Amazon Security Lake
#119 · Level 3 · Modern architecture · SecurityConcept
Section titled “Concept”Amazon Security Lake builds a central data lake for security data, which lives in S3 in your own account. It automatically collects data from sources such as CloudTrail, VPC Flow Logs, Route 53 resolver logs and Security Hub findings. All the data is converted into the format of an open standard called OCSF. This makes it easier to analyze logs from different sources together. AWS services such as Athena, or outside security analytics tools, can use this data.
Simple example
Section titled “Simple example”Keeping the crime records of every police station in one central archive in the same format, so searching is easy.
Why it’s needed
Section titled “Why it’s needed”When security logs are in different places and in different formats, analyzing them is almost impossible.
Where it’s used
Section titled “Where it’s used”Keeping security logs for the long term, and analyzing them with security analytics tools.
Azure equivalent
Section titled “Azure equivalent”Microsoft Sentinel data lake
Learn more
Section titled “Learn more”For details and the latest information, see the official documentation: