [llms.txt](https://docs.prismacloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prismacloud.io/content-collections/connect/connect-cloud-accounts/onboard-aws.md).

# Onboard AWS

Learn how to onboard your AWS organizations and accounts to Prisma Cloud.

To onboard your Amazon Web Services (AWS) organizations (supported on public AWS and AWS GovCloud) or AWS accounts (supported on public AWS, AWS China, and AWS GovCloud) on Prisma Cloud, you must complete some tasks on the AWS management console and some on Prisma Cloud. The onboarding workflow enables you to create a Prisma Cloud role with either read-only access to your traffic flow logs or with limited read-write access to remediate incidents. With the correct permissions, Prisma Cloud can successfully connect to and access your AWS accounts.

| **What do you want to do?**                                                                                                                                  | **Start here**                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    |
| ------------------------------------------------------------------------------------------------------------------------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| <p><strong>First time onboarding of your cloud accounts</strong></p><p>Begin monitoring the assets on your AWS organizations or accounts</p>                 | <ul><li><a href="/pages/6fBXWVahTAj5H8lzjejy">Onboard Your AWS Organization</a></li><li><a href="/pages/hgQJL01sUBAt8DfVtc6Q">Onboard Your AWS Account</a></li></ul>                                                                                                                                                                                                                                                                                                                                                                              |
| <p><strong>After onboarding your cloud accounts</strong></p><p>Ingest data from audit and flow logs, configure vulnerability findings, and data security</p> | <ul><li><a href="/pages/gzvBkYEPzVmmGZC1dNBn">Configure Audit Logs</a></li><li><a href="/pages/o4fOD76bHPbKSbj6zAJc">Configure Flow Logs</a></li><li><a href="https://github.com/PaloAltoNetworks/pc-docs-md/tree/main/enterprise-edition/content-collections/administration/configure-data-security/subscribe-to-data-security/data-security-for-aws-account.md">Configure Data Security</a></li><li><a href="/pages/fIGZmAagC17tsNtWUSc1">Configure DNS Logs</a></li><li><a href="/pages/NABUwqLqtZyi9cjrAuKe">Configure Findings</a></li></ul> |
| <p><strong>Updating your cloud accounts</strong></p><p>Update your onboarded AWS organizations and accounts</p>                                              | <ul><li><a href="/pages/GpKGYjRHtAAknczcYbJj">Update an Onboarded AWS Organization</a></li><li><a href="/pages/WIXdi1C1NxL4ejzLHbaO">Add AWS Member Accounts</a></li><li><a href="/pages/37PlI0FWyZUYgGWsh3Tv">Update an Onboarded AWS Account</a></li><li><a href="/pages/KyDuiYVLkMG3dT3NwRz8">Update an Onboarded AWS Account to AWS Organization</a></li></ul>                                                                                                                                                                                |
| <p><strong>Additional Resources</strong></p><p>Verify supported APIs, troubleshoot errors, or set up Prisma Cloud role manually</p>                          | <ul><li><a href="/pages/BhcpcT8cMeJBWOiY4qoG">AWS APIs Ingested by Prisma Cloud</a></li><li><a href="/pages/iCe5OlPYFrYyWVlmU6Ft">Troubleshoot AWS Onboarding Errors</a></li><li><a href="/pages/dckWeAYy3JkXLiXBmz9z">Prisma Cloud on AWS China</a></li><li><a href="/pages/KdI5huqpkxQA6m6eth6E">Manually Set Up Prisma Cloud Role for AWS Accounts</a></li><li><a href="/pages/6RpFElEcnB2l2cqOSW68">Automate AWS Cloud Accounts Onboarding</a></li></ul>                                                                                      |


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.prismacloud.io/content-collections/connect/connect-cloud-accounts/onboard-aws.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.