# Amazon Security Lake API

> Amazon Security Lake API on Apizie: 31 endpoints (Adds a natively supported Amazon Web Service as an Amazon Security Lake source. Enables source types for…, Adds a third-party custom source in Amazon Security Lake, from the Amazon Web Services Region where you want…, Initializes an Amazon Security Lake instance with the provided (or default) configuration. You can enable…, Specifies where to store your security data and for how long. You can add a rollup Region to consolidate…, …) returned as clean JSON through one API key. Send your own provider key in the x-upstream-key header. Call it over REST at https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/{endpoint} or from Claude, ChatGPT and Cursor through the Apizie MCP server. Free plan: 1,000 requests a month.

- Project key: `cloud:amazonaws-securitylake`
- Category: Cloud
- Status: byok
- Source: https://github.com/mermade/aws2openapi
- Page: https://zieapi.vercel.app/api/cloud/amazonaws-securitylake
- OpenAPI: https://zieapi.vercel.app/api/cloud/amazonaws-securitylake/openapi.json

Amazon Security Lake is a fully managed security data lake service. You can use Security Lake to automatically centralize security data from cloud, on-premises, and custom sources into a data lake that's stored in your…

## Endpoints

### Adds a natively supported Amazon Web Service as an Amazon Security Lake source. Enables source types for…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/create-aws-log-source` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Adds a third-party custom source in Amazon Security Lake, from the Amazon Web Services Region where you want…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/create-custom-log-source` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Initializes an Amazon Security Lake instance with the provided (or default) configuration. You can enable…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/create-data-lake` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Specifies where to store your security data and for how long. You can add a rollup Region to consolidate…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/update-data-lake` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Retrieves the details of exception notifications for the account in Amazon Security Lake.
`GET https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/get-data-lake-exception-subscription` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |

### Creates the specified notification subscription in Amazon Security Lake for the organization you specify.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/create-data-lake-exception-subscription` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Updates the specified notification subscription in Amazon Security Lake for the organization you specify.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/update-data-lake-exception-subscription` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Deletes the specified notification subscription in Amazon Security Lake for the organization you specify.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/delete-data-lake-exception-subscription` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |

### Retrieves the configuration that will be automatically set up for accounts added to the organization after…
`GET https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/get-data-lake-organization-configuration` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |

### Automatically enables Amazon Security Lake for new member accounts in your organization. Security Lake is…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/create-data-lake-organization-configuration` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### List all subscribers for the specific Amazon Security Lake account ID. You can retrieve a list of…
`GET https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/list-subscribers` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| maxResults | integer | no | The maximum number of accounts for which the configuration is displayed. |
| nextToken | string | no | If nextToken is returned, there are more results available. You can repeat the call using the returned token to retrieve the next page. |

### Creates a subscription permission for accounts that are already enabled in Amazon Security Lake. You can…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/create-subscriber` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Notifies the subscriber when new data is written to the data lake for the sources that the subscriber…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/create-subscriber-notification` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| subscriberId | string | yes | The subscriber ID for the notification subscription. |
| body | object | yes | JSON request body |

### Updates an existing notification method for the subscription (SQS or HTTPs endpoint) or switches the…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/update-subscriber-notification` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| subscriberId | string | yes | The subscription ID for which the subscription notification is specified. |
| body | object | yes | JSON request body |

### Deletes the specified notification subscription in Amazon Security Lake for the organization you specify.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/delete-subscriber-notification` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| subscriberId | string | yes | The ID of the Security Lake subscriber account. |

### Removes a natively supported Amazon Web Service as an Amazon Security Lake source. You can remove a source…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/delete-aws-log-source` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Removes a custom log source from Amazon Security Lake, to stop sending data from the custom source to…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/delete-custom-log-source` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| sourceName | string | yes | The source name of custom log source that you want to delete. |
| sourceVersion | string | no | The source version for the third-party custom source. You can limit the custom source removal to the specified source version. |

