Amazon Security Lake automatically centralizes security data from cloud, on-premises, and custom sources into a purpose-built data lake stored in your account. With Security Lake, you pay as you go with no upfront costs. Monthly costs are determined by the volume of log and event data ingested from AWS services (per GB). You pay a separate price depending on the origin of the logs (AWS CloudTrail or other AWS services), plus a data normalization and conversion fee. You are required to have a CloudTrail organization trail configured to collect CloudTrail management events into your security data lake. Your data is stored in Amazon Simple Storage Service (S3) and standard Amazon S3 charges apply. Security Lake also orchestrates other AWS services on your behalf. You will incur separate charges for AWS services used and resources set up as part of your security data lake. See pricing for AWS Glue, Amazon EventBridge, AWS Lambda, Amazon SQS, and Amazon SNS. Standard data transfer costs apply for data accessed or aggregated into S3 across Regions.

During the preview period, Amazon Security Lake will be available at no additional charge. Please note that Security Lake orchestrates other AWS services on your behalf. You will incur separate charges for AWS services used and resources set up as part of your security data lake.

AWS Free Tier summary

During the preview period, there will be no additional charge. After the preview period ends, your account will be eligible to participate in a free trial. In supported Regions, new Security Lake account holders can try the service free for 15 days and gain access to its features. The Security Lake console indicates how many days are left in the free trial and average daily cost (based on volume of data ingested), taking the guesswork out of budget planning.

Start your free trial

AWS Pricing Calculator

Calculate your Amazon Security Lake and architecture cost in a single estimate.

Pricing tables

  • US East (N. Virginia)
  • Region     US East (N. Virginia)
    CloudTrail logs     $0.75 per GB
    Other logs      
    First  10 TB $0.25 per GB
    Next  20 TB $0.15 per GB
    Next 20 TB $0.075 per GB
    Over  50 TB $0.05 per GB
    Normalization     $0.035 per GB
  • US East (Ohio)
  • Region     US East (Ohio)
    CloudTrail logs     $0.75 per GB
    Other logs      
    First  10 TB $0.25 per GB
    Next  20 TB $0.15 per GB
    Next 20 TB $0.075 per GB
    Over  50 TB $0.05 per GB
    Normalization     $0.035 per GB
  • US West (Oregon)
  • Region     US West (Oregon)
    CloudTrail logs     $0.75 per GB
    Other logs      
    First  10 TB $0.25 per GB
    Next  20 TB $0.15 per GB
    Next 20 TB $0.075 per GB
    Over  50 TB $0.05 per GB
    Normalization     $0.035 per GB
  • Europe (Ireland)
  • Region     EU (Ireland)
    CloudTrail logs     $0.75 per GB
    Other logs      
    First  10 TB $0.285 per GB
    Next  20 TB $0.171 per GB
    Next 20 TB $0.086 per GB
    Over  50 TB $0.057 per GB
    Normalization     $0.035 per GB
  • Europe (Frankfurt)
  • Region     EU (Frankfurt)
    CloudTrail logs     $0.75 per GB
    Other logs      
    First  10 TB $0.285 per GB
    Next  20 TB $0.171 per GB
    Next 20 TB $0.086 per GB
    Over  50 TB $0.057 per GB
    Normalization     $0.035 per GB
  • Europe (London)
  • Region     EU (London)
    CloudTrail logs     $0.75 per GB
    Other logs      
    First  10 TB $0.299 per GB
    Next  20 TB $0.18 per GB
    Next 20 TB $0.09 per GB
    Over  50 TB $0.06 per GB
    Normalization     $0.035 per GB
  • Asia Pacific (Singapore)
  • Region     Asia Pacific (Singapore)
    CloudTrail logs     $0.75 per GB
    Other logs      
    First  10 TB $0.35 per GB
    Next  20 TB $0.21 per GB
    Next 20 TB $0.105 per GB
    Over  50 TB $0.07 per GB
    Normalization     $0.035 per GB
  • Asia Pacific (Tokyo)
  • Region     Asia Pacific (Tokyo)
    CloudTrail logs     $0.75 per GB
    Other logs      
    First  10 TB $0.380 per GB
    Next  20 TB $0.228 per GB
    Next 20 TB $0.114 per GB
    Over  50 TB $0.076 per GB
    Normalization     $0.035 per GB
  • Asia Pacific (Sydney)
  • Region     Asia Pacific (Sydney)
    CloudTrail logs     $0.75 per GB
    Other logs      
    First  10 TB $0.335 per GB
    Next  20 TB $0.201 per GB
    Next 20 TB $0.101 per GB
    Over  50 TB $0.067 per GB
    Normalization     $0.035 per GB
  • South America (Sao Paulo)
  • Region     South America (Sao Paolo)
    CloudTrail logs     $0.75 per GB
    Other logs      
    First  10 TB $0.45 per GB
    Next  20 TB $0.27 per GB
    Next 20 TB $0.135 per GB
    Over  50 TB $0.09 per GB
    Normalization     $0.035 per GB
Data storage in Amazon S3

