AWS Cloud Security Integration

FortiCWP provides AWS cloud integration where it imports AWS cloud security findings from Amazon Guard Duty and Amazon Inspector and show those findings through FortiCWP alerts.

Prerequisite

To enable AWS cloud integration with FortiCWP, Amazon Inspector and Amazon Guard Duty needed to be enabled for FortiCWP to gather cloud security traffic data through AWS API services. Follow these steps to enable Amazon Inspector and Amazon Guard Duty.

• Enable Amazon Inspector
• Enable Amazon Guard Duty

Steps to show Amazon Inspector Alerts on FortiCWP

After Amazon Inspector is enabled on AWS, Amazon Inspector findings are imported to FortiCWP and can be found in Alert through filtering.

1. In Alert page, filter by Account, choose AWS accounts.
2. Filter by Alert Type, choose "Integration".
3. Filter by Policy, scroll down to Integration section and choose "Import AWS Integration Alerts".

Steps to show Amazon Guard Duty Alerts on FortiCWP

After Amazon Guard Duty is enabled on AWS, Amazon Guard Duty findings are imported to FortiCWP and can be found in Alert through filtering.

1. Go to Alert page, filter by Account, choose AWS accounts.
2. Filter by Alert Type, choose "Integration".
3. Filter by Policy, scroll down to Integration section and choose "Import AWS Guard Duty Alerts".