Leverage the Cloud-first Power of Amazon's Security Portfolio

Overview

AWS is a comprehensive cloud platform with a wide range of services for computing (EC2, Lambda), storage (S3, EBS), and databases (RDS, DynamoDB). It emphasizes security with IAM and GuardDuty while also enabling scalable and flexible cloud solutions. AWS also offers powerful analytics tools like Redshift and Kinesis for data processing.

Key Products

Amazon GuardDuty

GuardDuty combines Machine Learning (ML) and integrated threat intelligence from AWS and leading third parties to help protect your AWS accounts, workloads, and data.

Amazon Security Lake

Security Lake centralizes and standardizes security data from AWS, SaaS providers, on-premises, and cloud sources into a purpose-built data lake within your account.

AWS AppFabric

AppFabric connects SaaS applications across an organization, providing IT and security teams with unified management, enhanced security, and automation for improved productivity.

AWS CloudWatch

CloudWatch is a monitoring and observability service that collects and visualizes AWS resource metrics, sets alarms, automates responses, and provides real-time operational insights.

AWS S3 Bucket

Amazon S3 is a scalable object storage service designed for high durability, security, and accessibility, allowing users to store and retrieve any amount of data.

Amazon DynamoDB

Amazon DynamoDB is a fully managed, serverless NoSQL database with single-digit millisecond performance at any scale.

Connect with the AWS Security Ecosystem

Avoid these common problems of going solo or integrating in-house:

Your engineers would have to spend time researching and setting up Amazon Security tools.

If there is a new API or version change, you will have to pull valuable engineering resources to quickly fix the underlying problem.

It can be difficult and complex to coordinate IAM roles, data access policies, and security configurations across various AWS services like S3, Lambda, and EC2.

In-house development efforts may not address all technical issues like missing commands, API availability loss, event transmission/capture failure, etc.

Having expertise in managing granular permission in order to avoid over-privilege and potential access leaks is a must.

Keeping third party libraries updated to fix vulnerabilities can be time consuming when done in-house.

It is crucial to have dedicated resources to keep up with regular security updates for various AWS services and application dependencies.

Your team must ensure there is sufficient collaboration between development, security, and operations teams which can otherwise lead to security gaps and vulnerabilities.

Empower with OCSF and AWS Security

Metron Security simplifies your security integration with AWS using the Open Cybersecurity Schema Framework (OCSF) and AWS Security Lake. Gain a unified, real-time view of your security landscape—keeping your cloud environment secure and compliant with ease.

Amazon Security Lake Capabilities

Deep Expertise with AWS Security

Benefit from our experience in developing end-to-end solutions using AWS security features.

Open Cybersecurity Schema Framework (OCSF) Integration

Leverage the power of OCSF to ingest data from leading security providers like Amazon, Cisco, CrowdStrike, SentinelOne, Palo Alto Networks, and several others.

Configuration and Integration Guidance

Our team can assist you in configuring AWS services and implementing your integration solution, ensuring smooth functionality and compatibility.

AWS Marketplace Support

If you plan to publish your app on the AWS Marketplace, we provide guidance in building and certifying your app to meet the platform's requirements.

Integration Use Cases

Ingest from Multiple Platforms

Use Amazon Security Lake as the source of security events. Ingest logs from multiple security vendors with a single integration. This ensures that your customers have centralized access to critical security data across multiple vendors.

Enhanced Log Visualization

With the integration in place, you can visualize security logs in a more meaningful manner within the XDR Platform. This allows you to gain valuable insights into security events and quickly identify patterns or anomalies, empowering you to make informed decisions sooner.

Effortless Data Search

A standard, normalized schema means you can correlate events across multiple security vendors. You can utilize various options and categories to search for specific information, allowing you to rapidly locate the data you need for effective threat detection and response.

Highlighted Important Fields

The XDR platform highlights important fields such as source IP, destination IP, and details or error messages within the logs. This helps you prioritize and focus on critical security information, ensuring that you don't miss any key insights during your investigations.

OCSF Schema Compatibility

The integration utilizes Open Cybersecurity Schema Framework (OCSF), allowing you to search across vendors and analyze security data with a standardized schema. This makes it easier to extract insights and intelligence, improving interoperability and collaboration.

Dashboards and Visualization

XDR platforms provide powerful dashboards and visualization capabilities that allow you to effectively analyze and interpret security data from Amazon Security Lake and XDR. You can create customized dashboards tailored to your specific needs, enabling you to monitor and track security events in real time.