Amazon Security Lake

Managed security data lake that normalises log and finding sources into OCSF Parquet in your own S3 buckets.

Provider: aws
Kind: Object store
Category: Data
Official docs: https://docs.aws.amazon.com/security-lake/latest/userguide/what-is-security-lake.html

Properties · 10 set by this component

property	type	values	required	kind default	this component
checksumOnWrite · advanced	boolean	—	no	false	▸ true
durabilityNines · advanced	integer	—	no	—	▸ 11
encryptionAtRest	boolean	—	no	false	▸ true
encryptionKey · component property	enum	s3-managed \| customer-managed-kms	no	s3-managed	inherited
managed	boolean	—	no	false	▸ true
objectExpiration · component property	boolean	—	no	false	inherited
objectLock	boolean	—	no	false	▸ false
organizationWide · component property	boolean	—	no	false	inherited
replication	enum	none \| primary-secondary \| quorum \| erasure-coded	no	none	▸ erasure-coded
rollupRegion · component property	boolean	—	no	false	inherited
storageClass · component property	enum	standard \| standard-ia \| one-zone-ia \| intelligent-tiering \| glacier \| deep-archive	no	standard	inherited
strongReadAfterWrite · advanced	boolean	—	no	false	▸ true
tier	enum	hot \| warm \| cold	no	hot	▸ hot
versioning	boolean	—	no	false	▸ false
zones	integer	—	no	—	▸ 3

Rules that apply · 1

Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.

Object store in fewer than three zones with a durability targeterror

object-store-single-zone-with-durability-target

Eleven nines of durability assumes redundancy spread over at least three failure domains. An object store confined to fewer zones, or declaring none, cannot reach the target the design states.

— all of these hold:
— the design requirement `durability.annualNines` is a number greater than 10
— any of these hold:
— the node's `zones` has no value
— the node's `zones` is a number less than 3

Use it in a design

nodes:
  - { id: "security-lake", component: "aws-security-lake" }

Other Object store products · 32

Object Storage Servicealibaba-ossalibabacloudobject-store AWS HealthImagingaws-healthimagingawsobject-store AWS HealthOmicsaws-healthomicsawsobject-store Amazon S3 Express One Zoneaws-s3-express-one-zoneawsobject-store Amazon S3 Glacieraws-s3-glacierawsobject-store Amazon S3 Tablesaws-s3-tablesawsobject-store Amazon S3s3awsobject-store Azure Blob Storageazure-blob-storageazureobject-store Azure Data Lake Storageazure-data-lake-storageazureobject-store Microsoft Planetary Computer Proazure-planetary-computerazureobject-store Cache Reservecloudflare-cache-reservecloudflareobject-store Cloudflare Imagescloudflare-imagescloudflareobject-store Cloudflare R2cloudflare-r2cloudflareobject-store Backblaze B2 Cloud Storagebackblaze-b2object-store Blob storeblob-storeobject-store Ceph RADOS Gatewayceph-rgwobject-store Cloudinarycloudinaryobject-store Garagegarageobject-store lakeFSlakefsobject-store MinIOminioobject-store Generic object storeobject-storeobject-store Apache Ozoneozoneobject-store SeaweedFSseaweedfsobject-store Storjstorjobject-store OpenStack Swiftswiftobject-store Wasabi Hot Cloud Storagewasabiobject-store Spaces Object Storagedigitalocean-spacesdigitaloceanobject-store Google Cloud Storagegcsgcpobject-store IBM Cloud Object Storageibm-cloud-object-storageibmobject-store OCI Archive Storageoci-archive-storageociobject-store OCI Object Storageoci-object-storageociobject-store OUTSCALE Object Storage (OOS)outscale-oosoutscaleobject-store

Source

1# yaml-language-server: $schema=../../schema/component.schema.json
2# Amazon Security Lake: a managed security data lake of S3 buckets in your own account holding
3# normalised OCSF data in Apache Parquet. "Lifecycle management in Security Lake": the default
4# storage class is S3 Standard and, with no retention settings, data is stored indefinitely;
5# S3 Object Lock is disabled when the data lake buckets are created. Objects inherit the Amazon S3
6# Standard durability profile (three Availability Zones, eleven nines).
7schemaVersion: "1"
8type: "component"
9id: "aws-security-lake"
10kind: "object-store"
11provider: "aws"
12docs: "https://docs.aws.amazon.com/security-lake/latest/userguide/what-is-security-lake.html"
13defaults:
14  zones: 3
15  durabilityNines: 11
16  replication: "erasure-coded"
17  tier: "hot"
18  objectLock: false
19  strongReadAfterWrite: true
20  checksumOnWrite: true
21  encryptionAtRest: true
22  versioning: false
23  managed: true
24properties:
25  storageClass:
26    type: "enum"
27    values: ["standard", "standard-ia", "one-zone-ia", "intelligent-tiering", "glacier", "deep-archive"]
28    default: "standard"
29  objectExpiration:
30    type: "boolean"
31    default: false
32  encryptionKey:
33    type: "enum"
34    values: ["s3-managed", "customer-managed-kms"]
35    default: "s3-managed"
36  rollupRegion:
37    type: "boolean"
38    default: false
39  organizationWide:
40    type: "boolean"
41    default: false

The same page as markdown, for an agent: /catalogue/components/aws-security-lake.md