AWS’s new Amazon Safety Lake is a standards-based information lake for safety information • TechCrunch

AWS immediately introduced Amazon Safety Lake, a brand new purpose-built information lake for security-related information. It could actually mixture information from cloud and on-premises infrastructure, firewalls and endpoint safety options. It helps enterprises centralize all of their safety information in a single information lake, utilizing a standards-based format, and handle the lifecycle of this information.

Safety Lake will clearly mixture information from AWS’s personal companies, be these CloudTrail or Lambda, in addition to its personal safety instruments like AWS Safety Hub, GuardDuty or the AWS Firewall Supervisor. However what’s essential right here is that the corporate can also be supporting the brand new Open Cybersecurity Schema Framework (OCSF), for which it not too long ago introduced assist. This framework gives an open specification for safety telemetry information. With this, it’ll be capable of ingest information from the likes of Cisco, CrowdStrike and Palo Alto networks, too.

“Safety information is normally scattered throughout your atmosphere from purposes, firewalls and id suppliers,” AWS CEO Adam Selipsky mentioned immediately.  “To uncover insights like coordinated malicious exercise into your enterprise, it’s important to gather and mixture all of this information, make it accessible to the entire analytics instruments that you simply use to assist menace detection, investigation and incident response — after which maintain the information pipelines up to date and constantly try this as occasions evolve. What this provides as much as is that what you really need is a instrument that makes it straightforward to retailer, to investigate, to grasp developments and to generate insights from safety information.”

That instrument, in fact, is Safety Lake. The service will mechanically partition and convert incoming information to the OCSF format and make it accessible by way of companions like IBM, Splunk and Sumo Logic, for instance.

The brand new service is now accessible in preview in a lot of AWS zones: US East (Ohio), US East (N. Virginia), US West (Oregon), Asia Pacific (Sydney), Asia Pacific (Tokyo), Europe (Frankfurt) and Europe (Eire).