Copyright | (c) 2013-2023 Brendan Hay |
---|---|
License | Mozilla Public License, v. 2.0. |
Maintainer | Brendan Hay |
Stability | auto-generated |
Portability | non-portable (GHC extensions) |
Safe Haskell | Safe-Inferred |
Language | Haskell2010 |
- Service Configuration
- Errors
- AccessDeniedException
- AccountNotFoundException
- BucketNotFoundException
- ConcurrentModificationException
- ConflictException
- ConflictSourceNamesException
- ConflictSubscriptionException
- EventBridgeException
- InternalServerException
- InvalidInputException
- ResourceNotFoundException
- S3Exception
- ServiceQuotaExceededException
- ThrottlingException
- ValidationException
- Waiters
- Operations
- CreateAwsLogSource
- CreateCustomLogSource
- CreateDatalake
- CreateDatalakeAutoEnable
- CreateDatalakeDelegatedAdmin
- CreateDatalakeExceptionsSubscription
- CreateSubscriber
- CreateSubscriptionNotificationConfiguration
- DeleteAwsLogSource
- DeleteCustomLogSource
- DeleteDatalake
- DeleteDatalakeAutoEnable
- DeleteDatalakeDelegatedAdmin
- DeleteDatalakeExceptionsSubscription
- DeleteSubscriber
- DeleteSubscriptionNotificationConfiguration
- GetDatalake
- GetDatalakeAutoEnable
- GetDatalakeExceptionsExpiry
- GetDatalakeExceptionsSubscription
- GetDatalakeStatus (Paginated)
- GetSubscriber
- ListDatalakeExceptions (Paginated)
- ListLogSources (Paginated)
- ListSubscribers (Paginated)
- UpdateDatalake
- UpdateDatalakeExceptionsExpiry
- UpdateDatalakeExceptionsSubscription
- UpdateSubscriber
- UpdateSubscriptionNotificationConfiguration
- Types
- AccessType
- AwsLogSourceType
- Dimension
- EndpointProtocol
- HttpsMethod
- OcsfEventClass
- Region
- SettingsStatus
- SourceStatus
- StorageClass
- SubscriptionProtocolType
- SubscriptionStatus
- AccountSources
- AutoEnableNewRegionConfiguration
- Failures
- FailuresResponse
- LakeConfigurationRequest
- LakeConfigurationResponse
- LogsStatus
- ProtocolAndNotificationEndpoint
- RetentionSetting
- SourceType
- SubscriberResource
Derived from API version 2018-05-10
of the AWS service descriptions, licensed under Apache 2.0.
Amazon Security Lake is in preview release. Your use of the Security Lake preview is subject to Section 2 of the Amazon Web Services Service Terms("Betas and Previews").
Amazon Security Lake is a fully managed security data lake service. You can use Security Lake to automatically centralize security data from cloud, on-premises, and custom sources into a data lake that's stored in your Amazon Web Servicesaccount. Amazon Web Services Organizations is an account management service that lets you consolidate multiple Amazon Web Services accounts into an organization that you create and centrally manage. With Organizations, you can create member accounts and invite existing accounts to join your organization. Security Lake helps you analyze security data for a more complete understanding of your security posture across the entire organization. It can also help you improve the protection of your workloads, applications, and data.
The data lake is backed by Amazon Simple Storage Service (Amazon S3) buckets, and you retain ownership over your data.
Amazon Security Lake integrates with CloudTrail, a service that provides a record of actions taken by a user, role, or an Amazon Web Services service in Security Lake CloudTrail captures API calls for Security Lake as events. The calls captured include calls from the Security Lake console and code calls to the Security Lake API operations. If you create a trail, you can enable continuous delivery of CloudTrail events to an Amazon S3 bucket, including events for Security Lake. If you don't configure a trail, you can still view the most recent events in the CloudTrail console in Event history. Using the information collected by CloudTrail you can determine the request that was made to Security Lake, the IP address from which the request was made, who made the request, when it was made, and additional details. To learn more about Security Lake information in CloudTrail, see the Amazon Security Lake User Guide.
Security Lake automates the collection of security-related log and event data from integrated Amazon Web Services and third-party services. It also helps you manage the lifecycle of data with customizable retention and replication settings. Security Lake converts ingested data into Apache Parquet format and a standard open-source schema called the Open Cybersecurity Schema Framework (OCSF).
Other Amazon Web Services and third-party services can subscribe to the data that's stored in Security Lake for incident response and security data analytics.
Synopsis
- defaultService :: Service
- _AccessDeniedException :: AsError a => Fold a ServiceError
- _AccountNotFoundException :: AsError a => Fold a ServiceError
- _BucketNotFoundException :: AsError a => Fold a ServiceError
- _ConcurrentModificationException :: AsError a => Fold a ServiceError
- _ConflictException :: AsError a => Fold a ServiceError
- _ConflictSourceNamesException :: AsError a => Fold a ServiceError
- _ConflictSubscriptionException :: AsError a => Fold a ServiceError
- _EventBridgeException :: AsError a => Fold a ServiceError
- _InternalServerException :: AsError a => Fold a ServiceError
- _InvalidInputException :: AsError a => Fold a ServiceError
- _ResourceNotFoundException :: AsError a => Fold a ServiceError
- _S3Exception :: AsError a => Fold a ServiceError
- _ServiceQuotaExceededException :: AsError a => Fold a ServiceError
- _ThrottlingException :: AsError a => Fold a ServiceError
- _ValidationException :: AsError a => Fold a ServiceError
- data CreateAwsLogSource = CreateAwsLogSource' (Maybe (HashMap Text (HashMap Text [Text]))) (Maybe [Text]) (Maybe (HashMap Text [Text])) [Dimension]
- newCreateAwsLogSource :: CreateAwsLogSource
- data CreateAwsLogSourceResponse = CreateAwsLogSourceResponse' (Maybe [Text]) (Maybe [Text]) Int
- newCreateAwsLogSourceResponse :: Int -> CreateAwsLogSourceResponse
- data CreateCustomLogSource = CreateCustomLogSource' Text OcsfEventClass Text Text
- newCreateCustomLogSource :: Text -> OcsfEventClass -> Text -> Text -> CreateCustomLogSource
- data CreateCustomLogSourceResponse = CreateCustomLogSourceResponse' Int Text Text Text Text Text
- newCreateCustomLogSourceResponse :: Int -> Text -> Text -> Text -> Text -> Text -> CreateCustomLogSourceResponse
- data CreateDatalake = CreateDatalake' (Maybe (HashMap Region LakeConfigurationRequest)) (Maybe Bool) (Maybe Text) (Maybe [Region])
- newCreateDatalake :: CreateDatalake
- data CreateDatalakeResponse = CreateDatalakeResponse' Int
- newCreateDatalakeResponse :: Int -> CreateDatalakeResponse
- data CreateDatalakeAutoEnable = CreateDatalakeAutoEnable' [AutoEnableNewRegionConfiguration]
- newCreateDatalakeAutoEnable :: CreateDatalakeAutoEnable
- data CreateDatalakeAutoEnableResponse = CreateDatalakeAutoEnableResponse' Int
- newCreateDatalakeAutoEnableResponse :: Int -> CreateDatalakeAutoEnableResponse
- data CreateDatalakeDelegatedAdmin = CreateDatalakeDelegatedAdmin' Text
- newCreateDatalakeDelegatedAdmin :: Text -> CreateDatalakeDelegatedAdmin
- data CreateDatalakeDelegatedAdminResponse = CreateDatalakeDelegatedAdminResponse' Int
- newCreateDatalakeDelegatedAdminResponse :: Int -> CreateDatalakeDelegatedAdminResponse
- data CreateDatalakeExceptionsSubscription = CreateDatalakeExceptionsSubscription' Text SubscriptionProtocolType
- newCreateDatalakeExceptionsSubscription :: Text -> SubscriptionProtocolType -> CreateDatalakeExceptionsSubscription
- data CreateDatalakeExceptionsSubscriptionResponse = CreateDatalakeExceptionsSubscriptionResponse' Int
- newCreateDatalakeExceptionsSubscriptionResponse :: Int -> CreateDatalakeExceptionsSubscriptionResponse
- data CreateSubscriber = CreateSubscriber' (Maybe [AccessType]) (Maybe Text) Text Text [SourceType] Text
- newCreateSubscriber :: Text -> Text -> Text -> CreateSubscriber
- data CreateSubscriberResponse = CreateSubscriberResponse' (Maybe Text) (Maybe Text) (Maybe Text) Int Text
- newCreateSubscriberResponse :: Int -> Text -> CreateSubscriberResponse
- data CreateSubscriptionNotificationConfiguration = CreateSubscriptionNotificationConfiguration' (Maybe Bool) (Maybe Text) (Maybe Text) (Maybe HttpsMethod) (Maybe Text) (Maybe Text) Text
- newCreateSubscriptionNotificationConfiguration :: Text -> CreateSubscriptionNotificationConfiguration
- data CreateSubscriptionNotificationConfigurationResponse = CreateSubscriptionNotificationConfigurationResponse' (Maybe Text) Int
- newCreateSubscriptionNotificationConfigurationResponse :: Int -> CreateSubscriptionNotificationConfigurationResponse
- data DeleteAwsLogSource = DeleteAwsLogSource' (Maybe (HashMap Text (HashMap Text [Text]))) (Maybe [Text]) (Maybe (HashMap Text [Text])) [Dimension]
- newDeleteAwsLogSource :: DeleteAwsLogSource
- data DeleteAwsLogSourceResponse = DeleteAwsLogSourceResponse' (Maybe [Text]) (Maybe [Text]) Int
- newDeleteAwsLogSourceResponse :: Int -> DeleteAwsLogSourceResponse
- data DeleteCustomLogSource = DeleteCustomLogSource' Text
- newDeleteCustomLogSource :: Text -> DeleteCustomLogSource
- data DeleteCustomLogSourceResponse = DeleteCustomLogSourceResponse' Int Text
- newDeleteCustomLogSourceResponse :: Int -> Text -> DeleteCustomLogSourceResponse
- data DeleteDatalake = DeleteDatalake' {
- newDeleteDatalake :: DeleteDatalake
- data DeleteDatalakeResponse = DeleteDatalakeResponse' Int
- newDeleteDatalakeResponse :: Int -> DeleteDatalakeResponse
- data DeleteDatalakeAutoEnable = DeleteDatalakeAutoEnable' [AutoEnableNewRegionConfiguration]
- newDeleteDatalakeAutoEnable :: DeleteDatalakeAutoEnable
- data DeleteDatalakeAutoEnableResponse = DeleteDatalakeAutoEnableResponse' Int
- newDeleteDatalakeAutoEnableResponse :: Int -> DeleteDatalakeAutoEnableResponse
- data DeleteDatalakeDelegatedAdmin = DeleteDatalakeDelegatedAdmin' Text
- newDeleteDatalakeDelegatedAdmin :: Text -> DeleteDatalakeDelegatedAdmin
- data DeleteDatalakeDelegatedAdminResponse = DeleteDatalakeDelegatedAdminResponse' Int
- newDeleteDatalakeDelegatedAdminResponse :: Int -> DeleteDatalakeDelegatedAdminResponse
- data DeleteDatalakeExceptionsSubscription = DeleteDatalakeExceptionsSubscription' {
- newDeleteDatalakeExceptionsSubscription :: DeleteDatalakeExceptionsSubscription
- data DeleteDatalakeExceptionsSubscriptionResponse = DeleteDatalakeExceptionsSubscriptionResponse' Int Text
- newDeleteDatalakeExceptionsSubscriptionResponse :: Int -> Text -> DeleteDatalakeExceptionsSubscriptionResponse
- data DeleteSubscriber = DeleteSubscriber' Text
- newDeleteSubscriber :: Text -> DeleteSubscriber
- data DeleteSubscriberResponse = DeleteSubscriberResponse' Int
- newDeleteSubscriberResponse :: Int -> DeleteSubscriberResponse
- data DeleteSubscriptionNotificationConfiguration = DeleteSubscriptionNotificationConfiguration' Text
- newDeleteSubscriptionNotificationConfiguration :: Text -> DeleteSubscriptionNotificationConfiguration
- data DeleteSubscriptionNotificationConfigurationResponse = DeleteSubscriptionNotificationConfigurationResponse' Int
- newDeleteSubscriptionNotificationConfigurationResponse :: Int -> DeleteSubscriptionNotificationConfigurationResponse
- data GetDatalake = GetDatalake' {
- newGetDatalake :: GetDatalake
- data GetDatalakeResponse = GetDatalakeResponse' Int (HashMap Region LakeConfigurationResponse)
- newGetDatalakeResponse :: Int -> GetDatalakeResponse
- data GetDatalakeAutoEnable = GetDatalakeAutoEnable' {
