Automatically centralize your security data in a few steps

What is Amazon Security Lake?

Amazon Security Lake automatically centralizes security data from AWS environments, SaaS providers, on premises, and cloud sources into a purpose-built data lake stored in your account. With Security Lake, you can get a more complete understanding of your security data across your entire organization. You can also improve the protection of your workloads, applications, and data. Security Lake has adopted the Open Cybersecurity Schema Framework (OCSF), an open standard. With OCSF support, the service normalizes and combines security data from AWS and a broad range of enterprise security data sources.

Benefits of Amazon Security Lake

Use your preferred analytics tools

Use your preferred analytics tools to analyze your security data while retaining complete control and ownership over that data. 

Centralize data visibility

Centralize data visibility from cloud and on-premises sources across your accounts and AWS Regions.

Streamline your data management

Streamline your data management at scale by normalizing your security data to an open standard.

Optimize and manage your security data

Optimize and manage your security data for more efficient storage and query.

Why Security Lake?

Your security teams can use Security Lake to analyze data across your multicloud and hybrid environments to improve the protection of your workloads, applications, and data.

Use cases

Analyze multiple years of security data quickly

Centralize petabytes of data from cloud, on-premises, and custom sources in your Amazon S3 buckets and use your preferred tools for security analytics.

Simplify your compliance monitoring and reporting

Effortlessly centralize security data into one or more rollup Regions, making it easier to monitor and report on compliance.

Facilitate your security investigations with elevated visibility

Give your security teams broader visibility to initiate thorough security investigations and rapid response to security incidents.

Unify security data management across hybrid environments

Equip incident responders with tailored playbooks to enhance incident response processes and strengthen security.