pulumi-aws-kotlin/com.pulumi.aws.securitylake.kotlin/DataLake

DataLake

class DataLake : KotlinCustomResource

Resource for managing an AWS Security Lake Data Lake.

NOTE: The underlying aws.securitylake.DataLake must be configured before creating other Security Lake resources. Use a depends_on statement.

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const example = new aws.securitylake.DataLake("example", {
    metaStoreManagerRoleArn: metaStoreManager.arn,
    configuration: {
        region: "eu-west-1",
        encryptionConfigurations: [{
            kmsKeyId: "S3_MANAGED_KEY",
        }],
        lifecycleConfiguration: {
            transitions: [
                {
                    days: 31,
                    storageClass: "STANDARD_IA",
                },
                {
                    days: 80,
                    storageClass: "ONEZONE_IA",
                },
            ],
            expiration: {
                days: 300,
            },
        },
    },
});
Content copied to clipboard
import pulumi
import pulumi_aws as aws
example = aws.securitylake.DataLake("example",
    meta_store_manager_role_arn=meta_store_manager["arn"],
    configuration={
        "region": "eu-west-1",
        "encryption_configurations": [{
            "kms_key_id": "S3_MANAGED_KEY",
        }],
        "lifecycle_configuration": {
            "transitions": [
                {
                    "days": 31,
                    "storage_class": "STANDARD_IA",
                },
                {
                    "days": 80,
                    "storage_class": "ONEZONE_IA",
                },
            ],
            "expiration": {
                "days": 300,
            },
        },
    })
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
    var example = new Aws.SecurityLake.DataLake("example", new()
    {
        MetaStoreManagerRoleArn = metaStoreManager.Arn,
        Configuration = new Aws.SecurityLake.Inputs.DataLakeConfigurationArgs
        {
            Region = "eu-west-1",
            EncryptionConfigurations = new[]
            {
                new Aws.SecurityLake.Inputs.DataLakeConfigurationEncryptionConfigurationArgs
                {
                    KmsKeyId = "S3_MANAGED_KEY",
                },
            },
            LifecycleConfiguration = new Aws.SecurityLake.Inputs.DataLakeConfigurationLifecycleConfigurationArgs
            {
                Transitions = new[]
                {
                    new Aws.SecurityLake.Inputs.DataLakeConfigurationLifecycleConfigurationTransitionArgs
                    {
                        Days = 31,
                        StorageClass = "STANDARD_IA",
                    },
                    new Aws.SecurityLake.Inputs.DataLakeConfigurationLifecycleConfigurationTransitionArgs
                    {
                        Days = 80,
                        StorageClass = "ONEZONE_IA",
                    },
                },
                Expiration = new Aws.SecurityLake.Inputs.DataLakeConfigurationLifecycleConfigurationExpirationArgs
                {
                    Days = 300,
                },
            },
        },
    });
});
Content copied to clipboard
package main
import (
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/securitylake"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := securitylake.NewDataLake(ctx, "example", &securitylake.DataLakeArgs{
			MetaStoreManagerRoleArn: pulumi.Any(metaStoreManager.Arn),
			Configuration: &securitylake.DataLakeConfigurationArgs{
				Region: pulumi.String("eu-west-1"),
				EncryptionConfigurations: securitylake.DataLakeConfigurationEncryptionConfigurationArray{
					&securitylake.DataLakeConfigurationEncryptionConfigurationArgs{
						KmsKeyId: pulumi.String("S3_MANAGED_KEY"),
					},
				},
				LifecycleConfiguration: &securitylake.DataLakeConfigurationLifecycleConfigurationArgs{
					Transitions: securitylake.DataLakeConfigurationLifecycleConfigurationTransitionArray{
						&securitylake.DataLakeConfigurationLifecycleConfigurationTransitionArgs{
							Days:         pulumi.Int(31),
							StorageClass: pulumi.String("STANDARD_IA"),
						},
						&securitylake.DataLakeConfigurationLifecycleConfigurationTransitionArgs{
							Days:         pulumi.Int(80),
							StorageClass: pulumi.String("ONEZONE_IA"),
						},
					},
					Expiration: &securitylake.DataLakeConfigurationLifecycleConfigurationExpirationArgs{
						Days: pulumi.Int(300),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.securitylake.DataLake;
import com.pulumi.aws.securitylake.DataLakeArgs;
import com.pulumi.aws.securitylake.inputs.DataLakeConfigurationArgs;
import com.pulumi.aws.securitylake.inputs.DataLakeConfigurationLifecycleConfigurationArgs;
import com.pulumi.aws.securitylake.inputs.DataLakeConfigurationLifecycleConfigurationExpirationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var example = new DataLake("example", DataLakeArgs.builder()
            .metaStoreManagerRoleArn(metaStoreManager.arn())
            .configuration(DataLakeConfigurationArgs.builder()
                .region("eu-west-1")
                .encryptionConfigurations(DataLakeConfigurationEncryptionConfigurationArgs.builder()
                    .kmsKeyId("S3_MANAGED_KEY")
                    .build())
                .lifecycleConfiguration(DataLakeConfigurationLifecycleConfigurationArgs.builder()
                    .transitions(
                        DataLakeConfigurationLifecycleConfigurationTransitionArgs.builder()
                            .days(31)
                            .storageClass("STANDARD_IA")
                            .build(),
                        DataLakeConfigurationLifecycleConfigurationTransitionArgs.builder()
                            .days(80)
                            .storageClass("ONEZONE_IA")
                            .build())
                    .expiration(DataLakeConfigurationLifecycleConfigurationExpirationArgs.builder()
                        .days(300)
                        .build())
                    .build())
                .build())
            .build());
    }
}
Content copied to clipboard
resources:
  example:
    type: aws:securitylake:DataLake
    properties:
      metaStoreManagerRoleArn: ${metaStoreManager.arn}
      configuration:
        region: eu-west-1
        encryptionConfigurations:
          - kmsKeyId: S3_MANAGED_KEY
        lifecycleConfiguration:
          transitions:
            - days: 31
              storageClass: STANDARD_IA
            - days: 80
              storageClass: ONEZONE_IA
          expiration:
            days: 300
Content copied to clipboard

