Amazon Security Lake automatically centralizes security data from cloud, on-premises, and custom sources into a purpose-built data lake stored in your account. With Security Lake, you pay as you go with no upfront costs. Monthly costs are determined by the volume of log and event data ingested from AWS services (per GB). You pay a separate price depending on the origin of the logs (AWS CloudTrail or other AWS services), plus a data normalization and conversion fee. You are required to have a CloudTrail organization trail configured to collect CloudTrail management events into your security data lake. Your data is stored in Amazon Simple Storage Service (S3) and standard Amazon S3 charges apply. Security Lake also orchestrates other AWS services on your behalf. You will incur separate charges for AWS services used and resources set up as part of your security data lake. See pricing for AWS Glue, Amazon EventBridge, AWS Lambda, Amazon SQS, and Amazon SNS. Standard data transfer costs apply for data accessed or aggregated into S3 across Regions.
During the preview period, Amazon Security Lake will be available at no additional charge. Please note that Security Lake orchestrates other AWS services on your behalf. You will incur separate charges for AWS services used and resources set up as part of your security data lake.
AWS Free Tier summary
During the preview period, there will be no additional charge. After the preview period ends, your account will be eligible to participate in a free trial. In supported Regions, new Security Lake account holders can try the service free for 15 days and gain access to its features. The Security Lake console indicates how many days are left in the free trial and average daily cost (based on volume of data ingested), taking the guesswork out of budget planning.
AWS Pricing Calculator
Calculate your Amazon Security Lake and architecture cost in a single estimate.
Pricing tables
-
US East (N. Virginia)
-
US East (Ohio)
-
US West (Oregon)
-
Europe (Ireland)
-
Europe (Frankfurt)
-
Europe (London)
-
Asia Pacific (Singapore)
-
Asia Pacific (Tokyo)
-
Asia Pacific (Sydney)
-
South America (Sao Paulo)
-
US East (N. Virginia)
-
Region US East (N. Virginia) CloudTrail logs $0.75 per GB Other logs First 10 TB $0.25 per GB Next 20 TB $0.15 per GB Next 20 TB $0.075 per GB Over 50 TB $0.05 per GB Normalization $0.035 per GB -
US East (Ohio)
-
Region US East (Ohio) CloudTrail logs $0.75 per GB Other logs First 10 TB $0.25 per GB Next 20 TB $0.15 per GB Next 20 TB $0.075 per GB Over 50 TB $0.05 per GB Normalization $0.035 per GB -
US West (Oregon)
-
Region US West (Oregon) CloudTrail logs $0.75 per GB Other logs First 10 TB $0.25 per GB Next 20 TB $0.15 per GB Next 20 TB $0.075 per GB Over 50 TB $0.05 per GB Normalization $0.035 per GB -
Europe (Ireland)
-
Region EU (Ireland) CloudTrail logs $0.75 per GB Other logs First 10 TB $0.285 per GB Next 20 TB $0.171 per GB Next 20 TB $0.086 per GB Over 50 TB $0.057 per GB Normalization $0.035 per GB -
Europe (Frankfurt)
-
Region EU (Frankfurt) CloudTrail logs $0.75 per GB Other logs First 10 TB $0.285 per GB Next 20 TB $0.171 per GB Next 20 TB $0.086 per GB Over 50 TB $0.057 per GB Normalization $0.035 per GB -
Europe (London)
-
Region EU (London) CloudTrail logs $0.75 per GB Other logs First 10 TB $0.299 per GB Next 20 TB $0.18 per GB Next 20 TB $0.09 per GB Over 50 TB $0.06 per GB Normalization $0.035 per GB -
Asia Pacific (Singapore)
-
Region Asia Pacific (Singapore) CloudTrail logs $0.75 per GB Other logs First 10 TB $0.35 per GB Next 20 TB $0.21 per GB Next 20 TB $0.105 per GB Over 50 TB $0.07 per GB Normalization $0.035 per GB -
Asia Pacific (Tokyo)
-
