aws_securitylake_data_lake

account_id

Type: STRING

create_status

Type: STRING
Provider name: createStatus
Description: Retrieves the status of the CreateDatalake API call for an account in Amazon Security Lake.

data_lake_arn

Type: STRING
Provider name: dataLakeArn
Description: The Amazon Resource Name (ARN) created by you to provide to the subscriber. For more information about ARNs and how to use them in policies, see the Amazon Security Lake User Guide.

encryption_configuration

Type: STRUCT
Provider name: encryptionConfiguration
Description: Provides encryption details of Amazon Security Lake object.

• kms_key_id
  Type: STRING
  Provider name: kmsKeyId
  Description: The identifier of KMS encryption key used by Amazon Security Lake to encrypt the Security Lake object.
  

lifecycle_configuration

Type: STRUCT
Provider name: lifecycleConfiguration
Description: Provides lifecycle details of Amazon Security Lake object.

• expiration
  Type: STRUCT
  Provider name: expiration
  Description: Provides data expiration details of Amazon Security Lake object.
  
  • days
    Type: INT32
    Provider name: days
    Description: Number of days before data expires in the Amazon Security Lake object.
    
• transitions
  Type: UNORDERED_LIST_STRUCT
  Provider name: transitions
  Description: Provides data storage transition details of Amazon Security Lake object.
  
  • days
    Type: INT32
    Provider name: days
    Description: Number of days before data transitions to a different S3 Storage Class in the Amazon Security Lake object.
    
  • storage_class
    Type: STRING
    Provider name: storageClass
    Description: The range of storage classes that you can choose from based on the data access, resiliency, and cost requirements of your workloads.
    

region

Type: STRING
Provider name: region
Description: The Amazon Web Services Regions where Security Lake is enabled.

replication_configuration

Type: STRUCT
Provider name: replicationConfiguration
Description: Provides replication details of Amazon Security Lake object.

• regions
  Type: UNORDERED_LIST_STRING
  Provider name: regions
  Description: Specifies one or more centralized rollup Regions. The Amazon Web Services Region specified in the region parameter of the CreateDataLake or UpdateDataLake operations contributes data to the rollup Region or Regions specified in this parameter. Replication enables automatic, asynchronous copying of objects across Amazon S3 buckets. S3 buckets that are configured for object replication can be owned by the same Amazon Web Services account or by different accounts. You can replicate objects to a single destination bucket or to multiple destination buckets. The destination buckets can be in different Regions or within the same Region as the source bucket.
  
• role_arn
  Type: STRING
  Provider name: roleArn
  Description: Replication settings for the Amazon S3 buckets. This parameter uses the Identity and Access Management (IAM) role you created that is managed by Security Lake, to ensure the replication setting is correct.
  

s3_bucket_arn

Type: STRING
Provider name: s3BucketArn
Description: The ARN for the Amazon Security Lake Amazon S3 bucket.

tags

Type: UNORDERED_LIST_STRING

update_status

Type: STRUCT
Provider name: updateStatus
Description: The status of the last UpdateDataLake or DeleteDataLake API request.

• exception
  Type: STRUCT
  Provider name: exception
  Description: The details of the last UpdateDataLakeor DeleteDataLake API request which failed.
  
  • code
    Type: STRING
    Provider name: code
    Description: The reason code for the exception of the last UpdateDataLake or DeleteDataLake API request.
    
  • reason
    Type: STRING
    Provider name: reason
    Description: The reason for the exception of the last UpdateDataLakeor DeleteDataLake API request.
    
• request_id
  Type: STRING
  Provider name: requestId
  Description: The unique ID for the last UpdateDataLake or DeleteDataLake API request.
  
• status
  Type: STRING
  Provider name: status
  Description: The status of the last UpdateDataLake or DeleteDataLake API request that was requested.