What Changed

The CrowdStrike Falcon Data Replicator (CrowdStrike Managed AWS-S3) connector was restored from deprecated status after Microsoft determined that it serves a distinct deployment use case from the standard AWS S3 connector.

Security Impact (Visibility & Fidelity)

The Function App-based CrowdStrike connector was incorrectly marked as deprecated in v3.3.3, potentially leading SOC teams to believe this ingestion path was being phased out. The reversion clarifies that:

  • CrowdStrike Falcon Data Replicator (AWS S3) targets self-managed AWS S3 buckets
  • CrowdStrike Falcon Data Replicator (CrowdStrike Managed AWS-S3) targets CrowdStrike-managed storage with Key/Secret authentication

Both connectors remain actively supported for their respective deployment scenarios. Teams using the Function App-based connector should continue normal operations — no migration or replacement is required.

Affected Files

Solutions/CrowdStrike Falcon Endpoint Protection/Data Connectors/CrowdstrikeReplicatorCLv2/CrowdstrikeReplicatorV2_ConnectorUI.json
(packaging artefacts: 3.3.4.zip, ReleaseNotes.md, Solution_CrowdStrike.json, mainTemplate.json)