- newGetDatalakeAutoEnable :: GetDatalakeAutoEnable
- data GetDatalakeAutoEnableResponse = GetDatalakeAutoEnableResponse' Int [AutoEnableNewRegionConfiguration]
- newGetDatalakeAutoEnableResponse :: Int -> GetDatalakeAutoEnableResponse
- data GetDatalakeExceptionsExpiry = GetDatalakeExceptionsExpiry' {
- newGetDatalakeExceptionsExpiry :: GetDatalakeExceptionsExpiry
- data GetDatalakeExceptionsExpiryResponse = GetDatalakeExceptionsExpiryResponse' Int Integer
- newGetDatalakeExceptionsExpiryResponse :: Int -> Integer -> GetDatalakeExceptionsExpiryResponse
- data GetDatalakeExceptionsSubscription = GetDatalakeExceptionsSubscription' {
- newGetDatalakeExceptionsSubscription :: GetDatalakeExceptionsSubscription
- data GetDatalakeExceptionsSubscriptionResponse = GetDatalakeExceptionsSubscriptionResponse' Int ProtocolAndNotificationEndpoint
- newGetDatalakeExceptionsSubscriptionResponse :: Int -> ProtocolAndNotificationEndpoint -> GetDatalakeExceptionsSubscriptionResponse
- data GetDatalakeStatus = GetDatalakeStatus' (Maybe [Text]) (Maybe Int) (Maybe Text)
- newGetDatalakeStatus :: GetDatalakeStatus
- data GetDatalakeStatusResponse = GetDatalakeStatusResponse' (Maybe Text) Int [AccountSources]
- newGetDatalakeStatusResponse :: Int -> GetDatalakeStatusResponse
- data GetSubscriber = GetSubscriber' Text
- newGetSubscriber :: Text -> GetSubscriber
- data GetSubscriberResponse = GetSubscriberResponse' (Maybe SubscriberResource) Int
- newGetSubscriberResponse :: Int -> GetSubscriberResponse
- data ListDatalakeExceptions = ListDatalakeExceptions' (Maybe Int) (Maybe Text) (Maybe [Region])
- newListDatalakeExceptions :: ListDatalakeExceptions
- data ListDatalakeExceptionsResponse = ListDatalakeExceptionsResponse' (Maybe Text) Int [FailuresResponse]
- newListDatalakeExceptionsResponse :: Int -> ListDatalakeExceptionsResponse
- data ListLogSources = ListLogSources' (Maybe [Dimension]) (Maybe (HashMap Text (HashMap Text [Text]))) (Maybe [Text]) (Maybe (HashMap Text [Text])) (Maybe Int) (Maybe Text)
- newListLogSources :: ListLogSources
- data ListLogSourcesResponse = ListLogSourcesResponse' (Maybe Text) Int [HashMap Text (HashMap Text [Text])]
- newListLogSourcesResponse :: Int -> ListLogSourcesResponse
- data ListSubscribers = ListSubscribers' (Maybe Int) (Maybe Text)
- newListSubscribers :: ListSubscribers
- data ListSubscribersResponse = ListSubscribersResponse' (Maybe Text) Int [SubscriberResource]
- newListSubscribersResponse :: Int -> ListSubscribersResponse
- data UpdateDatalake = UpdateDatalake' (HashMap Region LakeConfigurationRequest)
- newUpdateDatalake :: UpdateDatalake
- data UpdateDatalakeResponse = UpdateDatalakeResponse' Int
- newUpdateDatalakeResponse :: Int -> UpdateDatalakeResponse
- data UpdateDatalakeExceptionsExpiry = UpdateDatalakeExceptionsExpiry' Natural
- newUpdateDatalakeExceptionsExpiry :: Natural -> UpdateDatalakeExceptionsExpiry
- data UpdateDatalakeExceptionsExpiryResponse = UpdateDatalakeExceptionsExpiryResponse' Int
- newUpdateDatalakeExceptionsExpiryResponse :: Int -> UpdateDatalakeExceptionsExpiryResponse
- data UpdateDatalakeExceptionsSubscription = UpdateDatalakeExceptionsSubscription' Text SubscriptionProtocolType
- newUpdateDatalakeExceptionsSubscription :: Text -> SubscriptionProtocolType -> UpdateDatalakeExceptionsSubscription
- data UpdateDatalakeExceptionsSubscriptionResponse = UpdateDatalakeExceptionsSubscriptionResponse' Int
- newUpdateDatalakeExceptionsSubscriptionResponse :: Int -> UpdateDatalakeExceptionsSubscriptionResponse
- data UpdateSubscriber = UpdateSubscriber' (Maybe Text) (Maybe Text) (Maybe Text) Text [SourceType]
- newUpdateSubscriber :: Text -> UpdateSubscriber
- data UpdateSubscriberResponse = UpdateSubscriberResponse' (Maybe SubscriberResource) Int
- newUpdateSubscriberResponse :: Int -> UpdateSubscriberResponse
- data UpdateSubscriptionNotificationConfiguration = UpdateSubscriptionNotificationConfiguration' (Maybe Bool) (Maybe Text) (Maybe Text) (Maybe HttpsMethod) (Maybe Text) (Maybe Text) Text
- newUpdateSubscriptionNotificationConfiguration :: Text -> UpdateSubscriptionNotificationConfiguration
- data UpdateSubscriptionNotificationConfigurationResponse = UpdateSubscriptionNotificationConfigurationResponse' (Maybe Text) Int
- newUpdateSubscriptionNotificationConfigurationResponse :: Int -> UpdateSubscriptionNotificationConfigurationResponse
- newtype AccessType where
- AccessType' { }
- pattern AccessType_LAKEFORMATION :: AccessType
- pattern AccessType_S3 :: AccessType
- newtype AwsLogSourceType where
- AwsLogSourceType' { }
- pattern AwsLogSourceType_CLOUD_TRAIL :: AwsLogSourceType
- pattern AwsLogSourceType_ROUTE53 :: AwsLogSourceType
- pattern AwsLogSourceType_SH_FINDINGS :: AwsLogSourceType
- pattern AwsLogSourceType_VPC_FLOW :: AwsLogSourceType
- newtype Dimension where
- Dimension' { }
- pattern Dimension_MEMBER :: Dimension
- pattern Dimension_REGION :: Dimension
- pattern Dimension_SOURCE_TYPE :: Dimension
- newtype EndpointProtocol where
- EndpointProtocol' { }
- pattern EndpointProtocol_HTTPS :: EndpointProtocol
- pattern EndpointProtocol_SQS :: EndpointProtocol
- newtype HttpsMethod where
- HttpsMethod' { }
- pattern HttpsMethod_POST :: HttpsMethod
- pattern HttpsMethod_PUT :: HttpsMethod
- newtype OcsfEventClass where
- OcsfEventClass' { }
- pattern OcsfEventClass_ACCESS_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_ACCOUNT_CHANGE :: OcsfEventClass
- pattern OcsfEventClass_AUTHENTICATION :: OcsfEventClass
- pattern OcsfEventClass_AUTHORIZATION :: OcsfEventClass
- pattern OcsfEventClass_CLOUD_API :: OcsfEventClass
- pattern OcsfEventClass_CLOUD_STORAGE :: OcsfEventClass
- pattern OcsfEventClass_CONFIG_STATE :: OcsfEventClass
- pattern OcsfEventClass_CONTAINER_LIFECYCLE :: OcsfEventClass
- pattern OcsfEventClass_DATABASE_LIFECYCLE :: OcsfEventClass
- pattern OcsfEventClass_DHCP_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_DNS_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_ENTITY_MANAGEMENT_AUDIT :: OcsfEventClass
- pattern OcsfEventClass_FILE_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_FTP_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_HTTP_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_INVENTORY_INFO :: OcsfEventClass
- pattern OcsfEventClass_KERNEL_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_KERNEL_EXTENSION :: OcsfEventClass
- pattern OcsfEventClass_MEMORY_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_MODULE_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_NETWORK_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_PROCESS_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_RDP_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_REGISTRY_KEY_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_REGISTRY_VALUE_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_RESOURCE_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_RFB_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_SCHEDULED_JOB_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_SECURITY_FINDING :: OcsfEventClass
- pattern OcsfEventClass_SMB_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_SMTP_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_SSH_ACTIVITY :: OcsfEventClass
- pattern OcsfEventClass_VIRTUAL_MACHINE_ACTIVITY :: OcsfEventClass
- newtype Region where
- Region' {
- fromRegion :: Text
- pattern Region_Ap_northeast_1 :: Region
- pattern Region_Ap_southeast_2 :: Region
- pattern Region_Eu_central_1 :: Region
- pattern Region_Eu_west_1 :: Region
- pattern Region_Us_east_1 :: Region
- pattern Region_Us_east_2 :: Region
- pattern Region_Us_west_2 :: Region
- Region' {
- newtype SettingsStatus where
- SettingsStatus' { }
- pattern SettingsStatus_COMPLETED :: SettingsStatus
- pattern SettingsStatus_FAILED :: SettingsStatus
- pattern SettingsStatus_INITIALIZED :: SettingsStatus
- pattern SettingsStatus_PENDING :: SettingsStatus
- newtype SourceStatus where
- SourceStatus' { }
- pattern SourceStatus_ACTIVE :: SourceStatus
- pattern SourceStatus_DEACTIVATED :: SourceStatus
- pattern SourceStatus_PENDING :: SourceStatus
- newtype StorageClass where
- StorageClass' { }
- pattern StorageClass_DEEP_ARCHIVE :: StorageClass
- pattern StorageClass_EXPIRE :: StorageClass
- pattern StorageClass_GLACIER :: StorageClass
- pattern StorageClass_GLACIER_IR :: StorageClass
- pattern StorageClass_INTELLIGENT_TIERING :: StorageClass
- pattern StorageClass_ONEZONE_IA :: StorageClass
- pattern StorageClass_STANDARD_IA :: StorageClass
- newtype SubscriptionProtocolType where
- SubscriptionProtocolType' { }
- pattern SubscriptionProtocolType_APP :: SubscriptionProtocolType
- pattern SubscriptionProtocolType_EMAIL :: SubscriptionProtocolType
- pattern SubscriptionProtocolType_EMAIL_JSON :: SubscriptionProtocolType
- pattern SubscriptionProtocolType_FIREHOSE :: SubscriptionProtocolType
- pattern SubscriptionProtocolType_HTTP :: SubscriptionProtocolType
- pattern SubscriptionProtocolType_HTTPS :: SubscriptionProtocolType
- pattern SubscriptionProtocolType_LAMBDA :: SubscriptionProtocolType
- pattern SubscriptionProtocolType_SMS :: SubscriptionProtocolType
- pattern SubscriptionProtocolType_SQS :: SubscriptionProtocolType
- newtype SubscriptionStatus where
- SubscriptionStatus' { }
- pattern SubscriptionStatus_ACTIVE :: SubscriptionStatus
- pattern SubscriptionStatus_DEACTIVATED :: SubscriptionStatus
- pattern SubscriptionStatus_PENDING :: SubscriptionStatus
- pattern SubscriptionStatus_READY :: SubscriptionStatus
- data AccountSources = AccountSources' (Maybe OcsfEventClass) (Maybe [LogsStatus]) Text Text
- newAccountSources :: Text -> Text -> AccountSources
- data AutoEnableNewRegionConfiguration = AutoEnableNewRegionConfiguration' Region [AwsLogSourceType]
- newAutoEnableNewRegionConfiguration :: Region -> AutoEnableNewRegionConfiguration
- data Failures = Failures' Text Text ISO8601
- newFailures :: Text -> Text -> UTCTime -> Failures
- data FailuresResponse = FailuresResponse' (Maybe [Failures]) (Maybe Text)
- newFailuresResponse :: FailuresResponse
- data LakeConfigurationRequest = LakeConfigurationRequest' (Maybe Text) (Maybe [Region]) (Maybe Text) (Maybe [RetentionSetting]) (Maybe (HashMap Text Text))
- newLakeConfigurationRequest :: LakeConfigurationRequest
- data LakeConfigurationResponse = LakeConfigurationResponse' (Maybe Text) (Maybe [Region]) (Maybe Text) (Maybe [RetentionSetting]) (Maybe Text) (Maybe SettingsStatus) (Maybe (HashMap Text Text))
- newLakeConfigurationResponse :: LakeConfigurationResponse
- data LogsStatus = LogsStatus' SourceStatus Text
- newLogsStatus :: SourceStatus -> Text -> LogsStatus
- data ProtocolAndNotificationEndpoint = ProtocolAndNotificationEndpoint' (Maybe Text) (Maybe Text)
- newProtocolAndNotificationEndpoint :: ProtocolAndNotificationEndpoint
- data RetentionSetting = RetentionSetting' (Maybe Natural) (Maybe StorageClass)
- newRetentionSetting :: RetentionSetting
- data SourceType = SourceType' (Maybe AwsLogSourceType) (Maybe Text)
- newSourceType :: SourceType
- data SubscriberResource = SubscriberResource' (Maybe [AccessType]) (Maybe ISO8601) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe EndpointProtocol) (Maybe SubscriptionStatus) (Maybe ISO8601) Text [SourceType] Text
- newSubscriberResource :: Text -> Text -> SubscriberResource
Service Configuration
defaultService :: Service Source #
API version 2018-05-10
of the Amazon Security Lake SDK configuration.
