\nAmazon Web Services, Inc. (AWS), an Amazon.com, Inc. company (NASDAQ: AMZN),today announced the general availability of Amazon Security Lake, a service that automatically centralizes an organization\u2019s security data from across their AWS environments, leading SaaS providers, on-premises environments, and cloud sources into a purpose-built data lake, so customers can act on security data faster and simplify security data management across hybrid and multicloud environments. Amazon Security Lake converts and conforms incoming security data to the Open Cybersecurity Schema Framework<\/a> (OCSF) open standard, making it easier for security teams to automatically collect, combine, and analyze security data from more than 80 sources<\/a>, including AWS, security partners, and analytics providers. Amazon Security Lake is part of a broad set of AWS Cloud security services that build on AWS\u2019s secure infrastructure to help make it the most flexible and secure cloud trusted by millions of customers, including some of the most security-sensitive organizations, and is supported by a broad community of security partners to help customers elevate their security in the cloud. Amazon Security Lake aggregates and optimizes large volumes of disparate log and event data to enable faster threat detection, investigation, and response so organizations can effectively address potential issues quickly, using their preferred analytics tools. To get started with Amazon Security Lake, visit https:\/\/aws.amazon.com\/security-lake<\/a>.<\/p>\n
\n\u201cSecurity has been our top priority since the very beginning, when we were designing to meet the needs of the most security-sensitive organizations,\u201d said Jon Ramsey, vice president for Security Services at AWS. \u201cWe also know that customers need trusted partners to extend the benefits of the cloud and make sure their organizations are secure end-to-end. With more than 80 sources providing data to Amazon Security Lake, security teams can achieve greater visibility into potential security threats and how to respond to them, further protecting the workloads, applications, and data that are critical to driving business forward.\u201d<\/p>\n
\nCustomers want to proactively identify, assess, and respond to potential threats and vulnerabilities. To do this, most organizations rely on log and event data from many different sources (e.g., applications, firewalls, and identity systems) running in the cloud and on premises, each using a different data format. Uncovering security-related insights, like unauthorized external data transfers or malware installations on employee devices, means organizations must aggregate and normalize security data into a consistent schema. Once the data is formatted consistently, customers can analyze it and understand the current level of vulnerability, and then correlate and monitor threats for improved observability. Customers typically use different security solutions to address specific use cases, such as incident response and security analytics. This often means they are duplicating and processing the same data multiple times because each solution has its own data stores and format. Running multiple security solutions is costly and slows down security teams’ ability to detect and respond to issues. To monitor new users, tools, and data sources, security teams must manage a complex set of data access rules and security policies to track how data is used while ensuring that employees can still access the information needed to do their jobs. Some security teams create a central repository for all of their security data in a data lake, but these systems require specialized skills and can take months to build due to the large amounts of data, which can run into petabyte scale, from different sources.<\/p>\n
\nAmazon Security Lake is a purpose-built security data lake that enables customers to aggregate, normalize, and store data so they can respond to security events faster, simplify compliance monitoring and reporting, and unify security data management across hybrid and multicloud environments. The service builds the security data lake using Amazon Simple Storage Service (Amazon S3) and AWS Lake Formation to automatically set up security data lake infrastructure in a customer\u2019s AWS account, providing full control and ownership over security data. To help customers achieve end-to-end security, the AWS Marketplace includes thousands of security solutions. Customers can integrate powerful technology from a wide portfolio of integrated services and partner solutions that can be customized, automated, and scaled to achieve the appropriate level of security for their organizations. With just a few steps, customers can easily create a data lake that collects security data from sources like Amazon VPC Flow Logs and AWS CloudTrail, third-party sources like Splunk, CrowdStrike, Datadog, and Cribl, and their own sources of data. All security data in Amazon Security Lake conforms to the OCSF schema, making it simpler to conduct security investigations with a single, unified view. Customers can use their preferred security and analytics tools, including Amazon Athena, Amazon OpenSearch Service, and Amazon SageMaker, along with leading third-party solutions, to capture broader and deeper analytics quickly and easily.<\/p>\n
