aws_securitylake_subscriber

access_types

Type: UNORDERED_LIST_STRING
Provider name: accessTypes
Description: You can choose to notify subscribers of new objects with an Amazon Simple Queue Service (Amazon SQS) queue or through messaging to an HTTPS endpoint provided by the subscriber. Subscribers can consume data by directly querying Lake Formation tables in your Amazon S3 bucket through services like Amazon Athena. This subscription type is defined as LAKEFORMATION.

account_id

Type: STRING

created_at

Type: TIMESTAMP
Provider name: createdAt
Description: The date and time when the subscriber was created.

resource_share_arn

Type: STRING
Provider name: resourceShareArn
Description: The Amazon Resource Name (ARN) which uniquely defines the Amazon Web Services RAM resource share. Before accepting the RAM resource share invitation, you can view details related to the RAM resource share. This field is available only for Lake Formation subscribers created after March 8, 2023.

resource_share_name

Type: STRING
Provider name: resourceShareName
Description: The name of the resource share.

role_arn

Type: STRING
Provider name: roleArn
Description: The Amazon Resource Name (ARN) specifying the role of the subscriber.

s3_bucket_arn

Type: STRING
Provider name: s3BucketArn
Description: The ARN for the Amazon S3 bucket.

sources

Type: UNORDERED_LIST_STRUCT
Provider name: sources
Description: Amazon Security Lake supports log and event collection for natively supported Amazon Web Services services. For more information, see the Amazon Security Lake User Guide.

• aws_log_source
  Type: STRUCT
  Provider name: awsLogSource
  Description: Amazon Security Lake supports log and event collection for natively supported Amazon Web Services services. For more information, see the Amazon Security Lake User Guide.
  
  • source_name
    Type: STRING
    Provider name: sourceName
    Description: The name for a Amazon Web Services source. This must be a Regionally unique value.
    
  • source_version
    Type: STRING
    Provider name: sourceVersion
    Description: The version for a Amazon Web Services source. This must be a Regionally unique value.
    
• custom_log_source
  Type: STRUCT
  Provider name: customLogSource
  Description: Amazon Security Lake supports custom source types. For more information, see the Amazon Security Lake User Guide.
  
  • attributes
    Type: STRUCT
    Provider name: attributes
    Description: The attributes of a third-party custom source.
    
    • crawler_arn
      Type: STRING
      Provider name: crawlerArn
      Description: The ARN of the Glue crawler.
      
    • database_arn
      Type: STRING
      Provider name: databaseArn
      Description: The ARN of the Glue database where results are written, such as: arn:aws:daylight:us-east-1::database/sometable/*.
      
    • table_arn
      Type: STRING
      Provider name: tableArn
      Description: The ARN of the Glue table.
      
  • provider
    Type: STRUCT
    Provider name: provider
    Description: The details of the log provider for a third-party custom source.
    
    • location
      Type: STRING
      Provider name: location
      Description: The location of the partition in the Amazon S3 bucket for Security Lake.
      
    • role_arn
      Type: STRING
      Provider name: roleArn
      Description: The ARN of the IAM role to be used by the entity putting logs into your custom source partition. Security Lake will apply the correct access policies to this role, but you must first manually create the trust policy for this role. The IAM role name must start with the text ‘Security Lake’. The IAM role must trust the logProviderAccountId to assume the role.
      
  • source_name
    Type: STRING
    Provider name: sourceName
    Description: The name for a third-party custom source. This must be a Regionally unique value.
    
  • source_version
    Type: STRING
    Provider name: sourceVersion
    Description: The version for a third-party custom source. This must be a Regionally unique value.
    

subscriber_arn

Type: STRING
Provider name: subscriberArn
Description: The subscriber ARN of the Amazon Security Lake subscriber account.

subscriber_description

Type: STRING
Provider name: subscriberDescription
Description: The subscriber descriptions for a subscriber account. The description for a subscriber includes subscriberName, accountID, externalID, and subscriberId.

subscriber_endpoint

Type: STRING
Provider name: subscriberEndpoint
Description: The subscriber endpoint to which exception messages are posted.

subscriber_id

Type: STRING
Provider name: subscriberId
Description: The subscriber ID of the Amazon Security Lake subscriber account.

subscriber_identity

Type: STRUCT
Provider name: subscriberIdentity
Description: The Amazon Web Services identity used to access your data.

• external_id
  Type: STRING
  Provider name: externalId
  Description: The external ID used to establish trust relationship with the Amazon Web Services identity.
  
• principal
  Type: STRING
  Provider name: principal
  Description: The Amazon Web Services identity principal.
  

subscriber_name

Type: STRING
Provider name: subscriberName
Description: The name of your Amazon Security Lake subscriber account.

subscriber_status

Type: STRING
Provider name: subscriberStatus
Description: The subscriber status of the Amazon Security Lake subscriber account.

tags

Type: UNORDERED_LIST_STRING

updated_at

Type: TIMESTAMP
Provider name: updatedAt
Description: The date and time when the subscriber was last updated.