Microsoft Azure → Amazon Web Services
AWS equivalent of Microsoft Sentinel data lake
The closest AWS equivalent of Microsoft Sentinel data lake is Amazon Security Lake.
About Microsoft Sentinel data lake
| Provider | Microsoft Azure |
|---|---|
| Status | Generally available |
| What it is | Low-cost, long-retention security data lake in open format with tiered storage and a single copy of data, queryable with KQL, notebooks, and jobs alongside Sentinel analytics. |
| Documentation | learn.microsoft.com |
| Pricing | Official pricing page |
AWS mappings (1)
| Capability | AWS equivalent | Match |
|---|---|---|
| Security data lake | Amazon Security Lake | Partial match |
Threat detection, posture & security operations(1)
Security data lake Partial match
Amazon Security Lake maps to the Microsoft Sentinel data lake.
- Format and ownership. Security Lake stores OCSF-normalized Parquet in S3 buckets in your account, which any tool (Athena, OpenSearch, partner SIEMs) can query. Sentinel data lake is a Microsoft-managed lake tier with a single copy of data, queried with KQL, notebooks, and jobs alongside Sentinel analytics.