Amazon CloudWatch launches unified management and analytics for operational, security, and compliance data

Amazon CloudWatch Unified Data Store

Amazon CloudWatch now provides new data management and analytics capabilities that allow you to unify operational, security, and compliance data across your AWS environment and third-party sources. DevOps teams, security analysts, and compliance officers can now access all their data in a single place, eliminating the need to maintain multiple separate data stores and complex ETL pipelines.

CloudWatch now offers greater flexibility in where and how customers gain insights into this data, both natively in CloudWatch or with any Apache Iceberg-compatible tool.

Key Features

• Unified Data Store: Collect and aggregate logs across AWS accounts and regions aligned to geographic boundaries, business units, or persona-specific requirements.
• AWS Organization-wide Enablement: Enablement for AWS sources such as AWS CloudTrail, Amazon VPC, and Amazon WAF.
• Managed Collectors: Managed collectors for third-party sources such as Crowdstrike, Okta, Palo Alto Networks.
• Data Transformation: Use pipelines to transform and enrich logs to standard formats such as Open Cybersecurity Schema Framework (OCSF) for security analytics.
• Managed Storage: Make data available in managed Amazon S3 Tables at no additional storage charge.
• Analytics Tools: Query data in Amazon SageMaker Unified Studio, Amazon Quick Suite, Amazon Athena, Amazon Redshift, or any Apache Iceberg-compatible analytics tool.

What to do

• Visit the Ingestion page in the CloudWatch console and add one or more data sources.
• Learn more about Amazon CloudWatch unified data store on the product page, pricing page, and documentation.
• Check Regional availability on the AWS Builder Center.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.