[Cloud Security] add external id field (elastic#12329)

* add external id field

* update changelog for external id

* update the configuration correctly

* fix configuration

* fix yaml logic

Author: Omolola-Akinleye

packages/cloud_security_posture/changelog.yml

@@ -1,5 +1,6 @@
 # newer versions go on top
 # version map:
+# 1.13.x - 8.18.x
 # 1.12.x - 8.17.x
 # 1.11.x - 8.16.x
 # 1.10.x - 8.15.x
@@ -11,6 +12,11 @@
 # 1.4.x - 8.9.x
 # 1.3.x - 8.8.x
 # 1.2.x - 8.7.x
+- version: "1.13.0-preview01"
+  changes:
+    - description: Add AWS external_id for cloud connectors flow"
+      type: enhancement
+      link: https://github.com/elastic/integrations/pull/12329
 - version: "1.12.0"
   changes:
     - description: Changed the agentless tags to be a list

packages/cloud_security_posture/data_stream/findings/agent/stream/aws.yml.hbs

@@ -38,6 +38,9 @@ config:
         {{#if role_arn}}
         role_arn: {{role_arn}}
         {{/if}}
+        {{#if aws.credentials.external_id}}
+        external_id: {{aws.credentials.external_id}}
+        {{/if}}
         type: {{aws.credentials.type}}
 {{#if condition}}
 condition: {{ condition }}

packages/cloud_security_posture/data_stream/findings/manifest.yml

@@ -155,6 +155,13 @@ streams:
         required: false
         show_user: false
         secret: false
+      - name: aws.credentials.external_id
+        type: text
+        title: External ID
+        multi: false
+        required: false
+        show_user: false
+        secret: true
   - input: cloudbeat/cis_gcp
     title: CIS GCP Benchmark
     description: CIS Benchmark for Google Cloud Platform Foundation

packages/cloud_security_posture/manifest.yml

@@ -1,7 +1,7 @@
 format_version: 3.2.3
 name: cloud_security_posture
 title: "Security Posture Management"
-version: "1.12.0"
+version: "1.13.0-preview01"
 source:
   license: "Elastic-2.0"
 description: "Identify & remediate configuration risks in your Cloud infrastructure"
@@ -11,7 +11,7 @@ categories:
   - cloudsecurity_cdr
 conditions:
   kibana:
-    version: "^8.17.0 || ^9.0.0"
+    version: "^8.18.0 || ^9.0.0"
   elastic:
     subscription: basic
     capabilities: