Getting started with APN

This page shows how to connect FlowState to AWS Partner Central with the APN setup wizard. You deploy a small connector in your AWS account, then FlowState checks it.

The connector creates:

• an IAM role, FlowStateAPNConnectorSandbox or FlowStateAPNConnectorProduction, that FlowState uses to read and write your co-sell opportunities;
• an EventBridge rule that sends Partner Central changes to FlowState;
• a catalog lock that ties the catalog to your FlowState tenant.

Before you start

Complete the prerequisites. You need a tenant owner or admin in FlowState and someone who can deploy a stack in the AWS account that is linked to Partner Central.

Connect APN

1. In FlowState, go to Settings → Integrations → APN and click Set up APN connector.
2. Read the Overview step and click Start setup.
3. On the Deploy module step, choose the Catalog:
   • Sandbox (recommended) for testing. Opportunities do not affect your live co-sell pipeline.
   • Production for your live Partner Central catalog.
4. Choose how to deploy the connector, and follow the instructions for that tab:
   • CloudFormation (no command line needed)
   • OpenTofu
   • Manual (IAM console)
5. Click I’ve deployed the module.
6. On the Verify role step, paste the role ARN into Role ARN and click Test connection.
7. When you see Role verified and your AWS Partner account ID, click Continue.

Result: the wizard shows You’re connected with your catalog. Settings → Integrations → APN shows APN connector active.

CloudFormation

1. Click Launch in AWS Console. The AWS console opens the quick-create page in the us-east-1 Region, with all parameters filled in.
2. Sign in to the AWS account that is linked to Partner Central, if you are not signed in.
3. Select the check box that allows CloudFormation to create IAM resources with custom names.
4. Click Create stack.
5. Wait until the stack status is CREATE_COMPLETE, about one minute.
6. Open the Outputs tab and copy the value of RoleArn.

OpenTofu

1. In a new directory, save the snippet from the wizard as main.tf. It uses the published FlowState module with your values filled in.
2. Sign in to the AWS account that is linked to Partner Central.
3. Run tofu init && tofu apply and confirm. This takes about 30 seconds.
4. Copy the flowstate_apn_role_arn output.

Manual (IAM console)

The Manual tab shows every value of the resources that the CloudFormation stack and the OpenTofu module create, for the catalog that you chose. Create them in this order, and use the names exactly as the wizard shows them:

1. The catalog lock. In Systems Manager → Parameter Store, in us-east-1, create a String parameter with the name and value from the wizard.
2. The connector role. In IAM → Roles, create the role FlowStateAPNConnectorSandbox or FlowStateAPNConnectorProduction with the custom trust policy from the wizard. Attach the AWS managed policy that the wizard names. Add the inline policy ReadCatalogLock, with your AWS account ID in place of <your-account-id>.
3. The event-forwarding role. Create the role that the wizard names, with its trust policy and the inline policy PutEventsToFlowState.
4. The EventBridge rule. In EventBridge → Rules, in us-east-1, on the default event bus, create the rule with the event pattern from the wizard. As the target, choose the FlowState event bus ARN in the other account, and use the event-forwarding role.
5. Copy the ARN of the connector role.

The trust policy lists several FlowState principals. The wizard shows what each one does.

After you connect

1. Map your HubSpot deal stages to Partner Central stages. A deal in an unmapped stage does not sync. See Deal stage mapping.
2. Optional: set how the HubSpot Amount becomes the monthly spend that AWS gets, under HubSpot to APN Revenue on Settings → Integrations → APN. See Monthly spend.
3. Optional: create templates on Apps → APN → Templates. See Submitting opportunities.
4. Submit your first deal from the FlowState card. See Submitting opportunities.

Connecting APN does not send any deal to AWS. FlowState creates an opportunity only when a seller submits the deal, or when auto-submit is on.

If the connection fails