

# AWS Security Hub CSPM console information
<a name="manifest-console-information"></a>

Provide JSON text to the AWS Security Hub CSPM team that contains the following information. Security Hub CSPM uses this information to create your product ARN, display the providers list in the console, and include your proposed managed insights in the Security Hub CSPM insight library.

## Company information
<a name="manifest-console-company-info"></a>

The company information provides information about your company. Here's an example:

```
{
    "id": "example",
    "name": "Example Corp",
    "description": "Example Corp is a network security company that monitors your network for vulnerabilities.",
}
```

The company information contains the following fields:


|  Field  |  Required  |  Description  | 
| --- | --- | --- | 
| `id` | Yes | The company's unique identifier. The company identifier must be unique across companies.<br />This is likely the same as or similar to `name`.<br />Type: String<br />Minimum length: 5 characters<br />Maximum length: 24 characters<br />Allowed characters: lowercase letters, numbers, and hyphens<br />Must begin with a lowercase letter. Must end with a lower case letter or a number. | 
| `name` | Yes | The name of the provider's company to be displayed on the Security Hub CSPM console.<br />Type: String<br />Maximum length: 16 characters | 
| `description` | Yes | The description of the provider's company to be displayed on the Security Hub CSPM console.<br />Type: String<br />Maximum length: 200 characters | 

## Product information
<a name="manifest-console-product-information"></a>

This section provides information about your product. Here's an example:

```
{
    "IntegrationTypes": ["SEND_FINDINGS_TO_SECURITY_HUB"],
    "id": "example-corp-network-defender", 
    "regionsNotSupported": "us-west-1",
    "commercialAccountNumber": "111122223333",
    "govcloudAccountNumber": "444455556666",
    "chinaAccountNumber": "777788889999",
    "name": "Example Corp Product",
    "description": "Example Corp Product is a managed threat detection service.",
    "importType": "BATCH_IMPORT_FINDINGS_FROM_CUSTOMER_ACCOUNT",
    "category": "Intrusion Detection Systems (IDS)",
    "marketplaceUrl": "{{marketplace_url}}",
    "configurationUrl": "{{configuration_url}}"
}
```

The product information contains the following fields.


