Skip to content

Commit 12f2dab

Browse files
authored
Update README.md
1 parent 6ad7763 commit 12f2dab

File tree

1 file changed

+8
-8
lines changed

1 file changed

+8
-8
lines changed

README.md

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -4,21 +4,21 @@
44

55
## Overview
66
Lacework FortiCNAPP can integrate with Amazon Security Lake, an S3 data data lake that is based on the [OCSF standard](https://schema.ocsf.io/).
7-
FortiCNAPP integrates as a data source and provides our real-time security findings. These security findings include software and infrastructure-as-code (IaC) vulnerabilities, cloud resource security misconfigurations, and known and unknown security threat behaviors.
7+
Lacework FortiCNAPP integrates as a data source and provides our real-time security findings. These security findings include software and infrastructure-as-code (IaC) vulnerabilities, cloud resource security misconfigurations, and known and unknown security threat behaviors.
88

99
## NOTE:
10-
You must have a data lake configured in Amazon Security Lake to use this integration. The integration does not provision the data lake, and the event Lambda will fail when attempting to send FortiCNAPP events to the custom S3 data source. Please follow the steps described in the following AWS guide to get started:
10+
You must have a data lake configured in Amazon Security Lake to use this integration. The integration does not provision the data lake, and the event Lambda will fail when attempting to send Lacework FortiCNAPP events to the custom S3 data source. Please follow the steps described in the following AWS guide to get started:
1111
* https://docs.aws.amazon.com/security-lake/latest/userguide/getting-started.html
1212

1313
## Architecture
1414
![Security Lake](https://github.com/user-attachments/assets/536cf7f9-6f53-4e9a-9112-6cc4db95f4bb)
1515

1616
## CloudFormation Deployment
17-
CloudFormation is used to set up the Lacework integration with Security Lake. The CloudFormation template creates the EventBridge rules, IAM permissions, SNS topic, SQS queue, Lambda event transformation function and the FortiCNAPP outbound security alert channel.
17+
CloudFormation is used to set up the Lacework integration with Security Lake. The CloudFormation template creates the EventBridge rules, IAM permissions, SNS topic, SQS queue, Lambda event transformation function and the Lacework FortiCNAPP outbound security alert channel.
1818

1919
### Prerequisites
20-
* Subscription to FortiCNAPP. Acquire through [AWS Marketplace listing](https://aws.amazon.com/marketplace/pp/prodview-uv2dct6bigr54?sr=0-1&ref_=beagle&applicationId=AWSMPContessa).
21-
* Administrator access to a FortiCNAPP instance
20+
* Subscription to Lacework FortiCNAPP. Acquire through [AWS Marketplace listing](https://aws.amazon.com/marketplace/pp/prodview-uv2dct6bigr54?sr=0-1&ref_=beagle&applicationId=AWSMPContessa).
21+
* Administrator access to a Lacework FortiCNAPP instance
2222
* [FortiCNAPP Admin API Key and Secret](https://docs.lacework.com/api/api-access-keys-and-tokens)
2323

2424
### Deploy the CloudFormation Template
@@ -36,8 +36,8 @@ CloudFormation is used to set up the Lacework integration with Security Lake. Th
3636
* Enter the **Security Lake Role ARN**.
3737
* Enter the **Security Lake Role External ID**.
3838
* Enter **Your Lacework URL**.
39-
* If you Lacework instance has the Organization feature enabled, enter the **FortiCNAPP Sub-Account Name**. Otherwise, leave this field blank.
40-
* Enter your **FortiCNAPP Access Key ID** and **FortiCNAPP Secret Key** that you copied from your API Keys file. See [here](https://docs.lacework.com/console/generate-api-access-keys-and-tokens).
39+
* If your Lacework instance has the Organization feature enabled, enter the **Lacework Sub-Account Name**. Otherwise, leave this field blank.
40+
* Enter your **Lacework Access Key ID** and **Lacework Secret Key** that you copied from your API Keys file. See [here](https://docs.lacework.com/console/generate-api-access-keys-and-tokens).
4141

4242
3. Click **Next** through to your stack **Review**.
4343
4. Accept the AWS CloudFormation terms and click **Create stack**.
@@ -60,7 +60,7 @@ To investigate any issues, use the following steps:
6060

6161

6262
#### Security Findings Event Troubleshooting
63-
If there are issues with FortiCNAPP Security Alerts being transformed to OCSF and Amazon Security Lake, investigate the Lambda function _stack-name_-LaceworkAmazonSecurityLakeEventFunction-_xxxx_. It transforms Lacework Security alerts into OCSF Security Findings format and delivers these in Parquet file format to the Security Lake S3 bucket.
63+
If there are issues with Lacework FortiCNAPP Security Alerts being transformed to OCSF and Amazon Security Lake, investigate the Lambda function _stack-name_-LaceworkAmazonSecurityLakeEventFunction-_xxxx_. It transforms Lacework Security alerts into OCSF Security Findings format and delivers these in Parquet file format to the Security Lake S3 bucket.
6464
To investigate any issues, use the following steps:
6565

6666
1. Go to Lambda in your AWS management console.

0 commit comments

Comments
 (0)