\nAmazon Security Lake is generally available today in US East (Ohio), US East (N. Virginia), US West (Oregon), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Europe (Frankfurt), Europe (Ireland), Europe (London), and South America (S\u00e3o Paulo) with availability in additional AWS Regions coming soon.<\/p>\n
\nCribl makes open observability a reality for today\u2019s tech professionals. Cribl’s vendor-agnostic observability product suite gives customers flexibility to route and process data at scale from any source to any destination within their data infrastructure. \u201cWith the explosion of data and the rapidly evolving security landscape, security teams are challenged to continuously monitor, detect, respond to, and mitigate threats,\u201d said Clint Sharp, co-founder and CEO at Cribl. \u201cThrough our integration with Amazon Security Lake, we are excited to provide AWS customers the flexibility to ingest data from third-party sources, transform it to OCSF, then route it to Amazon Security Lake and additional OCSF-enabled tools for enhanced ability to detect and respond to threats. This integration streamlines the process of federated search-in-place queries and selective routing of crucial data to any analytics platform, making it more convenient for customers to use and faster to capture deeper insights.\u201d<\/p>\n
\nCrowdStrike is a global cybersecurity leader with one of the world\u2019s most advanced cloud-native platforms for protecting critical areas of enterprise risk\u2014endpoints and cloud workloads, identity, and data. \u201cStopping breaches requires organizations to break down the silos that exist across their security and technology stack,\u201d said Daniel Bernard, chief business officer at CrowdStrike. \u201cWe have noticed a growing trend among customers who correlate CrowdStrike Falcon telemetry with other security data. As a member of OCSF and a long-time AWS Partner, CrowdStrike enables enriched telemetry from the CrowdStrike Falcon platform to Amazon Security Lake. This delivers superior visibility and protection against modern threats, empowering security teams to leverage this information in their security solutions.\u201d<\/p>\n
\nDatadog is a monitoring and security platform for cloud applications. \u201cBy providing security teams with in-depth contextual insights and advanced analytics, we can enhance their ability to address and reduce false positives,\u201d said Pierre Betouin, senior vice president of Security Products at Datadog. \u201cThe integration between Amazon Security Lake and Datadog platform enables teams to route critical customer logs, including AWS, on-premises, and SAAS logs, to the Datadog Cloud SIEM. This integration provides users with contextual information that helps reduce false positives and enables rapid threat detection and prioritization.\u201d<\/p>\n
\nJumia is a leading e-commerce platform in Africa, offering customers across the continent a wide range of products and services through its marketplace. \u201cWe find Amazon Security Lake to be an indispensable asset that improves our overall security posture and are excited the service is now generally available,\u201d said Pedro Fangueiro, CISO at Jumia. \u201cAmazon Security Lake significantly streamlines our security operations, allowing our teams to efficiently tackle security monitoring use cases, ultimately fortifying our workloads, applications, and data. Amazon Security Lake helps us reduce administrative overhead in critical environments, enabling us to focus on tasks with the highest value to our business.\u201d<\/p>\n
\nNovozymes is a global biotechnology company specializing in the research, development, and production of industrial enzymes, microorganisms, and bio-pharmaceutical ingredients to help businesses grow sustainably, safeguard the planet\u2019s resources, and improve the quality of life for people around the world. \u201cManaging and analyzing security logs and findings for CloudTrail, VPC, Route53, and AWS Security Hub across our hybrid enterprise posed a significant challenge,\u201d said Jacob Kofod, Cloud Architect for Novozymes. \u201cWe started using Amazon Security Lake to help us normalize the security logs and findings, and enables us to swiftly and accurately feed this information to a SIEM with minimal operational overhead. Amazon Security Lake will help Novozymes spend more time on more impactful work like safeguarding the planet\u2019s resources.\u201d<\/p>\n