Errors
Error matchers are designed for use with the functions provided by
Control.Exception.Lens.
This allows catching (and rethrowing) service specific errors returned
by SecurityLake
.
AccessDeniedException
_AccessDeniedException :: AsError a => Fold a ServiceError Source #
You do not have sufficient access to perform this action. Access denied errors appear when Amazon Security Lake explicitly or implicitly denies an authorization request. An explicit denial occurs when a policy contains a Deny statement for the specific Amazon Web Services action. An implicit denial occurs when there is no applicable Deny statement and also no applicable Allow statement.
AccountNotFoundException
_AccountNotFoundException :: AsError a => Fold a ServiceError Source #
Amazon Security Lake cannot find an Amazon Web Services account with the accountID that you specified, or the account whose credentials you used to make this request isn't a member of an organization.
BucketNotFoundException
_BucketNotFoundException :: AsError a => Fold a ServiceError Source #
Amazon Security Lake generally returns 404 errors if the requested object is missing from the bucket.
ConcurrentModificationException
_ConcurrentModificationException :: AsError a => Fold a ServiceError Source #
More than one process tried to modify a resource at the same time.
ConflictException
_ConflictException :: AsError a => Fold a ServiceError Source #
Occurs when a conflict with a previous successful write is detected. This generally occurs when the previous write did not have time to propagate to the host serving the current request. A retry (with appropriate backoff logic) is the recommended response to this exception.
ConflictSourceNamesException
_ConflictSourceNamesException :: AsError a => Fold a ServiceError Source #
There was a conflict when you attempted to modify a Security Lake source name.
ConflictSubscriptionException
_ConflictSubscriptionException :: AsError a => Fold a ServiceError Source #
A conflicting subscription exception operation is in progress.
EventBridgeException
_EventBridgeException :: AsError a => Fold a ServiceError Source #
Represents an error interacting with the Amazon EventBridge service.
InternalServerException
_InternalServerException :: AsError a => Fold a ServiceError Source #
Internal service exceptions are sometimes caused by transient issues. Before you start troubleshooting, perform the operation again.
InvalidInputException
_InvalidInputException :: AsError a => Fold a ServiceError Source #
The request was rejected because a value that's not valid or is out of range was supplied for an input parameter.
ResourceNotFoundException
_ResourceNotFoundException :: AsError a => Fold a ServiceError Source #
The resource could not be found.
S3Exception
_S3Exception :: AsError a => Fold a ServiceError Source #
Provides an extension of the AmazonServiceException for errors reported by Amazon S3 while processing a request. In particular, this class provides access to the Amazon S3 extended request ID. If Amazon S3 is incorrectly handling a request and you need to contact Amazon, this extended request ID may provide useful debugging information.
ServiceQuotaExceededException
_ServiceQuotaExceededException :: AsError a => Fold a ServiceError Source #
You have exceeded your service quota. To perform the requested action, remove some of the relevant resources, or use Service Quotas to request a service quota increase.
ThrottlingException
_ThrottlingException :: AsError a => Fold a ServiceError Source #
The limit on the number of requests per second was exceeded.
ValidationException
_ValidationException :: AsError a => Fold a ServiceError Source #
Your signing certificate could not be validated.
Waiters
Waiters poll by repeatedly sending a request until some remote success condition
configured by the Wait
specification is fulfilled. The Wait
specification
determines how many attempts should be made, in addition to delay and retry strategies.
Operations
Some AWS operations return results that are incomplete and require subsequent
requests in order to obtain the entire result set. The process of sending
subsequent requests to continue where a previous request left off is called
pagination. For example, the ListObjects
operation of Amazon S3 returns up to
1000 objects at a time, and you must send subsequent requests with the
appropriate Marker in order to retrieve the next page of results.
Operations that have an AWSPager
instance can transparently perform subsequent
requests, correctly setting Markers and other request facets to iterate through
the entire result set of a truncated API operation. Operations which support
this have an additional note in the documentation.
Many operations have the ability to filter results on the server side. See the individual operation parameters for details.
CreateAwsLogSource
data CreateAwsLogSource Source #
See: newCreateAwsLogSource
smart constructor.
CreateAwsLogSource' (Maybe (HashMap Text (HashMap Text [Text]))) (Maybe [Text]) (Maybe (HashMap Text [Text])) [Dimension] |
Instances
newCreateAwsLogSource :: CreateAwsLogSource Source #
Create a value of CreateAwsLogSource
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:enableAllDimensions:CreateAwsLogSource'
, createAwsLogSource_enableAllDimensions
- Enables data collection from specific Amazon Web Services sources in all
specific accounts and specific Regions.
$sel:enableSingleDimension:CreateAwsLogSource'
, createAwsLogSource_enableSingleDimension
- Enables data collection from all Amazon Web Services sources in specific
accounts or Regions.
$sel:enableTwoDimensions:CreateAwsLogSource'
, createAwsLogSource_enableTwoDimensions
- Enables data collection from specific Amazon Web Services sources in
specific accounts or Regions.
$sel:inputOrder:CreateAwsLogSource'
, createAwsLogSource_inputOrder
- Specifies the input order to enable dimensions in Security Lake, namely
Region, source type, and member account.
data CreateAwsLogSourceResponse Source #
See: newCreateAwsLogSourceResponse
smart constructor.
Instances
newCreateAwsLogSourceResponse Source #
Create a value of CreateAwsLogSourceResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:failed:CreateAwsLogSourceResponse'
, createAwsLogSourceResponse_failed
- Lists all accounts in which enabling a natively supported Amazon Web
Service as a Security Lake source failed. The failure occurred as these
accounts are not part of an organization.
$sel:processing:CreateAwsLogSourceResponse'
, createAwsLogSourceResponse_processing
- Lists the accounts that are in the process of enabling a natively
supported Amazon Web Service as a Security Lake source.
$sel:httpStatus:CreateAwsLogSourceResponse'
, createAwsLogSourceResponse_httpStatus
- The response's http status code.
CreateCustomLogSource
data CreateCustomLogSource Source #
See: newCreateCustomLogSource
smart constructor.
Instances
newCreateCustomLogSource Source #
:: Text | |
-> OcsfEventClass | |
-> Text | |
-> Text | |
-> CreateCustomLogSource |
Create a value of CreateCustomLogSource
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:customSourceName:CreateCustomLogSource'
, createCustomLogSource_customSourceName
- The name for a third-party custom source. This must be a Regionally
unique value.
CreateCustomLogSource
, createCustomLogSource_eventClass
- The Open Cybersecurity Schema Framework (OCSF) event class which
describes the type of data that the custom source will send to Security
Lake.
$sel:glueInvocationRoleArn:CreateCustomLogSource'
, createCustomLogSource_glueInvocationRoleArn
- The Amazon Resource Name (ARN) of the Identity and Access Management
(IAM) role to be used by the Glue crawler. The recommended IAM policies
are:
- The managed policy
AWSGlueServiceRole
- A custom policy granting access to your Amazon S3 Data Lake
$sel:logProviderAccountId:CreateCustomLogSource'
, createCustomLogSource_logProviderAccountId
- The Amazon Web Services account ID of the custom source that will write
logs and events into the Amazon S3 Data Lake.
data CreateCustomLogSourceResponse Source #
See: newCreateCustomLogSourceResponse
smart constructor.
Instances
newCreateCustomLogSourceResponse Source #
:: Int | |
-> Text | |
-> Text | |
-> Text | |
-> Text | |
-> Text |
|
-> CreateCustomLogSourceResponse |
Create a value of CreateCustomLogSourceResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateCustomLogSourceResponse'
, createCustomLogSourceResponse_httpStatus
- The response's http status code.
$sel:customDataLocation:CreateCustomLogSourceResponse'
, createCustomLogSourceResponse_customDataLocation
- The location of the partition in the Amazon S3 bucket for Security Lake.
$sel:glueCrawlerName:CreateCustomLogSourceResponse'
, createCustomLogSourceResponse_glueCrawlerName
- The name of the Glue crawler.
$sel:glueDatabaseName:CreateCustomLogSourceResponse'
, createCustomLogSourceResponse_glueDatabaseName
- The Glue database where results are written, such as:
arn:aws:daylight:us-east-1::database/sometable/*
.
$sel:glueTableName:CreateCustomLogSourceResponse'
, createCustomLogSourceResponse_glueTableName
- The table name of the Glue crawler.
$sel:logProviderAccessRoleArn:CreateCustomLogSourceResponse'
, createCustomLogSourceResponse_logProviderAccessRoleArn
- The ARN of the IAM role to be used by the entity putting logs into your
custom source partition. Security Lake will apply the correct access
policies to this role, but you must first manually create the trust
policy for this role. The IAM role name must start with the text
'Security Lake'. The IAM role must trust the logProviderAccountId
to
assume the role.
CreateDatalake
data CreateDatalake Source #
See: newCreateDatalake
smart constructor.
CreateDatalake' (Maybe (HashMap Region LakeConfigurationRequest)) (Maybe Bool) (Maybe Text) (Maybe [Region]) |
Instances
newCreateDatalake :: CreateDatalake Source #
Create a value of CreateDatalake
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:configurations:CreateDatalake'
, createDatalake_configurations
- Specify the Region or Regions that will contribute data to the rollup
region.
