Play free

Security World 5 · Eyes Everywhere · Stage 4

Lake of Logs

Where the logs rest and who reads them: a normalised lake, a query service, a log explorer, a correlation engine, a dashboard, and a seat for the SIEM.

  • Amazon Security Lake
  • OCSF
  • Athena over logs
  • CloudWatch Logs Insights
  • OpenSearch Service
  • Amazon Managed Grafana
Domain
Security
World
Security World 5: Eyes Everywhere (Specialty)
Game type
Solution board: Drop services into each row's slots, then run records through them.
Time
About 35 minutes on a first attempt (estimated)
Exam guides
  • DEA-C01Skill 4.4.3: Use AWS CloudTrail Lake for centralized logging queries
  • SCS-C03Skill 1.2.3: Implement log storage and log data lakes (for example, Security Lake) and integrate with third-party security tools; Skill 1.2.4: Use AWS services to analyze logs (for example, CloudWatch Logs Insights, Amazon Athena, Security Hub findings); Skill 1.2.5: Use AWS services to normalize, parse, and correlate logs (for example, Amazon OpenSearch Service, AWS Lambda, Amazon Managed Grafana)