\nSentinelOne provides AI-powered cybersecurity to prevent threats, reduce risk, and safeguard organizations by providing protection across cloud, endpoints, identity, and data. \u201cTraditional threat hunting and investigations are often challenging and time consuming. The diverse telemetry and log events required for analysis are scattered across various sources, formats, and tools, creating silos that hinder efficiency and effectiveness,\u201d said Jane Wong, senior vice president of Product Management at SentinelOne. \u201cThrough our integration with Amazon Security Lake and leveraging the OCSF schema, customers can now ingest, query, and analyze normalized telemetry within SentinelOne’s Singularity Platform. This streamlined process greatly reduces complexity and enhances efficiency in threat investigations, enabling a unified data source that automatically correlates events, empowering automated correlations of events to reconstruction threats from inception to resolution.\u201d<\/p>\n
\nSplunk is a leading technology company specializing in cybersecurity and observability solutions dedicated to fostering a safer and more resilient digital world. \u201cSplunk is honored to be an AWS launch partner for Amazon Security Lake and a valued member of the Steering Committee for the OCSF project, which aims to establish an open schema for data normalization within the cybersecurity community,\u201d said Mike Horn, senior vice president and general manager of Security at Splunk. \u201cThe integration between Splunk and Amazon Security Lake enables customers to store their data in one unified format, OCSF. This integration not only enhances their ability to accelerate threat detection and investigation of AWS data, but also helps them ensure their compliance with data retention and regulatory requirements.\u201d<\/p>\n
\nVolkswagen Financial Services is a division of Volkswagen AG represented across the world through many different companies in the business segments of banking, leasing, insurance and services, mobility and payment. \u201cAmazon Security Lake makes it easy to centralize all of our security-related log and findings data into a single data lake, providing us with a comprehensive overview,\u201d said Crispin Wei\u00dffu\u00df, head of AWS Managed Platform Services at Volkswagen Financial Services. \u201cThis has made it easier for us to address a variety of security monitoring use cases and improve the protection of our workloads, applications, and data.\u201d<\/p>\n
\nWiz is a cybersecurity startup with a mission to help organizations create secure cloud environments that accelerate their business. \u201cObtaining deeper insights from security data is imperative for organizations to effectively prioritize critical issues,\u201d said Yinon Costica, vice president of Product and co-founder at Wiz. \u201cThrough our integration with Amazon Security Lake, we not only provide those critical insights, but also improve cloud security data sharing, enabling customers to better correlate and leverage issues internally. This integration breaks down security product silos, allowing customers to prioritize security issues, query security analytics, and gain greater visibility into their overall security posture.\u201d<\/p>\n
About Amazon Web Services<\/b><\/p>\n
\nSince 2006, Amazon Web Services has been the world\u2019s most comprehensive and broadly adopted cloud. AWS has been continually expanding its services to support virtually any workload, and it now has more than 200 fully featured services for compute, storage, databases, networking, analytics, machine learning and artificial intelligence (AI), Internet of Things (IoT), mobile, security, hybrid, virtual and augmented reality (VR and AR), media, and application development, deployment, and management from 99 Availability Zones within 31 geographic regions, with announced plans for 15 more Availability Zones and five more AWS Regions in Canada, Israel, Malaysia, New Zealand, and Thailand. Millions of customers\u2014including the fastest-growing startups, largest enterprises, and leading government agencies\u2014trust AWS to power their infrastructure, become more agile, and lower costs. To learn more about AWS, visit aws.amazon.com<\/a>.<\/p>\n About Amazon<\/b><\/p>\n \nAmazon is guided by four principles: customer obsession rather than competitor focus, passion for invention, commitment to operational excellence, and long-term thinking. Amazon strives to be Earth\u2019s Most Customer-Centric Company, Earth\u2019s Best Employer, and Earth\u2019s Safest Place to Work. Customer reviews, 1-Click shopping, personalized recommendations, Prime, Fulfillment by Amazon, AWS, Kindle Direct Publishing, Kindle, Career Choice, Fire tablets, Fire TV, Amazon Echo, Alexa, Just Walk Out technology, Amazon Studios, and The Climate Pledge are some of the things pioneered by Amazon. For more information, visit amazon.com\/about<\/a> and follow @AmazonNews.<\/p>\n View source version on businesswire.com: <\/span>https:\/\/www.businesswire.com\/news\/home\/20230530005134\/en\/<\/a><\/span><\/p>\n \nAmazon.com, Inc. KEYWORDS:<\/b> United States North America Washington<\/p>\n INDUSTRY KEYWORDS:<\/b> Software Networks Internet Data Management Technology Apps\/Applications Mobile\/Wireless Security<\/p>\n<\/p>\n
\n
Media Hotline
\n
Amazon-pr@amazon.com
\n<\/a>
www.amazon.com\/pr<\/a><\/p>\n
![\"Logo\"](\"https:\/\/mms.businesswire.com\/media\/20230530005134\/en\/841482\/3\/AWS_logo_RGB.jpg\"){kind=logo}
<\/td>\n<\/tr>\n