data_lake_sources

Creates, updates, deletes, gets or lists a data_lake_sources resource.

Overview

Name	data_lake_sources
Type	Resource
Id	aws.securitylake.data_lake_sources

Fields

The following fields are returned by SELECT queries:

get_data_lake_sources

Name	Datatype	Description
account	string	The ID of the Security Lake account for which logs are collected.
event_classes	array	The Open Cybersecurity Schema Framework (OCSF) event classes describes the type of data that the custom source will send to Security Lake. For the list of supported event classes, see Supported OCSF Event classes in the Amazon Security Lake User Guide.
source_name	string	The supported Amazon Web Services services from which logs and events are collected. Amazon Security Lake supports log and event collection for natively supported Amazon Web Services services.
source_statuses	array	The log status for the Security Lake account.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_data_lake_sources	select	region		Retrieves a snapshot of the current Region, including whether Amazon Security Lake is enabled for those accounts and which sources Security Lake is collecting data from.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)

SELECT examples

get_data_lake_sources

Retrieves a snapshot of the current Region, including whether Amazon Security Lake is enabled for those accounts and which sources Security Lake is collecting data from.

SELECT
account,
event_classes,
source_name,
source_statuses
FROM aws.securitylake.data_lake_sources
WHERE region = '{{ region }}' -- required
;