Overview

By integrating with programs such as APN Customer Engagement (ACE) and ISV Accelerate, ISV/Sellers can scale their co-sell programs more effectively. The integration streamlines the process of managing information about leads and opportunities, reducing manual efforts and eliminating the need to maintain data in two separate systems, such as the Salesforce CRM and AWS Partner Central.

Through the integration, ISV/Sellers can easily manage new opportunities and leads. They can accept new opportunities and leads, receive updates on them from AWS, and send new opportunities and updates on their leads and opportunities to AWS. All of these actions are supported by an AWS-managed S3 bucket, which acts as an intermediary in the bi-directional exchange of files.

Request CRM Integration on AWS Partner Central

Before integrating your ACE pipeline with Suger, you first need to initiate an onboarding request on CRM Integration self-service portal.

1. AWS Console Create AWS IAM User/Role
   Create two empty IAM users or IAM roles, one for sandbox/test environment, and the other for production environment. The name can be arbitrary. A common name is apn-ace-{company}-AccessUser-beta and apn-ace-{company}-AccessUser-prod. We recommend using IAM role as it eliminates the need to pass and store secrets and is more secure.
   You can click this link to create the roles via our Cloud Formation stack.
   The only purpose of these user/role is to access the S3 buckets which are created and owned by APN. The won't need any access to your company's resource.
2. Navigate to CRM Integration self-service portal and click Initiate Onboarding Request button on the bottom.
3. Step 1 - Enter basic information
   • Partner CRM system - Choose Salesforce or HubSpot.
   • What solution would you be using to integrate your CRM with APN? - Choose "Third Party Solution".
   • Name of the third party solution provider - Suger
   • Estimated integration start date - choose the next Monday or the date you prefer.
4. Step 2 - Enter partner contacts
   Third party contact:
   • Email: support@suger.io
   • Partner Role: Third Party Staff
5. Step 3 - Enter the ARN for the user/role you created
6. Step 4 - Set up Sandbox
   APN will set up a sandbox bucket, and generate a policy JSON doc to access it. Copy the JSON content and attach it to the sandbox user/role you created in AWS console. Then you can mark it as completed.
7. Step 5 - Set up Production
   After you mark implementation completed and UAT passed, proceed to the next step and APN will provision the production bucket, with another JSON policy doc. Similar to the sandbox, copy & attach it to the production user/role in AWS console.
8. Step 6 - Launch
   Click the "Submit" button. APN will show that the CRM integration has been "Launched".

After all the steps, you will now have:

1. A production S3 bucket provisioned and owned by APN.
2. An IAM user/role that have access to the bucket.

The sandbox user/role is created only because APN requested for it. It will not be used by Suger.

Now you need to create the ACE integration on Suger Console to delegate the user/role to Suger, so our automated pipelines can manage it for you.

Create Integration on Suger

IAM User with Credentials

1. Create the Access Key (including Access Key ID and Secret Access Key) for the IAM user you created in the AWS IAM console.
2. Visit the integration page of Suger console, click the button 'Connect' in the AWS ACE integration card. There are five fields to input. Select IAM User with Credentials.
   • AWS Partner ID: The number in your bucket name.
   • AWS S3 Bucket Region: The AWS region of the S3 bucket provisioned by AWS ACE team - also in the bucket name.
   • AWS S3 Bucket Name: The Name of the S3 bucket provisioned by AWS ACE team.
   • AWS IAM User ARN: ARN for the user you created in AWS Console.
   • AWS IAM User Access Key Id
   • AWS IAM User Secret Access Key
3. After the connection is created, click the button Verify to finish the verification of the AWS ACE integration. Then all set.

IAM Role with AssumeRole

1. Attach the trust policy below to the IAM role in the AWS IAM console. Ask support@suger.io to get the suger-aws-account-id.

   {     "Version": "2012-10-17",     "Statement": [          {               "Effect": "Allow",               "Principal": {                    "AWS": "arn:aws:iam::{suger-aws-account-id}:root"               },               "Action": "sts:AssumeRole"          }     ]}

2. Visit the integration page of Suger console, click the button 'Connect' in the AWS ACE integration card. There are five fields to input. Select IAM Role with AssumeRole.
   • AWS Partner ID: The number in your bucket name.
   • AWS S3 Bucket Region: The AWS region of the S3 bucket provisioned by AWS ACE team - also in the bucket name.
   • AWS S3 Bucket Name: The Name of the S3 bucket provisioned by AWS ACE team.
   • AWS IAM Role ARN: It is apn-ace-{partnerName}-AccessUser-prod created before.
3. After the connection is created, click the button Verify to finish the verification of the AWS ACE integration. Then all set.

Provide More Details

After the integration is created and verified, we need to collect a little more information:

• ACE Program
• Solution Offering

You need to click the 🖊️Edit button on ACE integration and input the information there:

Solution Offering

Since November 2023, ACE requires all partners to specify "Solution Offerings" when sharing opportunities with AWS. You can register or check your offerings at Partner Central.

Make sure the "Offering status" is shown as ✅Active.

Open the offering, copy the "Offering ID" located at the top left:

Then, input the offering ID and hit Enter, and click Save.

Delete Integration

If you need to delete the AWS Partner Network integration, you can do so like any other integration. Once the deletion is triggered, all integration information, including the access token, will be immediately and permanently deleted from Suger. Please note that there is no time window or any means of recovering the deleted data.