$sel:enableAll:CreateDatalake'
, createDatalake_enableAll
- Enable Security Lake in all Regions.
$sel:metaStoreManagerRoleArn:CreateDatalake'
, createDatalake_metaStoreManagerRoleArn
- The Amazon Resource Name (ARN) used to create and update the Glue table.
This table contains partitions generated by the ingestion and
normalization of Amazon Web Services log sources and custom sources.
$sel:regions:CreateDatalake'
, createDatalake_regions
- Enable Security Lake in the specified Regions. To enable Security Lake
in specific Amazon Web Services Regions, such as us-east-1 or
ap-northeast-3, provide the Region codes. For a list of Region codes,
see
Amazon Security Lake endpoints
in the Amazon Web Services General Reference.
data CreateDatalakeResponse Source #
See: newCreateDatalakeResponse
smart constructor.
Instances
newCreateDatalakeResponse Source #
Create a value of CreateDatalakeResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateDatalakeResponse'
, createDatalakeResponse_httpStatus
- The response's http status code.
CreateDatalakeAutoEnable
data CreateDatalakeAutoEnable Source #
See: newCreateDatalakeAutoEnable
smart constructor.
Instances
newCreateDatalakeAutoEnable :: CreateDatalakeAutoEnable Source #
Create a value of CreateDatalakeAutoEnable
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:configurationForNewAccounts:CreateDatalakeAutoEnable'
, createDatalakeAutoEnable_configurationForNewAccounts
- Enable Security Lake with the specified configuration settings to begin
collecting security data for new accounts in your organization.
data CreateDatalakeAutoEnableResponse Source #
See: newCreateDatalakeAutoEnableResponse
smart constructor.
Instances
Generic CreateDatalakeAutoEnableResponse Source # | |
Read CreateDatalakeAutoEnableResponse Source # | |
Show CreateDatalakeAutoEnableResponse Source # | |
NFData CreateDatalakeAutoEnableResponse Source # | |
Defined in Amazonka.SecurityLake.CreateDatalakeAutoEnable rnf :: CreateDatalakeAutoEnableResponse -> () # | |
Eq CreateDatalakeAutoEnableResponse Source # | |
type Rep CreateDatalakeAutoEnableResponse Source # | |
Defined in Amazonka.SecurityLake.CreateDatalakeAutoEnable type Rep CreateDatalakeAutoEnableResponse = D1 ('MetaData "CreateDatalakeAutoEnableResponse" "Amazonka.SecurityLake.CreateDatalakeAutoEnable" "amazonka-securitylake-2.0-4WRm07ESU278sNrKhxoCOb" 'False) (C1 ('MetaCons "CreateDatalakeAutoEnableResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))) |
newCreateDatalakeAutoEnableResponse Source #
Create a value of CreateDatalakeAutoEnableResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateDatalakeAutoEnableResponse'
, createDatalakeAutoEnableResponse_httpStatus
- The response's http status code.
CreateDatalakeDelegatedAdmin
data CreateDatalakeDelegatedAdmin Source #
See: newCreateDatalakeDelegatedAdmin
smart constructor.
Instances
newCreateDatalakeDelegatedAdmin Source #
Create a value of CreateDatalakeDelegatedAdmin
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
CreateDatalakeDelegatedAdmin
, createDatalakeDelegatedAdmin_account
- The Amazon Web Services account ID of the Security Lake delegated
administrator.
data CreateDatalakeDelegatedAdminResponse Source #
See: newCreateDatalakeDelegatedAdminResponse
smart constructor.
Instances
newCreateDatalakeDelegatedAdminResponse Source #
Create a value of CreateDatalakeDelegatedAdminResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateDatalakeDelegatedAdminResponse'
, createDatalakeDelegatedAdminResponse_httpStatus
- The response's http status code.
CreateDatalakeExceptionsSubscription
data CreateDatalakeExceptionsSubscription Source #
See: newCreateDatalakeExceptionsSubscription
smart constructor.
Instances
newCreateDatalakeExceptionsSubscription Source #
:: Text |
|
-> SubscriptionProtocolType | |
-> CreateDatalakeExceptionsSubscription |
Create a value of CreateDatalakeExceptionsSubscription
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:notificationEndpoint:CreateDatalakeExceptionsSubscription'
, createDatalakeExceptionsSubscription_notificationEndpoint
- The Amazon Web Services account where you want to receive exception
notifications.
CreateDatalakeExceptionsSubscription
, createDatalakeExceptionsSubscription_subscriptionProtocol
- The subscription protocol to which exception notifications are posted.
data CreateDatalakeExceptionsSubscriptionResponse Source #
See: newCreateDatalakeExceptionsSubscriptionResponse
smart constructor.
Instances
Generic CreateDatalakeExceptionsSubscriptionResponse Source # | |
Read CreateDatalakeExceptionsSubscriptionResponse Source # | |
Show CreateDatalakeExceptionsSubscriptionResponse Source # | |
NFData CreateDatalakeExceptionsSubscriptionResponse Source # | |
Eq CreateDatalakeExceptionsSubscriptionResponse Source # | |
type Rep CreateDatalakeExceptionsSubscriptionResponse Source # | |
Defined in Amazonka.SecurityLake.CreateDatalakeExceptionsSubscription type Rep CreateDatalakeExceptionsSubscriptionResponse = D1 ('MetaData "CreateDatalakeExceptionsSubscriptionResponse" "Amazonka.SecurityLake.CreateDatalakeExceptionsSubscription" "amazonka-securitylake-2.0-4WRm07ESU278sNrKhxoCOb" 'False) (C1 ('MetaCons "CreateDatalakeExceptionsSubscriptionResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))) |
newCreateDatalakeExceptionsSubscriptionResponse Source #
:: Int |
|
-> CreateDatalakeExceptionsSubscriptionResponse |
Create a value of CreateDatalakeExceptionsSubscriptionResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:CreateDatalakeExceptionsSubscriptionResponse'
, createDatalakeExceptionsSubscriptionResponse_httpStatus
- The response's http status code.
CreateSubscriber
data CreateSubscriber Source #
See: newCreateSubscriber
smart constructor.
CreateSubscriber' (Maybe [AccessType]) (Maybe Text) Text Text [SourceType] Text |
Instances
Create a value of CreateSubscriber
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
CreateSubscriber
, createSubscriber_accessTypes
- The Amazon S3 or Lake Formation access type.
CreateSubscriber
, createSubscriber_subscriberDescription
- The description for your subscriber account in Security Lake.
CreateSubscriber
, createSubscriber_accountId
- The Amazon Web Services account ID used to access your data.
CreateSubscriber
, createSubscriber_externalId
- The external ID of the subscriber. This lets the user that is assuming
the role assert the circumstances in which they are operating. It also
provides a way for the account owner to permit the role to be assumed
only under specific circumstances.
CreateSubscriber
, createSubscriber_sourceTypes
- The supported Amazon Web Services from which logs and events are
collected. Security Lake supports log and event collection for natively
supported Amazon Web Services.
CreateSubscriber
, createSubscriber_subscriberName
- The name of your Security Lake subscriber account.
data CreateSubscriberResponse Source #
See: newCreateSubscriberResponse
smart constructor.
Instances
newCreateSubscriberResponse Source #
:: Int | |
-> Text | |
-> CreateSubscriberResponse |
Create a value of CreateSubscriberResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
CreateSubscriberResponse
, createSubscriberResponse_roleArn
- The Amazon Resource Name (ARN) created by you to provide to the
subscriber. For more information about ARNs and how to use them in
policies, see
IAM identifiers in the Identity and Access Management (IAM) User Guide.
.
CreateSubscriberResponse
, createSubscriberResponse_s3BucketArn
- The ARN for the Amazon S3 bucket.
CreateSubscriberResponse
, createSubscriberResponse_snsArn
- The ARN for the Amazon Simple Notification Service.
$sel:httpStatus:CreateSubscriberResponse'
, createSubscriberResponse_httpStatus
- The response's http status code.
CreateSubscriberResponse
, createSubscriberResponse_subscriptionId
- The subscriptionId
created by the CreateSubscriber
API call.
CreateSubscriptionNotificationConfiguration
data CreateSubscriptionNotificationConfiguration Source #
See: newCreateSubscriptionNotificationConfiguration
smart constructor.
CreateSubscriptionNotificationConfiguration' (Maybe Bool) (Maybe Text) (Maybe Text) (Maybe HttpsMethod) (Maybe Text) (Maybe Text) Text |
Instances
newCreateSubscriptionNotificationConfiguration Source #
Create a value of CreateSubscriptionNotificationConfiguration
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:createSqs:CreateSubscriptionNotificationConfiguration'
, createSubscriptionNotificationConfiguration_createSqs
- Create an Amazon Simple Queue Service queue.
$sel:httpsApiKeyName:CreateSubscriptionNotificationConfiguration'
, createSubscriptionNotificationConfiguration_httpsApiKeyName
- The key name for the notification subscription.
$sel:httpsApiKeyValue:CreateSubscriptionNotificationConfiguration'
, createSubscriptionNotificationConfiguration_httpsApiKeyValue
- The key value for the notification subscription.
$sel:httpsMethod:CreateSubscriptionNotificationConfiguration'
, createSubscriptionNotificationConfiguration_httpsMethod
- The HTTPS method used for the notification subscription.
CreateSubscriptionNotificationConfiguration
, createSubscriptionNotificationConfiguration_roleArn
- The Amazon Resource Name (ARN) of the EventBridge API destinations IAM
role that you created.
CreateSubscriptionNotificationConfiguration
, createSubscriptionNotificationConfiguration_subscriptionEndpoint
- The subscription endpoint in Security Lake. If you prefer notification
with an HTTPs endpoint, populate this field.
CreateSubscriptionNotificationConfiguration
, createSubscriptionNotificationConfiguration_subscriptionId
- The subscription ID for the notification subscription/
data CreateSubscriptionNotificationConfigurationResponse Source #
See: newCreateSubscriptionNotificationConfigurationResponse
smart constructor.
Instances
newCreateSubscriptionNotificationConfigurationResponse Source #
:: Int |
|
-> CreateSubscriptionNotificationConfigurationResponse |
Create a value of CreateSubscriptionNotificationConfigurationResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:queueArn:CreateSubscriptionNotificationConfigurationResponse'
, createSubscriptionNotificationConfigurationResponse_queueArn
- Returns the Amazon Resource Name (ARN) of the queue.
$sel:httpStatus:CreateSubscriptionNotificationConfigurationResponse'
, createSubscriptionNotificationConfigurationResponse_httpStatus
- The response's http status code.
DeleteAwsLogSource
data DeleteAwsLogSource Source #
See: newDeleteAwsLogSource
smart constructor.
DeleteAwsLogSource' (Maybe (HashMap Text (HashMap Text [Text]))) (Maybe [Text]) (Maybe (HashMap Text [Text])) [Dimension] |
Instances
newDeleteAwsLogSource :: DeleteAwsLogSource Source #
Create a value of DeleteAwsLogSource
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:disableAllDimensions:DeleteAwsLogSource'
, deleteAwsLogSource_disableAllDimensions
- Removes the specific Amazon Web Services sources from specific accounts
and specific Regions.
$sel:disableSingleDimension:DeleteAwsLogSource'
, deleteAwsLogSource_disableSingleDimension
- Removes all Amazon Web Services sources from specific accounts or
Regions.
$sel:disableTwoDimensions:DeleteAwsLogSource'
, deleteAwsLogSource_disableTwoDimensions
- Remove a specific Amazon Web Services source from specific accounts or
Regions.
