AWS::SecurityLake::Subscriber

SecurityLake Subscriber

Resource Type definition for AWS::SecurityLake::Subscriber

Properties

7 configurable properties. 5 required. Click a row to see details.

Filter:

Property	Type	Flags
`AccessTypes`	`array`	Required
`DataLakeArn`	`string`	RequiredCreate-only
`Sources`	`Array<Source>`	Required
`SubscriberIdentity`	`object`	Required
`SubscriberName`	`string`	Required
`SubscriberDescription`	`string`
`Tags`	`Array<Tag>`

Return Values

Values returned after the resource is created. Access these with Fn::GetAtt.

Attribute	Type	Description
`ResourceShareArn`	`string`	-
`ResourceShareName`	`string`	-
`S3BucketArn`	`string`	-
`SubscriberArn`	`string`	-
`SubscriberRoleArn`	`string`	-

Sample CloudFormation Template

A minimal template with required properties and common optional ones.

template.yaml

AWSTemplateFormatVersion: "2010-09-09"
Description: Sample template for AWS::SecurityLake::Subscriber

Resources:
  MyResource:
    Type: AWS::SecurityLake::Subscriber
    Properties:
      AccessTypes: "value"
      DataLakeArn: "arn:aws:service:region:account:resource"
      Sources: []
      SubscriberIdentity: "my-subscriberidentity"
      SubscriberName: "my-subscribername"
      Tags:
        - Key: Environment
          Value: Production

Required IAM Permissions

Permissions CloudFormation needs in your IAM role to manage this resource.

create

securitylake:CreateSubscribersecuritylake:CreateCustomLogSourcesecuritylake:CreateDataLakesecuritylake:TagResourcesecuritylake:GetSubscribersecuritylake:ListSubscriberssecuritylake:ListTagsForResourceiam:GetRole

read

securitylake:GetSubscribersecuritylake:ListTagsForResource

update

securitylake:UpdateSubscribersecuritylake:GetSubscribersecuritylake:TagResourcesecuritylake:UntagResourcesecuritylake:ListTagsForResourceglue:GetDatabaseglue:GetTablelakeformation:ListPermissions

delete

securitylake:DeleteSubscriberiam:GetRoleiam:ListRolePoliciesiam:DeleteRoleiam:DeleteRolePolicyglue:GetTablelakeformation:RevokePermissionslakeformation:ListPermissions

list

securitylake:ListSubscribers

Learn AWS the Practical Way

Our bi-weekly newsletter teaches hands-on AWS fundamentals. No certification fluff - just practical knowledge.

Subscribe to Newsletter

Quick Facts

ServiceSecurityLake

Properties12

Required5

TaggingSupported

Primary IDSubscriberArn

Supported Operations

CreateReadUpdateDeleteList

Immutable After Creation

These properties cannot be changed after the resource is created. Updating them triggers a replacement.

DataLakeArn

Related Resources

External Links

AWS Documentation