Prisma Cloud Supports Amazon Security Lake as a Source Provider

May 30, 2023
3 minutes
204 views

Prisma Cloud aggregates our vulnerability detection data and sends our findings to Amazon Security Lake using the OCSF schema.

Prisma Cloud by Palo Alto Networks is excited to co-launch the general availability of Amazon Security Lake with AWS. Your security teams can now use Amazon Security Lake to analyze Prisma Cloud and AWS security findings across your environment and improve the protection of your workloads, applications and data.

Prisma Cloud vulnerability security findings adhere to AWS requirements and best practices as an Amazon Security Lake source, including format, schema, partitioning and performance optimization.

“With Prisma Cloud sharing vulnerability findings to Amazon Security Lake, Palo Alto Networks is helping cloud teams everywhere with data that can improve visibility and solve security challenges across a broad range of use cases,” said Rod Wallace, General Manager for Amazon Security Lake.

Improve Cloud Visibility with Amazon Security Lake and ​​Prisma Cloud Findings

Prisma Cloud aggregates our vulnerability-detection data and then sends our findings to Amazon Security Lake using the OCSF schema.
Prisma Cloud aggregates our vulnerability-detection data and then sends our findings to Amazon Security Lake using the OCSF schema.

Prisma Cloud is a source provider of vulnerability security data and, together with Amazon Security Lake, can help AWS customers simplify the storage, retrieval and consumption of security logs through our application of a common OCSF open-source schema.

OCSF stands for Open Cybersecurity Schema Format, which is a standard data model for exchanging cybersecurity-related data between different security tools and services. By ingesting and analyzing security data from multiple AWS service sources — including Prisma Cloud OCSF-compliant vulnerability security data — customers can achieve better detection and response to security threats while improving team and vendor collaboration and interoperability.

Amazon Security Lake also acts as a centralized location for storing and managing security data, so AWS customers can reduce the complexity and costs associated with managing multiple security tools and services. And both Prisma Cloud and Amazon Security Lake are designed to manage security data at any scale, as well as to adapt to your ever-changing business needs.

Getting Started with Amazon Security Lake and Prisma Cloud Findings

Prisma Cloud customers can enable the Amazon Security Lake integration from the Prisma Cloud Console.

Customers can opt into the Prisma Cloud integration with Amazon Security Lake from the Prisma Cloud Console.
Customers can opt into the Prisma Cloud integration with Amazon Security Lake from the Prisma Cloud Console.

Just log into your Prisma Cloud Console to add Amazon Security Lake as an Amazon S3 integration in a few clicks — it’s that easy. Prisma Cloud findings are then sent in the parquet format to the customer’s Amazon S3 bucket for data analysis and their own future use.

Improve Your Cloud Visibility with Prisma Cloud and Amazon Security Lake

Prisma Cloud by Palo Alto Networks, together with Amazon Security Lake, will help your business gain more visibility into your AWS environment with a centralized and purpose-built security data lake. Amazon Security Lake allows you to continuously analyze Prisma Cloud findings and solve critical security challenges.

Palo Alto Networks is proud to support continuous innovation for our AWS customers with Prisma Cloud and to help you better secure your cloud applications.

You can start using Prisma Cloud with Amazon Security Lake by visiting Prisma Cloud at the AWS Marketplace. To learn more about the benefits of Prisma Cloud in your AWS environment, request a free 30-day trial.


Subscribe to Cloud Native Security Blogs!

Sign up to receive must-read articles, Playbooks of the Week, new feature announcements, and more.