$sel:inputOrder:DeleteAwsLogSource'
, deleteAwsLogSource_inputOrder
- This is a mandatory input. Specify the input order to disable dimensions
in Security Lake, namely Region (Amazon Web Services Region code, source
type, and member (account ID of a specific Amazon Web Services account).
data DeleteAwsLogSourceResponse Source #
See: newDeleteAwsLogSourceResponse
smart constructor.
Instances
newDeleteAwsLogSourceResponse Source #
Create a value of DeleteAwsLogSourceResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:failed:DeleteAwsLogSourceResponse'
, deleteAwsLogSourceResponse_failed
- Deletion of the Amazon Web Services sources failed as the account is not
a part of the organization.
$sel:processing:DeleteAwsLogSourceResponse'
, deleteAwsLogSourceResponse_processing
- Deletion of the Amazon Web Services sources is in progress.
$sel:httpStatus:DeleteAwsLogSourceResponse'
, deleteAwsLogSourceResponse_httpStatus
- The response's http status code.
DeleteCustomLogSource
data DeleteCustomLogSource Source #
See: newDeleteCustomLogSource
smart constructor.
Instances
newDeleteCustomLogSource Source #
Create a value of DeleteCustomLogSource
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:customSourceName:DeleteCustomLogSource'
, deleteCustomLogSource_customSourceName
- The custom source name for the custom log source.
data DeleteCustomLogSourceResponse Source #
See: newDeleteCustomLogSourceResponse
smart constructor.
Instances
newDeleteCustomLogSourceResponse Source #
:: Int | |
-> Text | |
-> DeleteCustomLogSourceResponse |
Create a value of DeleteCustomLogSourceResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteCustomLogSourceResponse'
, deleteCustomLogSourceResponse_httpStatus
- The response's http status code.
$sel:customDataLocation:DeleteCustomLogSourceResponse'
, deleteCustomLogSourceResponse_customDataLocation
- The location of the partition in the Amazon S3 bucket for Security Lake.
DeleteDatalake
data DeleteDatalake Source #
See: newDeleteDatalake
smart constructor.
Instances
newDeleteDatalake :: DeleteDatalake Source #
Create a value of DeleteDatalake
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
data DeleteDatalakeResponse Source #
See: newDeleteDatalakeResponse
smart constructor.
Instances
newDeleteDatalakeResponse Source #
Create a value of DeleteDatalakeResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteDatalakeResponse'
, deleteDatalakeResponse_httpStatus
- The response's http status code.
DeleteDatalakeAutoEnable
data DeleteDatalakeAutoEnable Source #
See: newDeleteDatalakeAutoEnable
smart constructor.
Instances
newDeleteDatalakeAutoEnable :: DeleteDatalakeAutoEnable Source #
Create a value of DeleteDatalakeAutoEnable
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:removeFromConfigurationForNewAccounts:DeleteDatalakeAutoEnable'
, deleteDatalakeAutoEnable_removeFromConfigurationForNewAccounts
- Delete Amazon Security Lake with the specified configuration settings to
stop ingesting security data for new accounts in Security Lake.
data DeleteDatalakeAutoEnableResponse Source #
See: newDeleteDatalakeAutoEnableResponse
smart constructor.
Instances
Generic DeleteDatalakeAutoEnableResponse Source # | |
Read DeleteDatalakeAutoEnableResponse Source # | |
Show DeleteDatalakeAutoEnableResponse Source # | |
NFData DeleteDatalakeAutoEnableResponse Source # | |
Defined in Amazonka.SecurityLake.DeleteDatalakeAutoEnable rnf :: DeleteDatalakeAutoEnableResponse -> () # | |
Eq DeleteDatalakeAutoEnableResponse Source # | |
type Rep DeleteDatalakeAutoEnableResponse Source # | |
Defined in Amazonka.SecurityLake.DeleteDatalakeAutoEnable type Rep DeleteDatalakeAutoEnableResponse = D1 ('MetaData "DeleteDatalakeAutoEnableResponse" "Amazonka.SecurityLake.DeleteDatalakeAutoEnable" "amazonka-securitylake-2.0-4WRm07ESU278sNrKhxoCOb" 'False) (C1 ('MetaCons "DeleteDatalakeAutoEnableResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))) |
newDeleteDatalakeAutoEnableResponse Source #
Create a value of DeleteDatalakeAutoEnableResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteDatalakeAutoEnableResponse'
, deleteDatalakeAutoEnableResponse_httpStatus
- The response's http status code.
DeleteDatalakeDelegatedAdmin
data DeleteDatalakeDelegatedAdmin Source #
See: newDeleteDatalakeDelegatedAdmin
smart constructor.
Instances
newDeleteDatalakeDelegatedAdmin Source #
Create a value of DeleteDatalakeDelegatedAdmin
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
DeleteDatalakeDelegatedAdmin
, deleteDatalakeDelegatedAdmin_account
- The account ID the Security Lake delegated administrator.
data DeleteDatalakeDelegatedAdminResponse Source #
See: newDeleteDatalakeDelegatedAdminResponse
smart constructor.
Instances
newDeleteDatalakeDelegatedAdminResponse Source #
Create a value of DeleteDatalakeDelegatedAdminResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteDatalakeDelegatedAdminResponse'
, deleteDatalakeDelegatedAdminResponse_httpStatus
- The response's http status code.
DeleteDatalakeExceptionsSubscription
data DeleteDatalakeExceptionsSubscription Source #
See: newDeleteDatalakeExceptionsSubscription
smart constructor.
Instances
newDeleteDatalakeExceptionsSubscription :: DeleteDatalakeExceptionsSubscription Source #
Create a value of DeleteDatalakeExceptionsSubscription
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
data DeleteDatalakeExceptionsSubscriptionResponse Source #
See: newDeleteDatalakeExceptionsSubscriptionResponse
smart constructor.
Instances
Generic DeleteDatalakeExceptionsSubscriptionResponse Source # | |
Read DeleteDatalakeExceptionsSubscriptionResponse Source # | |
Show DeleteDatalakeExceptionsSubscriptionResponse Source # | |
NFData DeleteDatalakeExceptionsSubscriptionResponse Source # | |
Eq DeleteDatalakeExceptionsSubscriptionResponse Source # | |
type Rep DeleteDatalakeExceptionsSubscriptionResponse Source # | |
Defined in Amazonka.SecurityLake.DeleteDatalakeExceptionsSubscription type Rep DeleteDatalakeExceptionsSubscriptionResponse = D1 ('MetaData "DeleteDatalakeExceptionsSubscriptionResponse" "Amazonka.SecurityLake.DeleteDatalakeExceptionsSubscription" "amazonka-securitylake-2.0-4WRm07ESU278sNrKhxoCOb" 'False) (C1 ('MetaCons "DeleteDatalakeExceptionsSubscriptionResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int) :*: S1 ('MetaSel ('Just "status") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text))) |
newDeleteDatalakeExceptionsSubscriptionResponse Source #
:: Int |
|
-> Text | |
-> DeleteDatalakeExceptionsSubscriptionResponse |
Create a value of DeleteDatalakeExceptionsSubscriptionResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteDatalakeExceptionsSubscriptionResponse'
, deleteDatalakeExceptionsSubscriptionResponse_httpStatus
- The response's http status code.
DeleteDatalakeExceptionsSubscriptionResponse
, deleteDatalakeExceptionsSubscriptionResponse_status
- Retrieves the status of the delete Security Lake operation for an
account.
DeleteSubscriber
data DeleteSubscriber Source #
See: newDeleteSubscriber
smart constructor.
Instances
Create a value of DeleteSubscriber
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:id:DeleteSubscriber'
, deleteSubscriber_id
- A value created by Security Lake that uniquely identifies your
DeleteSubscriber
API request.
data DeleteSubscriberResponse Source #
See: newDeleteSubscriberResponse
smart constructor.
Instances
newDeleteSubscriberResponse Source #
Create a value of DeleteSubscriberResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteSubscriberResponse'
, deleteSubscriberResponse_httpStatus
- The response's http status code.
DeleteSubscriptionNotificationConfiguration
data DeleteSubscriptionNotificationConfiguration Source #
See: newDeleteSubscriptionNotificationConfiguration
smart constructor.
Instances
newDeleteSubscriptionNotificationConfiguration Source #
Create a value of DeleteSubscriptionNotificationConfiguration
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
DeleteSubscriptionNotificationConfiguration
, deleteSubscriptionNotificationConfiguration_subscriptionId
- The ID of the Security Lake subscriber account.
data DeleteSubscriptionNotificationConfigurationResponse Source #
See: newDeleteSubscriptionNotificationConfigurationResponse
smart constructor.
Instances
newDeleteSubscriptionNotificationConfigurationResponse Source #
:: Int |
|
-> DeleteSubscriptionNotificationConfigurationResponse |
Create a value of DeleteSubscriptionNotificationConfigurationResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:DeleteSubscriptionNotificationConfigurationResponse'
, deleteSubscriptionNotificationConfigurationResponse_httpStatus
- The response's http status code.
GetDatalake
data GetDatalake Source #
See: newGetDatalake
smart constructor.
Instances
newGetDatalake :: GetDatalake Source #
Create a value of GetDatalake
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
data GetDatalakeResponse Source #
See: newGetDatalakeResponse
smart constructor.
Instances
newGetDatalakeResponse Source #
Create a value of GetDatalakeResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:GetDatalakeResponse'
, getDatalakeResponse_httpStatus
- The response's http status code.
$sel:configurations:GetDatalakeResponse'
, getDatalakeResponse_configurations
- Retrieves the Security Lake configuration object.
GetDatalakeAutoEnable
data GetDatalakeAutoEnable Source #
See: newGetDatalakeAutoEnable
smart constructor.
Instances
newGetDatalakeAutoEnable :: GetDatalakeAutoEnable Source #
Create a value of GetDatalakeAutoEnable
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
data GetDatalakeAutoEnableResponse Source #
See: newGetDatalakeAutoEnableResponse
smart constructor.
Instances
newGetDatalakeAutoEnableResponse Source #
Create a value of GetDatalakeAutoEnableResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:GetDatalakeAutoEnableResponse'
, getDatalakeAutoEnableResponse_httpStatus
- The response's http status code.
$sel:autoEnableNewAccounts:GetDatalakeAutoEnableResponse'
, getDatalakeAutoEnableResponse_autoEnableNewAccounts
- The configuration for new accounts.
GetDatalakeExceptionsExpiry
data GetDatalakeExceptionsExpiry Source #
See: newGetDatalakeExceptionsExpiry
smart constructor.
Instances
newGetDatalakeExceptionsExpiry :: GetDatalakeExceptionsExpiry Source #
Create a value of GetDatalakeExceptionsExpiry
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
data GetDatalakeExceptionsExpiryResponse Source #
See: newGetDatalakeExceptionsExpiryResponse
smart constructor.
Instances
newGetDatalakeExceptionsExpiryResponse Source #
:: Int | |
-> Integer |
|
-> GetDatalakeExceptionsExpiryResponse |
Create a value of GetDatalakeExceptionsExpiryResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:GetDatalakeExceptionsExpiryResponse'
, getDatalakeExceptionsExpiryResponse_httpStatus
- The response's http status code.
$sel:exceptionMessageExpiry:GetDatalakeExceptionsExpiryResponse'
, getDatalakeExceptionsExpiryResponse_exceptionMessageExpiry
- The expiration period and time-to-live (TTL).
GetDatalakeExceptionsSubscription
data GetDatalakeExceptionsSubscription Source #
See: newGetDatalakeExceptionsSubscription
smart constructor.
