# Preparing to send findings to Amazon Security Hub CSPM
<a name="prepare-send-findings"></a>

As an APN Partner, you cannot send information to Security Hub CSPM for your customers until the Security Hub CSPM team enables you as a finding provider. To be enabled as a finding provider, you must complete the following onboarding steps. Doing so ensures a positive experience Security Hub CSPM for you and your customers.

As you complete the onboarding steps, be sure to follow the guidelines in [Tenets for creating and updating findings](tenets-update-create-findings.md), [Guidelines for mapping findings into the Amazon Security Finding Format (ASFF)](guidelines-asff-mapping.md), and [Guidelines for using the `BatchImportFindings` API](guidelines-batchimportfindings.md).

1. Map your security findings to the Amazon Security Finding Format (ASFF).

1. Build your integration architecture to push findings to the correct Regional Security Hub CSPM endpoint. To do this, you define whether you will send findings from your own Amazon account or from within your customer's accounts.

1. Have your customers subscribe the product to their account. To do this, they can use the console or the [https://docs.amazonaws.cn/securityhub/1.0/APIReference/API_EnableImportFindingsForProduct.html](https://docs.amazonaws.cn/securityhub/1.0/APIReference/API_EnableImportFindingsForProduct.html) API operation. See [Managing product integrations](https://docs.amazonaws.cn/securityhub/latest/userguide/securityhub-integrations-managing.html) in the *Amazon Security Hub User Guide*.

   You can also subscribe the product for them. To do this, you use a cross-account role to access the [https://docs.amazonaws.cn/securityhub/1.0/APIReference/API_EnableImportFindingsForProduct.html](https://docs.amazonaws.cn/securityhub/1.0/APIReference/API_EnableImportFindingsForProduct.html) API operation on behalf of the customer.

   This step establishes the resource policies that are needed to accept findings from that product for that account.

The following blog posts discuss some of the existing partner integrations with Security Hub CSPM.
+ [Announcing Cloud Custodian Integration with Amazon Security Hub CSPM](https://amazonaws-china.com/blogs/opensource/announcing-cloud-custodian-integration-aws-security-hub/)
+ [Use Amazon Fargate and Prowler to send security configuration findings about Amazon services to Security Hub CSPM](https://amazonaws-china.com/blogs/security/use-aws-fargate-prowler-send-security-configuration-findings-about-aws-services-security-hub/)
+ [How to import Amazon Config rules evaluations as findings in Security Hub CSPM](https://amazonaws-china.com/blogs/security/how-to-import-aws-config-rules-evaluations-findings-security-hub/)