|  Field  |  Required  |  Description  | 
| --- | --- | --- | 
| `IntegrationType` | Yes | Indicates whether your product sends findings to Security Hub CSPM, receives findings from Security Hub CSPM, or both sends and receives findings.<br />If you are a Consulting Partner, leave this field blank.<br />Type: Array of string<br />Valid values: `SEND_FINDINGS_TO_SECURITY_HUB` \| `RECEIVE_FINDINGS_FROM_SECURITY_HUB` | 
| `id` | Yes | The product's unique identifier. These must be unique within a company. They do not need to be unique across companies. This is likely the same or similar as `name`.<br />Type: String<br />Minimum length: 5 characters<br />Maximum length: 24 characters<br />Allowed characters: lowercase letters, numbers, and hyphens<br />Must begin with a lowercase letter. Must end with a lower case letter or a number. | 
| `regionsNotSupported` | Yes | Which of the following AWS Regions do you not support? In other words, in which Regions should Security Hub CSPM not show you as an option in our partners page in the Security Hub CSPM console?<br />Type: String<br />Provide the Region code only. For example, `us-west-1`.<br />For a list of Regions, see [Regional endpoints](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints) in the *AWS General Reference*.<br />The Region codes for the AWS GovCloud (US) are `us-gov-west-1` (for AWS GovCloud (US-West)) and `us-gov-east-1` (for AWS GovCloud (US-East)).<br />The Region codes for China Regions are `cn-north-1` (for China (Beijing)) and `cn-northwest-1` (for China (Ningxia)). | 
| `commercialAccountNumber` | Yes | The primary AWS account number for the product for the AWS Regions.<br />If you send findings to Security Hub CSPM, then the account you provide is based on where you send the findings from.+  From your AWS account. In this case, provide the account number that you use to submit findings. <br />+  From the customer's AWS account. In this case, Security Hub CSPM recommends that you provide the primary account number that you use to test the integration. <br />Ideally you will use the same account for all of your products across all Regions. If this is not possible, contact the Security Hub CSPM team.<br />If you only receive findings from Security Hub CSPM, this account number is not required.<br />Type: String | 
| `govcloudAccountNumber` | No | The primary AWS account number for the product for AWS GovCloud (US) Regions (if your product is available in AWS GovCloud (US)).<br />If you send findings to Security Hub CSPM, then the account you provide is based on where you send the findings from.+  From your AWS account. In this case, provide the account number that you use to submit findings. <br />+  From the customer's AWS account. In this case, Security Hub CSPM recommends that you provide the primary account number that you use to test the integration. <br />Ideally you use the same account for all of your products across all AWS GovCloud (US) Regions. If this is not possible, contact the Security Hub CSPM team.<br />If you only receive findings from Security Hub CSPM, this account number is not required. <br />Type: String | 
| `chinaAccountNumber` | No | The primary AWS account number for the product for China regions (if your product is available in the China regions).<br />If you send findings to Security Hub CSPM, then the account you provide is based on where you send the findings from.+  From your AWS account. In this case, provide the account number that you use to submit findings. <br />+  From the customer's AWS account. In this case, Security Hub CSPM recommends that you provide the primary account number that you use to test the product integration. <br />Ideally you use the same account for all of your products across all China regions. If this is not possible, contact the Security Hub CSPM team.<br />If you only receive findings from Security Hub CSPM, this can be any account that you own in a China region.<br />Type: String | 
| `name` | Yes | The name of the provider's product to display on the Security Hub CSPM console.<br />Type: String<br />Maximum length: 24 characters | 
| `description` | Yes | The description of the provider's product to display on the Security Hub CSPM console.<br />Type: String<br />Maximum length: 200 characters | 
| `importType` | Yes | The type of resource policy for the partner.<br />During the partner onboarding process, you can specify one of the following resource policies, or you can specify `NEITHER`.+  With `BATCH_IMPORT_FINDINGS_FROM_PRODUCT_ACCOUNT`, you can only send findings to Security Hub from the account listed in your product ARN. <br />+  With `BATCH_IMPORT_FINDINGS_FROM_CUSTOMER_ACCOUNT`, you can only send findings from the customer account that subscribed to you. <br />Type: String<br />Valid values:` BATCH_IMPORT_FINDINGS_FROM_PRODUCT_ACCOUNT` \| `BATCH_IMPORT_FINDINGS_FROM_CUSTOMER_ACCOUNT` \| <br />`NEITHER` | 
| `category` | Yes | The categories that define your product. Your selections are displayed on the Security Hub CSPM console.<br />Choose up to three categories.<br />Custom selections are not allowed. If you think your category is missing, contact the Security Hub CSPM team.<br />Type: Array<br />Available categories:+  `API Firewall` <br />+  `Asset Management` <br />+  `AV Scanning and Sandboxing` <br />+  `Backup and Disaster Recovery` <br />+  `Breach and Attack Simulation`  <br />+  `Bug Bounty Platform` <br />+  `Certificate Management` <br />+  `Cloud Access Security Broker` <br />+  `Cloud Security Posture Management` <br />+  `Configuration and Patch Management` <br />+  `Configuration Management Database (CMDB)` <br />+  `Consulting Partner` <br />+  `Container Security` <br />+  `Cyber Range` <br />+  `Data Access Management` <br />+  `Data Classification` <br />+  `Data Loss Prevention` <br />+  `Data Masking and Tokenization` <br />+  `Database Activity Monitoring` <br />+  `DDoS Protection` <br />+  `Deception` <br />+  `Device Control` <br />+  `Dynamic Application Security Testing` <br />+  `Data Encryption` <br />+  `Email Gateway` <br />+  `Encrypted Search` <br />+  `Endpoint Detection and Response (EDR)` <br />+  `Endpoint Forensics` <br />+  `Forensics Toolkit` <br />+  `Fraud Detection` <br />+  `Governance, Risk, and Compliance (GRC)` <br />+  `Host-based Intrusion Detection (HIDs)` <br />+  `Human Resources Information System` <br />+  `Interactive Application Security Testing (IAST)` <br />+  `Instant Messaging` <br />+  `IoT Security` <br />+  `IT Security Training` <br />+  `IT Ticketing and Incident Management` <br />+  `Managed Security Service Provider (MSSP)` <br />+  `Micro-Segmentation` <br />+  `Multi-Cloud Management` <br />+  `Multi-Factor Authentication`  <br />+  `Network Access Control (NAC)` <br />+  `Network Firewall` <br />+  `Network Forensics` <br />+  `Network Intrusion Detection Systems (IDS)` <br />+  `Network Intrusion Prevention Systems (IPS)` <br />+  `Phishing Simulation and Training` <br />+  `Privacy Operations` <br />+  `Privileged Access Management ` <br />+  `Rogue Device Detection` <br />+  `Runtime Application Self-Protection (RASP)` <br />+  `Secure Web Gateway`  | 
| `marketplaceUrl` | No | The URL to your product AWS Marketplace destination. The URL is displayed in the Security Hub CSPM console.<br />Type: String<br />This must be an AWS Marketplace URL.<br />If you do not have an AWS Marketplace listing, leave this field blank. | 
| `configurationUrl` | Yes | The URL to your product documentation about the integration with Security Hub CSPM. This content is hosted on your website or on a webpage that you manage, such as a GitHub page.<br />Type: String<br />Your documentation should include the following information.+  Configuration instructions <br />+  Links to CloudFormation templates (if necessary) <br />+  Information about your use case for the integration <br />+  Latency <br />+  ASFF mapping <br />+  Types of findings included <br />+  Architecture  | 