Instances
newGetDatalakeExceptionsSubscription :: GetDatalakeExceptionsSubscription Source #
Create a value of GetDatalakeExceptionsSubscription
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
data GetDatalakeExceptionsSubscriptionResponse Source #
See: newGetDatalakeExceptionsSubscriptionResponse
smart constructor.
Instances
newGetDatalakeExceptionsSubscriptionResponse Source #
:: Int | |
-> ProtocolAndNotificationEndpoint |
|
-> GetDatalakeExceptionsSubscriptionResponse |
Create a value of GetDatalakeExceptionsSubscriptionResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:GetDatalakeExceptionsSubscriptionResponse'
, getDatalakeExceptionsSubscriptionResponse_httpStatus
- The response's http status code.
$sel:protocolAndNotificationEndpoint:GetDatalakeExceptionsSubscriptionResponse'
, getDatalakeExceptionsSubscriptionResponse_protocolAndNotificationEndpoint
- Retrieves the exception notification subscription information.
GetDatalakeStatus (Paginated)
data GetDatalakeStatus Source #
See: newGetDatalakeStatus
smart constructor.
Instances
newGetDatalakeStatus :: GetDatalakeStatus Source #
Create a value of GetDatalakeStatus
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accountSet:GetDatalakeStatus'
, getDatalakeStatus_accountSet
- The Amazon Web Services account ID for which a static snapshot of the
current Amazon Web Services Region, including enabled accounts and log
sources, is retrieved.
$sel:maxAccountResults:GetDatalakeStatus'
, getDatalakeStatus_maxAccountResults
- The maximum limit of accounts for which the static snapshot of the
current Region, including enabled accounts and log sources, is
retrieved.
GetDatalakeStatus
, getDatalakeStatus_nextToken
- Lists if there are more results available. The value of nextToken is a
unique pagination token for each page. Repeat the call using the
returned token to retrieve the next page. Keep all other arguments
unchanged.
Each pagination token expires after 24 hours. Using an expired pagination token will return an HTTP 400 InvalidToken error.
data GetDatalakeStatusResponse Source #
See: newGetDatalakeStatusResponse
smart constructor.
Instances
newGetDatalakeStatusResponse Source #
Create a value of GetDatalakeStatusResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
GetDatalakeStatus
, getDatalakeStatusResponse_nextToken
- Lists if there are more results available. The value of nextToken is a
unique pagination token for each page. Repeat the call using the
returned token to retrieve the next page. Keep all other arguments
unchanged.
Each pagination token expires after 24 hours. Using an expired pagination token will return an HTTP 400 InvalidToken error.
$sel:httpStatus:GetDatalakeStatusResponse'
, getDatalakeStatusResponse_httpStatus
- The response's http status code.
$sel:accountSourcesList:GetDatalakeStatusResponse'
, getDatalakeStatusResponse_accountSourcesList
- The list of enabled accounts and enabled sources.
GetSubscriber
data GetSubscriber Source #
See: newGetSubscriber
smart constructor.
Instances
Create a value of GetSubscriber
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:id:GetSubscriber'
, getSubscriber_id
- A value created by Amazon Security Lake that uniquely identifies your
GetSubscriber
API request.
data GetSubscriberResponse Source #
See: newGetSubscriberResponse
smart constructor.
Instances
newGetSubscriberResponse Source #
Create a value of GetSubscriberResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:subscriber:GetSubscriberResponse'
, getSubscriberResponse_subscriber
- The subscription information for the specified subscription ID.
$sel:httpStatus:GetSubscriberResponse'
, getSubscriberResponse_httpStatus
- The response's http status code.
ListDatalakeExceptions (Paginated)
data ListDatalakeExceptions Source #
See: newListDatalakeExceptions
smart constructor.
Instances
newListDatalakeExceptions :: ListDatalakeExceptions Source #
Create a value of ListDatalakeExceptions
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:maxFailures:ListDatalakeExceptions'
, listDatalakeExceptions_maxFailures
- List the maximum number of failures in Security Lake.
ListDatalakeExceptions
, listDatalakeExceptions_nextToken
- List if there are more results available. The value of nextToken is a
unique pagination token for each page. Repeat the call using the
returned token to retrieve the next page. Keep all other arguments
unchanged.
Each pagination token expires after 24 hours. Using an expired pagination token will return an HTTP 400 InvalidToken error.
$sel:regionSet:ListDatalakeExceptions'
, listDatalakeExceptions_regionSet
- List the Amazon Web Services Regions from which exceptions are
retrieved.
data ListDatalakeExceptionsResponse Source #
See: newListDatalakeExceptionsResponse
smart constructor.
Instances
newListDatalakeExceptionsResponse Source #
Create a value of ListDatalakeExceptionsResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
ListDatalakeExceptions
, listDatalakeExceptionsResponse_nextToken
- List if there are more results available. The value of nextToken is a
unique pagination token for each page. Repeat the call using the
returned token to retrieve the next page. Keep all other arguments
unchanged.
Each pagination token expires after 24 hours. Using an expired pagination token will return an HTTP 400 InvalidToken error.
$sel:httpStatus:ListDatalakeExceptionsResponse'
, listDatalakeExceptionsResponse_httpStatus
- The response's http status code.
$sel:nonRetryableFailures:ListDatalakeExceptionsResponse'
, listDatalakeExceptionsResponse_nonRetryableFailures
- Lists the failures that cannot be retried in the current Region.
ListLogSources (Paginated)
data ListLogSources Source #
See: newListLogSources
smart constructor.
ListLogSources' (Maybe [Dimension]) (Maybe (HashMap Text (HashMap Text [Text]))) (Maybe [Text]) (Maybe (HashMap Text [Text])) (Maybe Int) (Maybe Text) |
Instances
newListLogSources :: ListLogSources Source #
Create a value of ListLogSources
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:inputOrder:ListLogSources'
, listLogSources_inputOrder
- Lists the log sources in input order, namely Region, source type, and
member account.
$sel:listAllDimensions:ListLogSources'
, listLogSources_listAllDimensions
- List the view of log sources for enabled Amazon Security Lake accounts
for specific Amazon Web Services sources from specific accounts and
specific Regions.
$sel:listSingleDimension:ListLogSources'
, listLogSources_listSingleDimension
- List the view of log sources for enabled Security Lake accounts for all
Amazon Web Services sources from specific accounts or specific Regions.
$sel:listTwoDimensions:ListLogSources'
, listLogSources_listTwoDimensions
- Lists the view of log sources for enabled Security Lake accounts for
specific Amazon Web Services sources from specific accounts or specific
Regions.
$sel:maxResults:ListLogSources'
, listLogSources_maxResults
- The maximum number of accounts for which the log sources are displayed.
ListLogSources
, listLogSources_nextToken
- If nextToken is returned, there are more results available. You can
repeat the call using the returned token to retrieve the next page.
data ListLogSourcesResponse Source #
See: newListLogSourcesResponse
smart constructor.
Instances
newListLogSourcesResponse Source #
Create a value of ListLogSourcesResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
ListLogSources
, listLogSourcesResponse_nextToken
- If nextToken is returned, there are more results available. You can
repeat the call using the returned token to retrieve the next page.
$sel:httpStatus:ListLogSourcesResponse'
, listLogSourcesResponse_httpStatus
- The response's http status code.
$sel:regionSourceTypesAccountsList:ListLogSourcesResponse'
, listLogSourcesResponse_regionSourceTypesAccountsList
- Lists the log sources by Regions for enabled Security Lake accounts.
ListSubscribers (Paginated)
data ListSubscribers Source #
See: newListSubscribers
smart constructor.
Instances
newListSubscribers :: ListSubscribers Source #
Create a value of ListSubscribers
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:maxResults:ListSubscribers'
, listSubscribers_maxResults
- The maximum number of accounts for which the configuration is displayed.
ListSubscribers
, listSubscribers_nextToken
- If nextToken is returned, there are more results available. You can
repeat the call using the returned token to retrieve the next page.
data ListSubscribersResponse Source #
See: newListSubscribersResponse
smart constructor.
Instances
newListSubscribersResponse Source #
Create a value of ListSubscribersResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
ListSubscribers
, listSubscribersResponse_nextToken
- If nextToken is returned, there are more results available. You can
repeat the call using the returned token to retrieve the next page.
$sel:httpStatus:ListSubscribersResponse'
, listSubscribersResponse_httpStatus
- The response's http status code.
$sel:subscribers:ListSubscribersResponse'
, listSubscribersResponse_subscribers
- The subscribers available for the specified Security Lake account ID.
UpdateDatalake
data UpdateDatalake Source #
See: newUpdateDatalake
smart constructor.
Instances
newUpdateDatalake :: UpdateDatalake Source #
Create a value of UpdateDatalake
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:configurations:UpdateDatalake'
, updateDatalake_configurations
- Specify the Region or Regions that will contribute data to the rollup
region.
data UpdateDatalakeResponse Source #
See: newUpdateDatalakeResponse
smart constructor.
Instances
newUpdateDatalakeResponse Source #
Create a value of UpdateDatalakeResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateDatalakeResponse'
, updateDatalakeResponse_httpStatus
- The response's http status code.
UpdateDatalakeExceptionsExpiry
data UpdateDatalakeExceptionsExpiry Source #
See: newUpdateDatalakeExceptionsExpiry
smart constructor.
Instances
newUpdateDatalakeExceptionsExpiry Source #
Create a value of UpdateDatalakeExceptionsExpiry
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:exceptionMessageExpiry:UpdateDatalakeExceptionsExpiry'
, updateDatalakeExceptionsExpiry_exceptionMessageExpiry
- The time-to-live (TTL) for the exception message to remain.
data UpdateDatalakeExceptionsExpiryResponse Source #
See: newUpdateDatalakeExceptionsExpiryResponse
smart constructor.
Instances
Generic UpdateDatalakeExceptionsExpiryResponse Source # | |
Defined in Amazonka.SecurityLake.UpdateDatalakeExceptionsExpiry type Rep UpdateDatalakeExceptionsExpiryResponse :: Type -> Type # | |
Read UpdateDatalakeExceptionsExpiryResponse Source # | |
Show UpdateDatalakeExceptionsExpiryResponse Source # | |
NFData UpdateDatalakeExceptionsExpiryResponse Source # | |
Eq UpdateDatalakeExceptionsExpiryResponse Source # | |
type Rep UpdateDatalakeExceptionsExpiryResponse Source # | |
Defined in Amazonka.SecurityLake.UpdateDatalakeExceptionsExpiry type Rep UpdateDatalakeExceptionsExpiryResponse = D1 ('MetaData "UpdateDatalakeExceptionsExpiryResponse" "Amazonka.SecurityLake.UpdateDatalakeExceptionsExpiry" "amazonka-securitylake-2.0-4WRm07ESU278sNrKhxoCOb" 'False) (C1 ('MetaCons "UpdateDatalakeExceptionsExpiryResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))) |
newUpdateDatalakeExceptionsExpiryResponse Source #
Create a value of UpdateDatalakeExceptionsExpiryResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateDatalakeExceptionsExpiryResponse'
, updateDatalakeExceptionsExpiryResponse_httpStatus
- The response's http status code.
UpdateDatalakeExceptionsSubscription
data UpdateDatalakeExceptionsSubscription Source #
See: newUpdateDatalakeExceptionsSubscription
smart constructor.
Instances
newUpdateDatalakeExceptionsSubscription Source #
:: Text |
|
-> SubscriptionProtocolType | |
-> UpdateDatalakeExceptionsSubscription |
Create a value of UpdateDatalakeExceptionsSubscription
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:notificationEndpoint:UpdateDatalakeExceptionsSubscription'
, updateDatalakeExceptionsSubscription_notificationEndpoint
- The account that is subscribed to receive exception notifications.