Standard S3 charges apply (see Amazon S3 pricing

Pricing examples

Example 1: Enabling Security Lake in one Region with a preexisting CloudTrail organization trail

You enter a new billing month for your US East (N. Virginia) deployment. Security Lake has ingested 256 GB in CloudTrail management events, 256 GB of CloudTrail data events (for example, S3 object-level API operations) and 1,024 GB of other AWS security event data (from Amazon VPC Flow Logs, Amazon Route 53 Resolver query logs, or security findings from AWS Security Hub).

Security Lake charges in US East (N. Virginia) would be calculated as follows:

512 GB of CloudTrail logs ingested at $0.75 per GB = 512 * $0.75 = $384.00
1,024 GB of other AWS logs ingested at $0.25 per GB = 1024 * $0.25 = $256.00
1,536 GB of data normalization charges ingested at $0.035 per GB = 1536 * $0.035 = $53.76

Total monthly charges for your Security Lake bill would be $693.76

Example 2: Enabling Security Lake in one Region and creating a new CloudTrail organization trail

In the event that you don’t have a preexisting AWS CloudTrail organization trail for your AWS organization, you must create one before ingesting CloudTrail management events in Security Lake. Deploying an organization trail is a recommended best practice, and AWS provides tooling, such as AWS Control Tower, to migrate your individual account trails to an organization trail. If you choose to deploy a new organization trail for your organization and have preexisting individual account trails, your CloudTrail bill will increase due to the delivery of additional management event copies from the new organization trail.

You enter a new billing month for your US East (N. Virginia) deployment. Security Lake has ingested 256 GB in CloudTrail management events, 256 GB of CloudTrail data events (for example, S3 object-level API operations), and 1,024 GB of other AWS security event data (from Amazon VPC Flow Logs, Amazon Route 53 Resolver query logs, or security findings from AWS Security Hub).

You have existing CloudTrail management usage across your member account trails of 186,991,773 events (which corresponds to the 256 GB volume of management events that you ingest in Security Lake for an average management event size of 1,470 bytes). You receive only one copy of these events in CloudTrail so they do not incur an additional charge (see AWS Free Tier).

Total monthly charges for your Amazon Security Lake bill would be $693.76 (same as example 1)

Incremental CloudTrail charges in your CloudTrail bill:

186,991,773 events delivered as management events copies at $2.00 per 100,000 events = 186,991,773 / 100,000 * $2.00 = $3,739.84

Total additional CloudTrail charges across member accounts would be $3,739.84
See AWS CloudTrail pricing for more details.

Note: Amazon Security Lake usage is calculated in binary gigabytes (GB), where 1 GB is 2^30 bytes. This unit of measurement is also known as a gibibyte (GiB), defined by the International Electrotechnical Commission (IEC). Similarly, 1 TB is 2^40 bytes, i.e. 1,024 GBs.

Additional pricing resources

AWS Pricing Calculator

Easily calculate your monthly costs with AWS

Get pricing assistance

Contact AWS specialists to get a personalized quote