### When you disable Amazon Security Lake from your account, Security Lake is disabled in all Amazon Web…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/delete-data-lake` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Turns off automatic enablement of Amazon Security Lake for member accounts that are added to an organization…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/delete-data-lake-organization-configuration` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Retrieves the subscription information for the specified subscription ID. You can get information about a…
`GET https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/get-subscriber` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| subscriberId | string | yes | A value created by Amazon Security Lake that uniquely identifies your GetSubscriber API request. |

### Updates an existing subscription for the given Amazon Security Lake account ID. You can update a subscriber…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/update-subscriber` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| subscriberId | string | yes | A value created by Security Lake that uniquely identifies your subscription. |
| body | object | yes | JSON request body |

### Deletes the subscription permission and all notification settings for accounts that are already enabled in…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/delete-subscriber` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| subscriberId | string | yes | A value created by Security Lake that uniquely identifies your DeleteSubscriber API request. |

### Designates the Amazon Security Lake delegated administrator account for the organization. This API can only…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/register-data-lake-delegated-administrator` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| body | object | yes | JSON request body |

### Deletes the Amazon Security Lake delegated administrator account for the organization. This API can only be…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/deregister-data-lake-delegated-administrator` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |

### Retrieves a snapshot of the current Region, including whether Amazon Security Lake is enabled for those…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/get-data-lake-sources` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| maxResults | string | no | Pagination limit |
| nextToken | string | no | Pagination token |
| body | object | yes | JSON request body |

### Lists the Amazon Security Lake exceptions that you can use to find the source of problems and fix them.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/list-data-lake-exceptions` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| maxResults | string | no | Pagination limit |
| nextToken | string | no | Pagination token |
| body | object | yes | JSON request body |

### Retrieves the Amazon Security Lake configuration object for the specified Amazon Web Services Regions. You…
`GET https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/list-data-lakes` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| regions | array | no | The list of regions where Security Lake is enabled. |

### Retrieves the log sources in the current Amazon Web Services Region.
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/list-log-sources` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| maxResults | string | no | Pagination limit |
| nextToken | string | no | Pagination token |
| body | object | yes | JSON request body |

### Retrieves the tags (keys and values) that are associated with an Amazon Security Lake resource: a…
`GET https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/list-tags-for-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| resourceArn | string | yes | The Amazon Resource Name (ARN) of the Amazon Security Lake resource to retrieve the tags for. |

### Adds or updates one or more tags that are associated with an Amazon Security Lake resource: a subscriber, or…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/tag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| resourceArn | string | yes | The Amazon Resource Name (ARN) of the Amazon Security Lake resource to add or update the tags for. |
| body | object | yes | JSON request body |

### Removes one or more tags (keys and values) from an Amazon Security Lake resource: a subscriber, or the data…
`POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/untag-resource` (byok)

| Parameter | Type | Required | Description |
|---|---|---|---|
| region | string | no | The AWS region |
| resourceArn | string | yes | The Amazon Resource Name (ARN) of the Amazon Security Lake resource to remove one or more tags from. |
| tagKeys | array | yes | A list of one or more tag keys. For each value in the list, specify the tag key for a tag to remove from the Amazon Security Lake resource. |

## Example
```
curl "https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/create-aws-log-source" \
  -H "x-api-key: $APIZIE_KEY" \
  -H "x-upstream-key: $PROVIDER_KEY"
```

## FAQ

### How do I call the Amazon Security Lake API?
Create a free Apizie key, then send POST https://zieapi.vercel.app/v1/cloud:amazonaws-securitylake/create-aws-log-source with the header x-api-key. Every endpoint returns { project, data, timestamp }.

### Is the Amazon Security Lake API free on Apizie?
Yes. The Free plan includes 1,000 requests a month at 100 requests a minute, no credit card. Amazon Security Lake itself also needs your own key from amazonaws.com.

### Can AI agents use the Amazon Security Lake API?
Yes. Add the Apizie MCP server (https://zieapi.vercel.app/mcp) to Claude, ChatGPT, Cursor or VS Code, then ask in plain language. The agent calls run_scraper with project key cloud:amazonaws-securitylake.

### What is the status of the Amazon Security Lake API?
Needs your own provider key (bring your own key)