Skip to content

Commit

Permalink
Addressing comments in PR
Browse files Browse the repository at this point in the history
  • Loading branch information
annaone committed Jul 11, 2023
1 parent b29347f commit 77b7656
Show file tree
Hide file tree
Showing 12 changed files with 22 additions and 23 deletions.
4 changes: 2 additions & 2 deletions guide/content/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,8 +6,8 @@ description: CrowdStrike Falcon Horizon monitors your AWS Cloud services to dete

# CrowdStrike Falcon Horizon

This guide is for customers who are building a CrowdStrike Falcon Horizon integration project using the AWS Built-In (ABI) program. It walks you through the process of onboarding your AWS organization with CrowdStrike Falcon Horizon.
This guide is for customers who are building a CrowdStrike Falcon Horizon integration solution using the AWS Built-In (ABI) program. It walks you through the process of onboarding your AWS organization with CrowdStrike Falcon Horizon.

ABI is a differentiation program that validates AWS Partner solutions that have automated their integrations with relevant AWS foundational services such as identity, management, security, and operations. It helps customers find and deploy a validated partner solution that addresses specific customer use cases while providing deep visibility and control of AWS native service integration.

Choose [Overview](/overview/index.html) to get started.
Choose [Overview](/overview/index.html).
4 changes: 2 additions & 2 deletions guide/content/architecture.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ title: Architecture
description: Solution architecture.
---

Deploying this ABI package with default parameters builds the following architecture.
Deploying this ABI solution with default parameters builds the following architecture.

![Architecture diagram](/images/abi-crowdstrike-architecture-diagram.png)

Expand All @@ -29,4 +29,4 @@ As shown in the diagram, the solution sets up the following:
* IAM role that allows Horizon to perform read-only activities.
* IAM role that allows EventBridge to perform PutEvents actions against CrowdStrike's event bus.

**Next:** Choose [Deployment options](/deployment-options/index.html) to get started.
**Next:** Choose [Deployment options](/deployment-options/index.html).
2 changes: 1 addition & 1 deletion guide/content/cleanup-instructions.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
weight: 99
title: Cleanup instructions
description: Instructions to clean up the resources created by the ABI package.
description: Instructions to clean up the resources created by the ABI solution.
---
## Cleanup instructions

Expand Down
2 changes: 1 addition & 1 deletion guide/content/costandlicenses.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,4 +14,4 @@ description: Cost of the solution and licenses required.

<ABI license>

**Next:** Choose [Architecture](/architecture/index.html) to get started.
**Next:** Choose [Architecture](/architecture/index.html).
6 changes: 3 additions & 3 deletions guide/content/deployment-options.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,12 +4,12 @@ title: Deployment options
description: Deployment options.
---

#### Deployment options supported by this ABI package
#### Deployment options supported by this ABI solution

The following deployment options are supported by this ABI package:
The following deployment options are supported by this ABI solution:

* Launch the [CloudFormation template in the AWS Management Console](/launch-using-cloudformation/index.html).
* Launch using [Customizations for AWS Control Tower (CfCT)](/launch-using-cfct/index.html).


**Next:** Choose [Predeployment steps](/pre-deployment-steps/index.html) to get started.
**Next:** Choose [Predeployment steps](/pre-deployment-steps/index.html).
9 changes: 4 additions & 5 deletions guide/content/deployment-steps.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,11 +4,10 @@ title: Deployment steps
description: Deployment steps.
---

## Launch the CloudFormation template in the AWS Organizations management account

## Launch the CloudFormation template in the AWS management account


1. Download the Cloudformation template from the following location: https://<abi-template-location>
1. Download the [Cloudformation template](https://raw.githubusercontent.com/aws-ia/cfn-abi-crowdstrike-fcs/main/templates/horizon_init_stack.yaml?token=GHSAT0AAAAAAB7Y2HOOS42IEBM5LBHOQOWWZFIJEBA).
2. Launch the CloudFormation template in your AWS Control Tower home Region.
* Stack name: `template-crowdstrike-enable-integrations`
* List parameters with default values and update examples as needed:
Expand All @@ -30,7 +29,7 @@ Wait for the CloudFormation status to change to `CREATE_COMPLETE` state.
## Launch using Customizations for Control Tower


[Customizations for AWS Control Tower](https://aws.amazon.com/solutions/implementations/customizations-for-aws-control-tower/) (CfCT) combines AWS Control Tower and other AWS services to help you set up an AWS environment. You can deploy the templates provided with the ABI packages using CfCT.
[Customizations for AWS Control Tower](https://aws.amazon.com/solutions/implementations/customizations-for-aws-control-tower/) (CfCT) combines AWS Control Tower and other AWS services to help you set up an AWS environment. You can deploy the templates provided with the ABI solution using CfCT.