UpdateDatalakeExceptionsSubscription
, updateDatalakeExceptionsSubscription_subscriptionProtocol
- The subscription protocol to which exception messages are posted.
data UpdateDatalakeExceptionsSubscriptionResponse Source #
See: newUpdateDatalakeExceptionsSubscriptionResponse
smart constructor.
Instances
Generic UpdateDatalakeExceptionsSubscriptionResponse Source # | |
Read UpdateDatalakeExceptionsSubscriptionResponse Source # | |
Show UpdateDatalakeExceptionsSubscriptionResponse Source # | |
NFData UpdateDatalakeExceptionsSubscriptionResponse Source # | |
Eq UpdateDatalakeExceptionsSubscriptionResponse Source # | |
type Rep UpdateDatalakeExceptionsSubscriptionResponse Source # | |
Defined in Amazonka.SecurityLake.UpdateDatalakeExceptionsSubscription type Rep UpdateDatalakeExceptionsSubscriptionResponse = D1 ('MetaData "UpdateDatalakeExceptionsSubscriptionResponse" "Amazonka.SecurityLake.UpdateDatalakeExceptionsSubscription" "amazonka-securitylake-2.0-4WRm07ESU278sNrKhxoCOb" 'False) (C1 ('MetaCons "UpdateDatalakeExceptionsSubscriptionResponse'" 'PrefixI 'True) (S1 ('MetaSel ('Just "httpStatus") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Int))) |
newUpdateDatalakeExceptionsSubscriptionResponse Source #
:: Int |
|
-> UpdateDatalakeExceptionsSubscriptionResponse |
Create a value of UpdateDatalakeExceptionsSubscriptionResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:httpStatus:UpdateDatalakeExceptionsSubscriptionResponse'
, updateDatalakeExceptionsSubscriptionResponse_httpStatus
- The response's http status code.
UpdateSubscriber
data UpdateSubscriber Source #
See: newUpdateSubscriber
smart constructor.
UpdateSubscriber' (Maybe Text) (Maybe Text) (Maybe Text) Text [SourceType] |
Instances
Create a value of UpdateSubscriber
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
UpdateSubscriber
, updateSubscriber_externalId
- The external ID of the Security Lake account.
UpdateSubscriber
, updateSubscriber_subscriberDescription
- The description of the Security Lake account subscriber.
UpdateSubscriber
, updateSubscriber_subscriberName
- The name of the Security Lake account subscriber.
$sel:id:UpdateSubscriber'
, updateSubscriber_id
- A value created by Security Lake that uniquely identifies your
subscription.
UpdateSubscriber
, updateSubscriber_sourceTypes
- The supported Amazon Web Services from which logs and events are
collected. For the list of supported Amazon Web Services, see the
Amazon Security Lake User Guide.
data UpdateSubscriberResponse Source #
See: newUpdateSubscriberResponse
smart constructor.
Instances
newUpdateSubscriberResponse Source #
Create a value of UpdateSubscriberResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:subscriber:UpdateSubscriberResponse'
, updateSubscriberResponse_subscriber
- The account of the subscriber.
$sel:httpStatus:UpdateSubscriberResponse'
, updateSubscriberResponse_httpStatus
- The response's http status code.
UpdateSubscriptionNotificationConfiguration
data UpdateSubscriptionNotificationConfiguration Source #
See: newUpdateSubscriptionNotificationConfiguration
smart constructor.
UpdateSubscriptionNotificationConfiguration' (Maybe Bool) (Maybe Text) (Maybe Text) (Maybe HttpsMethod) (Maybe Text) (Maybe Text) Text |
Instances
newUpdateSubscriptionNotificationConfiguration Source #
Create a value of UpdateSubscriptionNotificationConfiguration
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:createSqs:UpdateSubscriptionNotificationConfiguration'
, updateSubscriptionNotificationConfiguration_createSqs
- Create a new subscription notification for the specified subscription ID
in Amazon Security Lake.
$sel:httpsApiKeyName:UpdateSubscriptionNotificationConfiguration'
, updateSubscriptionNotificationConfiguration_httpsApiKeyName
- The key name for the subscription notification.
$sel:httpsApiKeyValue:UpdateSubscriptionNotificationConfiguration'
, updateSubscriptionNotificationConfiguration_httpsApiKeyValue
- The key value for the subscription notification.
$sel:httpsMethod:UpdateSubscriptionNotificationConfiguration'
, updateSubscriptionNotificationConfiguration_httpsMethod
- The HTTPS method used for the subscription notification.
UpdateSubscriptionNotificationConfiguration
, updateSubscriptionNotificationConfiguration_roleArn
- The Amazon Resource Name (ARN) specifying the role of the subscriber.
UpdateSubscriptionNotificationConfiguration
, updateSubscriptionNotificationConfiguration_subscriptionEndpoint
- The subscription endpoint in Security Lake.
UpdateSubscriptionNotificationConfiguration
, updateSubscriptionNotificationConfiguration_subscriptionId
- The subscription ID for which the subscription notification is
specified.
data UpdateSubscriptionNotificationConfigurationResponse Source #
See: newUpdateSubscriptionNotificationConfigurationResponse
smart constructor.
Instances
newUpdateSubscriptionNotificationConfigurationResponse Source #
:: Int |
|
-> UpdateSubscriptionNotificationConfigurationResponse |
Create a value of UpdateSubscriptionNotificationConfigurationResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:queueArn:UpdateSubscriptionNotificationConfigurationResponse'
, updateSubscriptionNotificationConfigurationResponse_queueArn
- Returns the ARN of the queue.
$sel:httpStatus:UpdateSubscriptionNotificationConfigurationResponse'
, updateSubscriptionNotificationConfigurationResponse_httpStatus
- The response's http status code.
Types
AccessType
newtype AccessType Source #
pattern AccessType_LAKEFORMATION :: AccessType | |
pattern AccessType_S3 :: AccessType |
Instances
AwsLogSourceType
newtype AwsLogSourceType Source #
pattern AwsLogSourceType_CLOUD_TRAIL :: AwsLogSourceType | |
pattern AwsLogSourceType_ROUTE53 :: AwsLogSourceType | |
pattern AwsLogSourceType_SH_FINDINGS :: AwsLogSourceType | |
pattern AwsLogSourceType_VPC_FLOW :: AwsLogSourceType |
Instances
Dimension
pattern Dimension_MEMBER :: Dimension | |
pattern Dimension_REGION :: Dimension | |
pattern Dimension_SOURCE_TYPE :: Dimension |
Instances
EndpointProtocol
newtype EndpointProtocol Source #
pattern EndpointProtocol_HTTPS :: EndpointProtocol | |
pattern EndpointProtocol_SQS :: EndpointProtocol |
Instances
HttpsMethod
newtype HttpsMethod Source #
pattern HttpsMethod_POST :: HttpsMethod | |
pattern HttpsMethod_PUT :: HttpsMethod |
Instances
OcsfEventClass
newtype OcsfEventClass Source #
Instances
Region
pattern Region_Ap_northeast_1 :: Region | |
pattern Region_Ap_southeast_2 :: Region | |
pattern Region_Eu_central_1 :: Region | |
pattern Region_Eu_west_1 :: Region | |
pattern Region_Us_east_1 :: Region | |
pattern Region_Us_east_2 :: Region | |
pattern Region_Us_west_2 :: Region |
Instances
SettingsStatus
newtype SettingsStatus Source #
pattern SettingsStatus_COMPLETED :: SettingsStatus | |
pattern SettingsStatus_FAILED :: SettingsStatus | |
pattern SettingsStatus_INITIALIZED :: SettingsStatus | |
pattern SettingsStatus_PENDING :: SettingsStatus |
Instances
SourceStatus
newtype SourceStatus Source #
pattern SourceStatus_ACTIVE :: SourceStatus | |
pattern SourceStatus_DEACTIVATED :: SourceStatus | |
pattern SourceStatus_PENDING :: SourceStatus |
Instances
StorageClass
newtype StorageClass Source #
pattern StorageClass_DEEP_ARCHIVE :: StorageClass | |
pattern StorageClass_EXPIRE :: StorageClass | |
pattern StorageClass_GLACIER :: StorageClass | |
pattern StorageClass_GLACIER_IR :: StorageClass | |
pattern StorageClass_INTELLIGENT_TIERING :: StorageClass | |
pattern StorageClass_ONEZONE_IA :: StorageClass | |
pattern StorageClass_STANDARD_IA :: StorageClass |
Instances
SubscriptionProtocolType
newtype SubscriptionProtocolType Source #
Instances
SubscriptionStatus
newtype SubscriptionStatus Source #
pattern SubscriptionStatus_ACTIVE :: SubscriptionStatus | |
pattern SubscriptionStatus_DEACTIVATED :: SubscriptionStatus | |
pattern SubscriptionStatus_PENDING :: SubscriptionStatus | |
pattern SubscriptionStatus_READY :: SubscriptionStatus |
Instances
AccountSources
data AccountSources Source #
Amazon Security Lake collects logs and events from supported Amazon Web Services and custom sources. For the list of supported Amazon Web Services, see the Amazon Security Lake User Guide.
See: newAccountSources
smart constructor.
Instances
Create a value of AccountSources
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:eventClass:AccountSources'
, accountSources_eventClass
- Initializes a new instance of the Event class.
$sel:logsStatus:AccountSources'
, accountSources_logsStatus
- The log status for the Security Lake account.
$sel:account:AccountSources'
, accountSources_account
- The ID of the Security Lake account for which logs are collected.
$sel:sourceType:AccountSources'
, accountSources_sourceType
- The supported Amazon Web Services from which logs and events are
collected. Amazon Security Lake supports log and event collection for
natively supported Amazon Web Services.
AutoEnableNewRegionConfiguration
data AutoEnableNewRegionConfiguration Source #
Automatically enable new organization accounts as member accounts from an Amazon Security Lake administrator account.
See: newAutoEnableNewRegionConfiguration
smart constructor.
Instances
newAutoEnableNewRegionConfiguration Source #
Create a value of AutoEnableNewRegionConfiguration
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:region:AutoEnableNewRegionConfiguration'
, autoEnableNewRegionConfiguration_region
- The Amazon Web Services Regions where Security Lake is automatically
enabled.
$sel:sources:AutoEnableNewRegionConfiguration'
, autoEnableNewRegionConfiguration_sources
- The Amazon Web Services sources that are automatically enabled in
Security Lake.
Failures
List of all failures.
See: newFailures
smart constructor.
Instances
FromJSON Failures Source # | |
Generic Failures Source # | |
Read Failures Source # | |
Show Failures Source # | |
NFData Failures Source # | |
Defined in Amazonka.SecurityLake.Types.Failures | |
Eq Failures Source # | |
Hashable Failures Source # | |
Defined in Amazonka.SecurityLake.Types.Failures | |
type Rep Failures Source # | |
Defined in Amazonka.SecurityLake.Types.Failures type Rep Failures = D1 ('MetaData "Failures" "Amazonka.SecurityLake.Types.Failures" "amazonka-securitylake-2.0-4WRm07ESU278sNrKhxoCOb" 'False) (C1 ('MetaCons "Failures'" 'PrefixI 'True) (S1 ('MetaSel ('Just "exceptionMessage") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: (S1 ('MetaSel ('Just "remediation") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 Text) :*: S1 ('MetaSel ('Just "timestamp") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 ISO8601)))) |
Create a value of Failures
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:exceptionMessage:Failures'
, failures_exceptionMessage
- List of all exception messages.
$sel:remediation:Failures'
, failures_remediation
- List of all remediation steps for failures.
$sel:timestamp:Failures'
, failures_timestamp
- This error can occur if you configure the wrong timestamp format, or if
the subset of entries used for validation had errors or missing values.
FailuresResponse
data FailuresResponse Source #
Response element for actions that make changes, namely create, update, or delete actions.
