Subscriber

Source: src/AWS/SecurityLake/Subscriber.ts

A Security Lake subscriber — a consumer (account or service) granted access to data in the Security Lake data lake for specific log sources.

Creating a Subscriber

S3 data-access subscriber

const subscriber = yield* SecurityLake.Subscriber("Analytics", {
  subscriberIdentity: {
    principal: "123456789012",
    externalId: "analytics-external-id",
  },
  sources: [{ awsLogSource: { sourceName: "ROUTE53", sourceVersion: "2.0" } }],
});

Lake Formation (query) access

const subscriber = yield* SecurityLake.Subscriber("Athena", {
  subscriberName: "athena-consumer",
  subscriberDescription: "Athena query access to VPC flow logs",
  subscriberIdentity: {
    principal: "123456789012",
    externalId: "athena-external-id",
  },
  sources: [{ awsLogSource: { sourceName: "VPC_FLOW", sourceVersion: "2.0" } }],
  accessTypes: ["LAKEFORMATION"],
  tags: { team: "security" },
});