New AWS::SecurityLake::SubscriptionNotification

Use the AWS::SecurityLake::SubscriptionNotification resource to add a notification method for the subscription (SQS or HTTPs) endpoint in Amazon Security Lake.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscribernotification.html #securitylake #cloudformation

New AWS::SecurityLake::Subscriber

Use the AWS::SecurityLake::Subscriber resource to create subscription permission for accounts that are already enabled in Amazon Security Lake.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscriber.html #securitylake #cloudformation

New AWS::SecurityLake::DataLake

Use the AWS::SecurityLake::DataLake resource to initialize an Amazon Security Lake instance with the provided (or default) configuration.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-datalake.html #securitylake #cloudformation

New AWS::SecurityLake::Subscriber

Use the AWS::SecurityLake::Subscriber resource to create subscription permission for accounts that are already enabled in Amazon Security Lake.
https://docs.aws.amazon.com/AWSCFNSecurityLakeDocs/build/server-root/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-subscriber.html #securitylake #cloudformation

New AWS::SecurityLake::DataLake

Use the AWS::SecurityLake::DataLake resource to initialize an Amazon Security Lake instance with the provided (or default) configuration.
https://docs.aws.amazon.com/AWSCFNSecurityLakeDocs/build/server-root/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-datalake.html #securitylake #cloudformation

New AWS::SecurityLake::AwsLogSource

Use the AWS::SecurityLake::AWSLogSource to add a natively supported AWS service as an Amazon Security Lake source.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-securitylake-awslogsource.html #securitylake #cloudformation

Earlier this year the Open Cybersecurity Schema Framework (#OCSF) was founded to form a new #opensource standard for #cybersecurity data.
Now AWS is implementing the standard into a #SecurityLake service to collect data from a wide ecosystem uniformly into a #datalake.

#reinvent #reinvent2022

I'm really excited by what I'm reading about #AWS Security Lake announced at #reinvent, particularly the use of OCSF (https://github.com/ocsf). If security vendors could agree on a common standard for security logs it would be a huge headache removed, particularly for smaller businesses who rarely have the resources to implement lots of custom log integrations.

Note to vendors - every RFP and sales call from now on I will be asking you whether you support this standard.

#securitylake #ocsf #infosec