AWS Account Registration

| Integration Name | Description | |:-|:-| | Amazon Built In | Use Amazon Built-In to register the AWS Organization or Control Tower with CrowdStrike Cloud Security. | | AWS SCP Analysis | Analyze Service Control Policies (SCPs) in your AWS Organization to identify policies that may prevent CSPM onboarding. | | AWS CSPM Multi-CID | Use CloudFormation templates to register multiple Falcon CIDs to accounts within the AWS Organization. |

AWS Service Integrations

| Integration Name | Description | |:-|:-| | AWS ECR Registry Connections | Use CloudFormation to connect your ECR Registries for Image Assessment. | | AWS CloudTrail Lake with CrowdStrike | Leverage the CrowdStrike Falcon Streaming API to log and store user activity data from the Falcon console in a seamless and efficient way with AWS CloudTrail Lake. | | AWS Network Firewall with CrowdStrike Threat Intelligence | Build capabilities such as automated blocking of malicious domains (via AWS Network Firewall) based on CrowdStrike detection alerts, or perform threat hunting derived from CrowdStrike domain-based Indicators of Activity (IOAs). | | AWS PrivateLink with CrowdStrike Sensor Proxy | Leverage AWS PrivateLink to provide private connectivity between your CrowdStrike-protected workloads and the CrowdStrike cloud. | | AWS Security Hub with CrowdStrike Event Streams API | The Falcon Integration Gateway publishes detections identified by CrowdStrike Falcon for instances residing within Amazon Web Services (AWS) to AWS Security Hub. | | Amazon S3 Protected Bucket with CrowdStrike QuickScan Pro API | S3 Bucket Protection secures your Amazon S3 buckets by scanning files as they are uploaded using the CrowdStrike QuickScan Pro API. | | AWS Verified Access with CrowdStrike Zero Trust Assessment (ZTA) | Using CrowdStrike ZTA, we provide customers the ability to assess their endpoint security posture, allowing AWS Verified Access to provide conditional access to private applications that comply to your organization's device posture policies. | | Amazon Security Lake with CrowdStrike Falcon Data Replicator (FDR) | Transforms your CrowdStrike FDR data into OCSF (Open Cybersecurity Schema Framework) and ingests it into your Amazon Security Lake for centralized management of your security-related logs. | | AWS Verified Access | Integration between CrowdStrike Falcon Zero Trust Assessments (ZTA) and AWS Verified Access. | | AWS Workspaces | Deploy the CrowdStrike Falcon sensor to AWS Workspaces. |

CrowdStrike Sensor Automation

| Integration Name | Description | |:-|:-| | AWS Systems Manager | Utilize AWS Systems Manager to automatically deploy the CrowdStrike Falcon Sensor to your EC2 instances. | | AWS EC2 Image Builder | AWS EC2 Image Builder components for Linux and Windows that install and configure the CrowdStrike Falcon sensor, preparing it as a golden image for your AWS environment. | | AWS EKS Protection | Automatically deploy the CrowdStrike Falcon Sensor to your EKS Clusters in AWS. | | AWS Elastic Beanstalk | Examples of how to deploy the Falcon sensor in AWS Elastic Beanstalk Resources. |