ExceptionSubscription

Source: src/AWS/SecurityLake/ExceptionSubscription.ts

The Amazon Security Lake exception notification subscription — an account-Region singleton that delivers notifications (via SNS protocols like email, SQS, or HTTPS) whenever Security Lake hits an exception it cannot resolve automatically.

Subscribing to exceptions

Email notifications

const exceptions = yield* SecurityLake.ExceptionSubscription("Exceptions", {
  subscriptionProtocol: "email",
  notificationEndpoint: "security-team@example.com",
});

SQS notifications with a 30-day exception TTL

const exceptions = yield* SecurityLake.ExceptionSubscription("Exceptions", {
  subscriptionProtocol: "sqs",
  notificationEndpoint: queue.queueArn,
  exceptionTimeToLive: "30 days",
});