See: newFailuresResponse
smart constructor.
FailuresResponse' (Maybe [Failures]) (Maybe Text) |
Instances
newFailuresResponse :: FailuresResponse Source #
Create a value of FailuresResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:failures:FailuresResponse'
, failuresResponse_failures
- List of all failures.
$sel:region:FailuresResponse'
, failuresResponse_region
- List of Amazon Web Services Regions where the failure occurred.
LakeConfigurationRequest
data LakeConfigurationRequest Source #
Provides details of Amazon Security Lake configuration object.
See: newLakeConfigurationRequest
smart constructor.
LakeConfigurationRequest' (Maybe Text) (Maybe [Region]) (Maybe Text) (Maybe [RetentionSetting]) (Maybe (HashMap Text Text)) |
Instances
newLakeConfigurationRequest :: LakeConfigurationRequest Source #
Create a value of LakeConfigurationRequest
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:encryptionKey:LakeConfigurationRequest'
, lakeConfigurationRequest_encryptionKey
- The type of encryption key used by Amazon Security Lake to encrypt the
Security Lake configuration object.
$sel:replicationDestinationRegions:LakeConfigurationRequest'
, lakeConfigurationRequest_replicationDestinationRegions
- Replication enables automatic, asynchronous copying of objects across
Amazon S3 buckets. Amazon S3 buckets that are configured for object
replication can be owned by the same Amazon Web Services account or by
different accounts. You can replicate objects to a single destination
bucket or to multiple destination buckets. The destination buckets can
be in different Amazon Web Services Regions or within the same Region as
the source bucket.
Set up one or more rollup Regions by providing the Region or Regions that should contribute to the central rollup Region.
$sel:replicationRoleArn:LakeConfigurationRequest'
, lakeConfigurationRequest_replicationRoleArn
- Replication settings for the Amazon S3 buckets. This parameter uses the
Identity and Access Management (IAM) role you created that is managed by
Security Lake, to ensure the replication setting is correct.
$sel:retentionSettings:LakeConfigurationRequest'
, lakeConfigurationRequest_retentionSettings
- Retention settings for the destination Amazon S3 buckets.
$sel:tagsMap:LakeConfigurationRequest'
, lakeConfigurationRequest_tagsMap
- A tag is a label that you assign to an Amazon Web Services resource.
Each tag consists of a key and an optional value, both of which you
define.
LakeConfigurationResponse
data LakeConfigurationResponse Source #
Provides details of Amazon Security Lake lake configuration object.
See: newLakeConfigurationResponse
smart constructor.
LakeConfigurationResponse' (Maybe Text) (Maybe [Region]) (Maybe Text) (Maybe [RetentionSetting]) (Maybe Text) (Maybe SettingsStatus) (Maybe (HashMap Text Text)) |
Instances
newLakeConfigurationResponse :: LakeConfigurationResponse Source #
Create a value of LakeConfigurationResponse
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:encryptionKey:LakeConfigurationResponse'
, lakeConfigurationResponse_encryptionKey
- The type of encryption key used by secure the Security Lake
configuration object.
$sel:replicationDestinationRegions:LakeConfigurationResponse'
, lakeConfigurationResponse_replicationDestinationRegions
- Replication enables automatic, asynchronous copying of objects across
Amazon S3 buckets. Amazon S3 buckets that are configured for object
replication can be owned by the same Amazon Web Services account or by
different accounts. You can replicate objects to a single destination
bucket or to multiple destination buckets. The destination buckets can
be in different Amazon Web Services Regions or within the same Region as
the source bucket.
Set up one or more rollup Regions by providing the Region or Regions that should contribute to the central rollup Region.
$sel:replicationRoleArn:LakeConfigurationResponse'
, lakeConfigurationResponse_replicationRoleArn
- Replication settings for the Amazon S3 buckets. This parameter uses the
IAM role you created that is managed by Security Lake, to ensure the
replication setting is correct.
$sel:retentionSettings:LakeConfigurationResponse'
, lakeConfigurationResponse_retentionSettings
- Retention settings for the destination Amazon S3 buckets.
$sel:s3BucketArn:LakeConfigurationResponse'
, lakeConfigurationResponse_s3BucketArn
- Amazon Resource Names (ARNs) uniquely identify Amazon Web Services
resources. Security Lake requires an ARN when you need to specify a
resource unambiguously across all of Amazon Web Services, such as in IAM
policies, Amazon Relational Database Service (Amazon RDS) tags, and API
calls.
$sel:status:LakeConfigurationResponse'
, lakeConfigurationResponse_status
- Retrieves the status of the configuration operation for an account in
Amazon Security Lake.
$sel:tagsMap:LakeConfigurationResponse'
, lakeConfigurationResponse_tagsMap
- A tag is a label that you assign to an Amazon Web Services resource.
Each tag consists of a key and an optional value, both of which you
define.
LogsStatus
data LogsStatus Source #
Retrieves the Logs status for the Amazon Security Lake account.
See: newLogsStatus
smart constructor.
Instances
Create a value of LogsStatus
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:healthStatus:LogsStatus'
, logsStatus_healthStatus
- The health status of services, including error codes and patterns.
$sel:pathToLogs:LogsStatus'
, logsStatus_pathToLogs
- Defines path the stored logs are available which has information on your
systems, applications, and services.
ProtocolAndNotificationEndpoint
data ProtocolAndNotificationEndpoint Source #
Protocol used in Amazon Security Lake that dictates how notifications are posted at the endpoint.
See: newProtocolAndNotificationEndpoint
smart constructor.
Instances
FromJSON ProtocolAndNotificationEndpoint Source # | |
Generic ProtocolAndNotificationEndpoint Source # | |
Read ProtocolAndNotificationEndpoint Source # | |
Show ProtocolAndNotificationEndpoint Source # | |
NFData ProtocolAndNotificationEndpoint Source # | |
Eq ProtocolAndNotificationEndpoint Source # | |
Hashable ProtocolAndNotificationEndpoint Source # | |
type Rep ProtocolAndNotificationEndpoint Source # | |
Defined in Amazonka.SecurityLake.Types.ProtocolAndNotificationEndpoint type Rep ProtocolAndNotificationEndpoint = D1 ('MetaData "ProtocolAndNotificationEndpoint" "Amazonka.SecurityLake.Types.ProtocolAndNotificationEndpoint" "amazonka-securitylake-2.0-4WRm07ESU278sNrKhxoCOb" 'False) (C1 ('MetaCons "ProtocolAndNotificationEndpoint'" 'PrefixI 'True) (S1 ('MetaSel ('Just "endpoint") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)) :*: S1 ('MetaSel ('Just "protocol") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 (Maybe Text)))) |
newProtocolAndNotificationEndpoint :: ProtocolAndNotificationEndpoint Source #
Create a value of ProtocolAndNotificationEndpoint
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:endpoint:ProtocolAndNotificationEndpoint'
, protocolAndNotificationEndpoint_endpoint
- The account that is subscribed to receive exception notifications.
$sel:protocol:ProtocolAndNotificationEndpoint'
, protocolAndNotificationEndpoint_protocol
- The protocol to which notification messages are posted.
RetentionSetting
data RetentionSetting Source #
Retention settings for the destination Amazon S3 buckets in Amazon Security Lake.
See: newRetentionSetting
smart constructor.
Instances
newRetentionSetting :: RetentionSetting Source #
Create a value of RetentionSetting
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:retentionPeriod:RetentionSetting'
, retentionSetting_retentionPeriod
- The retention period specifies a fixed period of time during which the
Security Lake object remains locked. You can specify the retention
period in days for one or more sources.
$sel:storageClass:RetentionSetting'
, retentionSetting_storageClass
- The range of storage classes that you can choose from based on the data
access, resiliency, and cost requirements of your workloads.
SourceType
data SourceType Source #
The supported source types from which logs and events are collected in Amazon Security Lake. For the list of supported Amazon Web Services, see the Amazon Security Lake User Guide.
See: newSourceType
smart constructor.
Instances
newSourceType :: SourceType Source #
Create a value of SourceType
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:awsSourceType:SourceType'
, sourceType_awsSourceType
- Amazon Security Lake supports log and event collection for natively
supported Amazon Web Services.
$sel:customSourceType:SourceType'
, sourceType_customSourceType
- Amazon Security Lake supports custom source types. For a detailed list,
see the Amazon Security Lake User Guide.
SubscriberResource
data SubscriberResource Source #
Provides details about the Amazon Security Lake account subscription. Subscribers are notified of new objects for a source as the data is written to your Amazon S3 bucket for Security Lake.
See: newSubscriberResource
smart constructor.
SubscriberResource' (Maybe [AccessType]) (Maybe ISO8601) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe Text) (Maybe EndpointProtocol) (Maybe SubscriptionStatus) (Maybe ISO8601) Text [SourceType] Text |
Instances
newSubscriberResource Source #
:: Text | |
-> Text | |
-> SubscriberResource |
Create a value of SubscriberResource
with all optional fields omitted.
Use generic-lens or optics to modify other optional fields.
The following record fields are available, with the corresponding lenses provided for backwards compatibility:
$sel:accessTypes:SubscriberResource'
, subscriberResource_accessTypes
- You can choose to notify subscribers of new objects with an Amazon
Simple Queue Service (Amazon SQS) queue or through messaging to an HTTPS
endpoint provided by the subscriber.
Subscribers can consume data by directly querying Lake Formation tables
in your Amazon S3 bucket through services like Amazon Athena. This
subscription type is defined as LAKEFORMATION
.
$sel:createdAt:SubscriberResource'
, subscriberResource_createdAt
- The date and time when the subscription was created.
$sel:externalId:SubscriberResource'
, subscriberResource_externalId
- The external ID of the subscriber. The external ID lets the user that is
assuming the role assert the circumstances in which they are operating.
It also provides a way for the account owner to permit the role to be
assumed only under specific circumstances.
$sel:roleArn:SubscriberResource'
, subscriberResource_roleArn
- The Amazon Resource Name (ARN) specifying the role of the subscriber.
$sel:s3BucketArn:SubscriberResource'
, subscriberResource_s3BucketArn
- The ARN for the Amazon S3 bucket.
$sel:snsArn:SubscriberResource'
, subscriberResource_snsArn
- The ARN for the Amazon Simple Notification Service.
$sel:subscriberDescription:SubscriberResource'
, subscriberResource_subscriberDescription
- The subscriber descriptions for a subscriber account. The description
for a subscriber includes subscriberName
, accountID
, externalID
,
and subscriptionId
.
$sel:subscriberName:SubscriberResource'
, subscriberResource_subscriberName
- The name of your Amazon Security Lake subscriber account.
$sel:subscriptionEndpoint:SubscriberResource'
, subscriberResource_subscriptionEndpoint
- The subscription endpoint to which exception messages are posted.
$sel:subscriptionProtocol:SubscriberResource'
, subscriberResource_subscriptionProtocol
- The subscription protocol to which exception messages are posted.
$sel:subscriptionStatus:SubscriberResource'
, subscriberResource_subscriptionStatus
- The subscription status of the Amazon Security Lake subscriber account.
$sel:updatedAt:SubscriberResource'
, subscriberResource_updatedAt
- The date and time when the subscription was created.
$sel:accountId:SubscriberResource'
, subscriberResource_accountId
- The Amazon Web Services account ID you are using to create your Amazon
Security Lake account.
$sel:sourceTypes:SubscriberResource'
, subscriberResource_sourceTypes
- Amazon Security Lake supports log and event collection for natively
supported Amazon Web Services. For more information, see the Amazon
Security Lake User Guide.
$sel:subscriptionId:SubscriberResource'
, subscriberResource_subscriptionId
- The subscription ID of the Amazon Security Lake subscriber account.