diff --git a/packages/cloud_security_posture/data_stream/findings/manifest.yml b/packages/cloud_security_posture/data_stream/findings/manifest.yml
index 62f194e7ae2..001404b59a9 100644
--- a/packages/cloud_security_posture/data_stream/findings/manifest.yml
+++ b/packages/cloud_security_posture/data_stream/findings/manifest.yml
@@ -117,6 +117,11 @@ streams:
           value: cloud_formation
         - name: aws.account_type
           value: organization-account
+      cloud_formation_single_account:
+        - name: aws.credentials.type
+          value: cloud_formation
+        - name: aws.account_type
+          value: single-account
     vars:
       - name: condition
         title: Condition