aws securitylake update-data-lake

You can use UpdateDataLake to specify where to store your security data, how it should be encrypted at rest and for how long. AWS CLI reference

2 examples 2 options Its page in the AWS CLI reference

Examples

from aws-cli, each command read by CmdID

Example 1: To update your data lake settings

The following update-data-lake example updates the settings of your Amazon Security Lake data lake. You can use this operation to specify data encryption, storage, and rollup Region settings.

aws securitylake update-data-lake --configurations '[{"encryptionConfiguration": {"kmsKeyId":"S3_MANAGED_KEY"},"region":"us-east-1","lifecycleConfiguration": {"expiration":{"days":365},"transitions":[{"days":60,"storageClass":"ONEZONE_IA"}]}}, {"encryptionConfiguration": {"kmsKeyId":"S3_MANAGED_KEY"},"region":"us-east-2","lifecycleConfiguration": {"expiration":{"days":365},"transitions":[{"days":60,"storageClass":"ONEZONE_IA"}]}}]' --meta-store-manager-role-arn "arn:aws:iam:us-east-1:123456789012:role/service-role/AmazonSecurityLakeMetaStoreManager"

Identify

--configurationsSpecifies the Region or Regions that will contribute data to the rollup region.

--meta-store-manager-role-arnThe Amazon Resource Name (ARN) used to create and update the Glue table.

Its output, shortened

{
    "dataLakes": [
        {
            "createStatus": "COMPLETED",
            "dataLakeArn": "arn:aws:securitylake:us-east-1:123456789012:data-lake/default",
            "encryptionConfiguration": {
                "kmsKeyId": "S3_MANAGED_KEY"
            },
            "lifecycleConfiguration": {
                "expiration": {
                    "days": 365
                },
                "transitions": [
                    {
                        "days": 60,
                        "storageClass": "ONEZONE_IA"
                    }
                ]
            },
            "region": "us-east-1",
            "replicationConfiguration": {
                "regions": [
                    "ap-northeast-3"
                ],
                "roleArn": "arn:aws:securitylake:ap-northeast-3:123456789012:data-lake/default"
            },
            "s3BucketArn": "arn:aws:s3:::aws-security-data-lake-us-east-1-gnevt6s8z7bzby8oi3uiaysbr8v2ml",
            "updateStatus": {
                "exception": {},
                "requestId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111",
… 36 more lines

For more information, see Getting started with Amazon Security Lake in the Amazon Security Lake User Guide.

Example 2: To configure your data lake in a single Region

The following update-data-lake example configures your Amazon Security Lake data lake in a single AWS Region.

aws securitylake update-data-lake --configurations '[{"encryptionConfiguration": {"kmsKeyId":"a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"},"region":"us-east-2","lifecycleConfiguration": {"expiration":{"days":500},"transitions":[{"days":30,"storageClass":"GLACIER"}]}}]' --meta-store-manager-role-arn "arn:aws:iam:us-east-1:123456789012:role/service-role/AmazonSecurityLakeMetaStoreManager"

Identify

--configurationsSpecifies the Region or Regions that will contribute data to the rollup region.

--meta-store-manager-role-arnThe Amazon Resource Name (ARN) used to create and update the Glue table.

Its output, shortened

{
    "dataLakes": [
        {
            "createStatus": "COMPLETED",
            "dataLakeArn": "arn:aws:securitylake:us-east-2:123456789012:data-lake/default",
            "encryptionConfiguration": {
                "kmsKeyId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE22222"
            },
            "lifecycleConfiguration": {
                "expiration": {
                    "days": 500
                },
                "transitions": [
                    {
                        "days": 30,
                        "storageClass": "GLACIER"
                    }
                ]
            },
            "region": "us-east-2",
            "replicationConfiguration": {
                "regions": [
                    "ap-northeast-3"
                ],
                "roleArn": "arn:aws:securitylake:ap-northeast-3:123456789012:data-lake/default"
            },
            "s3BucketArn": "arn:aws:s3:::aws-security-data-lake-us-east-2-cehuifzl5rwmhm6m62h7zhvtseogr9",
            "updateStatus": {
                "exception": {},
                "requestId": "a1b2c3d4-5678-90ab-cdef-EXAMPLE33333",
… 5 more lines

For more information, see Getting started with Amazon Security Lake in the Amazon Security Lake User Guide.

Options

2 in the AWS CLI reference

--configurationsSpecifies the Region or Regions that will contribute data to the rollup region.

--meta-store-manager-role-arnThe Amazon Resource Name (ARN) used to create and update the Glue table.