Region Asia Pacific (Tokyo) CloudTrail logs $0.75 per GB Other logs First 10 TB $0.380 per GB Next 20 TB $0.228 per GB Next 20 TB $0.114 per GB Over 50 TB $0.076 per GB Normalization $0.035 per GB -
Asia Pacific (Sydney)
-
Region Asia Pacific (Sydney) CloudTrail logs $0.75 per GB Other logs First 10 TB $0.335 per GB Next 20 TB $0.201 per GB Next 20 TB $0.101 per GB Over 50 TB $0.067 per GB Normalization $0.035 per GB -
South America (Sao Paulo)
-
Region South America (Sao Paolo) CloudTrail logs $0.75 per GB Other logs First 10 TB $0.45 per GB Next 20 TB $0.27 per GB Next 20 TB $0.135 per GB Over 50 TB $0.09 per GB Normalization $0.035 per GB
Standard S3 charges apply (see Amazon S3 pricing)
Pricing examples
Example 1: Enabling Security Lake in one Region with a preexisting CloudTrail organization trail
You enter a new billing month for your US East (N. Virginia) deployment. Security Lake has ingested 256 GB in CloudTrail management events, 256 GB of CloudTrail data events (for example, S3 object-level API operations) and 1,024 GB of other AWS security event data (from Amazon VPC Flow Logs, Amazon Route 53 Resolver query logs, or security findings from AWS Security Hub).
Security Lake charges in US East (N. Virginia) would be calculated as follows:
512 GB of CloudTrail logs ingested at $0.75 per GB = 512 * $0.75 = $384.00
1,024 GB of other AWS logs ingested at $0.25 per GB = 1024 * $0.25 = $256.00
1,536 GB of data normalization charges ingested at $0.035 per GB = 1536 * $0.035 = $53.76
Total monthly charges for your Security Lake bill would be $693.76
Example 2: Enabling Security Lake in one Region and creating a new CloudTrail organization trail
In the event that you don’t have a preexisting AWS CloudTrail organization trail for your AWS organization, you must create one before ingesting CloudTrail management events in Security Lake. Deploying an organization trail is a recommended best practice, and AWS provides tooling, such as AWS Control Tower, to migrate your individual account trails to an organization trail. If you choose to deploy a new organization trail for your organization and have preexisting individual account trails, your CloudTrail bill will increase due to the delivery of additional management event copies from the new organization trail.
You enter a new billing month for your US East (N. Virginia) deployment. Security Lake has ingested 256 GB in CloudTrail management events, 256 GB of CloudTrail data events (for example, S3 object-level API operations), and 1,024 GB of other AWS security event data (from Amazon VPC Flow Logs, Amazon Route 53 Resolver query logs, or security findings from AWS Security Hub).
You have existing CloudTrail management usage across your member account trails of 186,991,773 events (which corresponds to the 256 GB volume of management events that you ingest in Security Lake for an average management event size of 1,470 bytes). You receive only one copy of these events in CloudTrail so they do not incur an additional charge (see AWS Free Tier).
Total monthly charges for your Amazon Security Lake bill would be $693.76 (same as example 1)
Incremental CloudTrail charges in your CloudTrail bill:
186,991,773 events delivered as management events copies at $2.00 per 100,000 events = 186,991,773 / 100,000 * $2.00 = $3,739.84
Total additional CloudTrail charges across member accounts would be $3,739.84
See AWS CloudTrail pricing for more details.
Note: Amazon Security Lake usage is calculated in binary gigabytes (GB), where 1 GB is 2^30 bytes. This unit of measurement is also known as a gibibyte (GiB), defined by the International Electrotechnical Commission (IEC). Similarly, 1 TB is 2^40 bytes, i.e. 1,024 GBs.
Additional pricing resources
Easily calculate your monthly costs with AWS
Contact AWS specialists to get a personalized quote