capabilities.work

Onboard AWS Log Source

A 3-step recipe with Amazon Security Lake. We can help you get access.

Recipe · 3 steps

Onboard AWS Log Source

with Amazon Security Lake

Enable an AWS-native log source and verify it is registered and collecting.

  1. Add the natively supported AWS service as a Security Lake log source for the requested accounts and regions.
  2. List the log sources in the current region to confirm the AWS source has been registered.
  3. Read the data lake source snapshot for the supplied accounts to confirm the lake is collecting data from the newly added AWS source.
What you'll need to have ready
  • accounts: AWS account IDs to enable the log source for.
  • regions: AWS regions to enable the log source in.
  • sourceName: The native AWS source name (e.g. CLOUD_TRAIL_MGMT, VPC_FLOW).
  • sourceVersion: The version of the AWS log source to enable.
For your developer

Arazzo workflow amazon-security-lake:onboard-aws-log-source, 3 operations: CreateAwsLogSource → ListLogSources → GetDataLakeSources. Specs on APIs.io.

More recipes with Amazon Security Lake

Decommission Data LakeOffboard SubscriberProvision Data LakeProvision SubscriberRegister Custom SourceRename Subscriber