#### Prerequisites

Expand Down Expand Up @@ -58,4 +57,4 @@ resources:
```


**Next:** Choose [Postdeployment options](/post-deployment-steps/index.html) to get started.
**Next:** Choose [Postdeployment options](/post-deployment-steps/index.html).
2 changes: 1 addition & 1 deletion guide/content/faqs.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
weight: 100
title: FAQs
description: Frequently asked questions
description: Frequently asked questions.
---

## How frequently will CrowdStrike Horizon scan my environment for Configuration (IOM) assessment?
Expand Down
2 changes: 1 addition & 1 deletion guide/content/overview.md
Original file line number Diff line number Diff line change
Expand Up @@ -17,4 +17,4 @@ Get started using Horizon by registering your cloud accounts. When registering,

[CrowdStrike Falcon Cloud Security](https://aws.amazon.com/marketplace/pp/prodview-l6ti2ml2i2g6y?ref_=esp&feature_=FeaturedProducts)

**Next:** Choose [Terminologies](/terminologies/index.html) to get started.
**Next:** Choose [Terminologies](/terminologies/index.html).
4 changes: 2 additions & 2 deletions guide/content/post-deployment-steps.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
---
weight: 9
title: PostDeployment Options
title: Postdeployment options
description: Postdeployment options.
---

Expand All @@ -12,4 +12,4 @@ description: Postdeployment options.
3. Verify that each AWS account ID is active in the **Configuration** (IOM) and **Behavior** (IOA) columns.
4. After waiting several minutes, choose **Refresh** to retrieve the latest account status.

**Next:** Choose [Test the deployment](/test-deployment/index.html) to get started.
**Next:** Choose [Test the deployment](/test-deployment/index.html).
4 changes: 2 additions & 2 deletions guide/content/pre-deployment-steps.md
Original file line number Diff line number Diff line change
Expand Up @@ -4,10 +4,10 @@ title: Predeployment steps
description: Predeployment steps.
---

Before deploying this ABI package, complete the following steps:
Before deploying this ABI solution, complete the following steps:

1. Subscribe to the [CrowdStrike Falcon Cloud Security](https://aws.amazon.com/marketplace/pp/prodview-l6ti2ml2i2g6y?ref_=esp&feature_=FeaturedProducts) AWS Marketplace listing.
2. Create the CrowdStrike API client in the Falcon UI with the CSPM registration API scope.
3. Become familiar with the [additional resources](https://link) later in this guide.

**Next:** Choose **[Deployment steps](/deployment-steps/index.html)** to get started.
**Next:** Choose [Deployment steps](/deployment-steps/index.html).
4 changes: 2 additions & 2 deletions guide/content/terminologies.md
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ description: Terminolgies used in this guide.

* **ABI :** AWS Built-In (ABI).
* **ABI modules :** The GitHub repositories based on AWS Security Reference Architecture (AWS SRA). Modules provide templates for enabling AWS foundational services such as AWS CloudTrail, Amazon GuardDuty, AWS Security Hub, etc.
* **ABI projects :** The GitHub repositories built by partners in collaboration with AWS. While building these projects, partners use ABI modules to enable AWS services as needed before creating partner-specific assets. The project contains (1) Infrastructure as Code (IaC) templates to automate enablement of both AWS and partner services, and (2) wrappers for most common formats such as CfCT manifest, SC baselines, and more, so customers can pick and choose from the available services. This solution focuses primarily on including the CfCT manifest file in the package.
* **ABI solutions :** The GitHub repositories built by partners in collaboration with AWS. While building these solution, partners use ABI modules to enable AWS services as needed before creating partner-specific assets. The solution contains (1) Infrastructure as Code (IaC) templates to automate enablement of both AWS and partner services, and (2) wrappers for most common formats such as CfCT manifest, AWS Service Catalog baselines, and more, so customers can pick and choose from the available services.
* **Assessment:** An individual instance when Horizon compares your cloud settings to the Horizon policies.
* **Assessment schedules:** You can select how frequently your cloud environment is assessed for misconfigurations. You can also exclude AWS services and Regions from assessment.
* **Behavioral:** Patterns of suspicious behavior in your cloud environment.
Expand All @@ -18,4 +18,4 @@ description: Terminolgies used in this guide.
* **Indicator of misconfiguration (IOM):** A configuration setting that doesn’t follow recommended security guidelines and might become a security vulnerability in a cloud environment. In Horizon, IOMs are labeled as findings.
* **Registration:** Enroll your AWS account ID with the Horizon service.

**Next:** Choose [Cost and licenses](/costandlicenses/index.html) to get started.
**Next:** Choose [Cost and licenses](/costandlicenses/index.html).
2 changes: 1 addition & 1 deletion guide/content/test-deployment.md
Original file line number Diff line number Diff line change
Expand Up @@ -23,4 +23,4 @@ To test Horizon functionality, you can generate findings by intentionally violat
3. If the policy is Configuration, wait for the next assessment scan for the finding to appear. Two hours is the default interval, but you can change this setting by navigating to **Cloud Security > Cloud Security Posture > Settings**.


**Next:** Choose [Additonal resources](/additional-resources/index.html) to get started.
**Next:** Choose [Additonal resources](/additional-resources/index.html).

0 comments on commit 77b7656

Please sign in to comment.