> For the complete documentation index, see [llms.txt](https://docs.prismacloud.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.prismacloud.io/content-collections/data-security-posture-management/prisma-cloud-dspm-deployment/deploy-prisma-cloud-dspm-on-aws/onboarding-aws-organization.md).

# Onboarding AWS Organization

### Prerequisites

* Ensure an orchestrator is deployed within the organization intended for onboarding.
* Ensure the individual performing the onboarding possesses administrative privileges for the organization.

### Procedure

1. Access Prisma Cloud DSPM.
   1. In Prisma Cloud DSPM, go to Preferences > Integrations, and locate the **Cloud Platforms** section.
   2. Click on the **Amazon Web Services** thumbnail, then click **Configure** to access the Amazon Web Services Connect Accounts page.\
      ![](/files/78fFyaxsF4gouZe1l10m)
2. Connect AWS organization.
   1. On the Amazon Web Services Connect Accounts page, select **Add organization** from the **Add New** dropdown menu.\
      ![](/files/wtQJmAtzzbo9FNPJXukj)
   2. Sign in to an AWS account with permissions to execute a stack set across the organization.
   3. Choose the location of the orchestrator for the organization from the dropdown menu.
   4. Click **Generate Template**.\
      ![](/files/0GaivG6rpDhfXMjGrFYn)
3. Copy the template link.
   1. In the Add AWS organization pop-up window, copy the provided template link.
   2. Click **StackSet page**, which redirects to the AWS Sign in page.\
      ![](/files/9DdmGKEiix3GfE4qIFxt)
4. Create a StackSet.
   1. In the sidebar menu, navigate to **StackSets**, and click **Create StackSet** to open the Choose a template window.\
      ![](/files/1yXreQY7XNjWxVBPhUv9)
5. Choose a template.
   1. In the Choose a template window, scroll down to **Specify template** section.
   2. Enter the URL, copied earlier, into the **Amazon S3 URL** field.
   3. Click **Next** to proceed to the Specify StackSet details page.\
      ![](/files/5LCLpn6hxB5cS6qWb25A)
6. Specify StackSet details.
   1. In the **StackSet name** field, provide a meaningful name and an optional description for the **StackSet**.
   2. Click **Next** to proceed to the Configure StackSet options page.\
      ![](/files/UNPY7fw6jPt0sG0dJvca)
7. Configure the StackSet options.
   1. Optionally add tags and select a Managed execution option.
   2. Click **Next** to proceed to the Set deployment options page.\
      ![](/files/QjuviJcJvboAiasU9Ti7)
8. Specify the deployment options.
   1. Choose to deploy Prisma Cloud DSPM at the organization level or select specific organizational units. If you select specific units, specify the units you intend to onboard.
   2. Ensure the **Activated** and **Delete Stacks** options are selected in the Auto-deployment options section.
   3. Since you are creating global IAM roles that are not region specific, you need to select only one region, otherwise the extra executions will fail.
   4. Click **Next** to review the configuration.\
      ![](/files/VBiPs0dzRxJBoACHm0cb)
9. Review and submit.
   1. Scroll down to the foot of the Review page and click Submit to initiate the deployment.\
      ![](/files/48LoHUBBdZnCxvdmfiNo)
10. Track the deployment.
    1. Wait until the stack status changes from Running to Succeeded.
    2. Track the deployment progress of each individual stack in the Stack instances section. Note that the individual accounts are generally populated and viewable in Prisma Cloud DSPM within several minutes.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.prismacloud.io/content-collections/data-security-posture-management/prisma-cloud-dspm-deployment/deploy-prisma-cloud-dspm-on-aws/onboarding-aws-organization.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.