Basic Usage

import * as pulumi from "@pulumi/pulumi";
import * as aws from "@pulumi/aws";
const example = new aws.securitylake.DataLake("example", {
    metaStoreManagerRoleArn: metaStoreManager.arn,
    configuration: {
        region: "eu-west-1",
        encryptionConfigurations: [{
            kmsKeyId: "S3_MANAGED_KEY",
        }],
    },
});
Content copied to clipboard
import pulumi
import pulumi_aws as aws
example = aws.securitylake.DataLake("example",
    meta_store_manager_role_arn=meta_store_manager["arn"],
    configuration={
        "region": "eu-west-1",
        "encryption_configurations": [{
            "kms_key_id": "S3_MANAGED_KEY",
        }],
    })
Content copied to clipboard
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Aws = Pulumi.Aws;
return await Deployment.RunAsync(() =>
{
    var example = new Aws.SecurityLake.DataLake("example", new()
    {
        MetaStoreManagerRoleArn = metaStoreManager.Arn,
        Configuration = new Aws.SecurityLake.Inputs.DataLakeConfigurationArgs
        {
            Region = "eu-west-1",
            EncryptionConfigurations = new[]
            {
                new Aws.SecurityLake.Inputs.DataLakeConfigurationEncryptionConfigurationArgs
                {
                    KmsKeyId = "S3_MANAGED_KEY",
                },
            },
        },
    });
});
Content copied to clipboard
package main
import (
	"github.com/pulumi/pulumi-aws/sdk/v6/go/aws/securitylake"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := securitylake.NewDataLake(ctx, "example", &securitylake.DataLakeArgs{
			MetaStoreManagerRoleArn: pulumi.Any(metaStoreManager.Arn),
			Configuration: &securitylake.DataLakeConfigurationArgs{
				Region: pulumi.String("eu-west-1"),
				EncryptionConfigurations: securitylake.DataLakeConfigurationEncryptionConfigurationArray{
					&securitylake.DataLakeConfigurationEncryptionConfigurationArgs{
						KmsKeyId: pulumi.String("S3_MANAGED_KEY"),
					},
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Content copied to clipboard
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.aws.securitylake.DataLake;
import com.pulumi.aws.securitylake.DataLakeArgs;
import com.pulumi.aws.securitylake.inputs.DataLakeConfigurationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        var example = new DataLake("example", DataLakeArgs.builder()
            .metaStoreManagerRoleArn(metaStoreManager.arn())
            .configuration(DataLakeConfigurationArgs.builder()
                .region("eu-west-1")
                .encryptionConfigurations(DataLakeConfigurationEncryptionConfigurationArgs.builder()
                    .kmsKeyId("S3_MANAGED_KEY")
                    .build())
                .build())
            .build());
    }
}
Content copied to clipboard
resources:
  example:
    type: aws:securitylake:DataLake
    properties:
      metaStoreManagerRoleArn: ${metaStoreManager.arn}
      configuration:
        region: eu-west-1
        encryptionConfigurations:
          - kmsKeyId: S3_MANAGED_KEY
Content copied to clipboard

Import

Using pulumi import, import Security Hub standards subscriptions using the standards subscription ARN. For example:

$ pulumi import aws:securitylake/dataLake:DataLake example arn:aws:securitylake:eu-west-1:123456789012:data-lake/default
Content copied to clipboard

Properties

Link copied to clipboard
val arn: Output<String>

ARN of the Data Lake.

Link copied to clipboard
val configuration: Output<DataLakeConfiguration>?

Specify the Region or Regions that will contribute data to the rollup region.

Link copied to clipboard
val id: Output<String>
Link copied to clipboard
val metaStoreManagerRoleArn: Output<String>

The Amazon Resource Name (ARN) used to create and update the AWS Glue table. This table contains partitions generated by the ingestion and normalization of AWS log sources and custom sources.

Link copied to clipboard
val pulumiChildResources: Set<KotlinResource>
Link copied to clipboard
Link copied to clipboard
Link copied to clipboard
val s3BucketArn: Output<String>

The ARN for the Amazon Security Lake Amazon S3 bucket.

Link copied to clipboard
val tags: Output<Map<String, String>>?

Key-value map of resource tags. If configured with a provider default_tags configuration block present, tags with matching keys will overwrite those defined at the provider-level.

Link copied to clipboard
val tagsAll: Output<Map<String, String>>

A map of tags assigned to the resource, including those inherited from the provider default_tags configuration block.

Link copied to clipboard
val timeouts: Output<DataLakeTimeouts>?
Link copied to clipboard
val urn: Output<String>