Amazon OpenSearch Service zero-ETL integration with Amazon Security Lake

Amazon OpenSearch Service now offers a zero-ETL integration with Amazon Security Lake, enabling you to query and analyze security data in-place directly through OpenSearch. This integration allows you to efficiently explore voluminous data sources that were previously cost-prohibitive to analyze, streamlining security investigations and providing comprehensive visibility of your security landscape.

Key features of this integration include:

1. In-place querying: Analyze security data directly in OpenSearch without data movement or duplication.
2. Selective data ingestion: Flexibility to choose which data to ingest for more detailed analysis, optimizing costs and performance.
3. Pre-built OCSF-compliant analytics: Leverage pre-built queries and dashboards to accelerate security analysis.

Using the powerful analytics and visualization capabilities in OpenSearch Service, you can perform deeper investigations, enhance threat hunting, and proactively monitor your security posture. The built-in query accelerator boosts performance and enables fast-loading dashboards, enhancing your overall experience. You can now focus on effective security operations while potentially lowering your analytics costs by eliminating the need to manage complex data pipelines.

Read our launch blog to learn more. To learn more on using this capability, visit the OpenSearch Service Integrations page and the OpenSearch Service Developer Guide. To learn more about how to configure and share Security Lake, see the Get Started Guide.