You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
| **account** | string | N* | - | AWS account ID for Security Lake|
86
+
|`source`|string|N*|-|Security Lake source identifier|
87
+
|`account`|string|N*|-|AWS account ID for Security Lake|
88
88
89
-
\* = Conditionally required. When **source**, **region**, and **account** are all provided, files use Security Lake path structure: `ext/{source}/region={region}/accountId={account}/eventDay={date}/{file}`
89
+
\* = Conditionally required. When `source`, `region`, and `account` are all provided, files use Security Lake path structure: `ext/{source}/region={region}/accountId={account}/eventDay={date}/{file}`
90
90
91
91
### Azure Function App Integration
92
92
93
-
|Parameter | Type | Required | Default | Description|
93
+
|Parameter|Type|Required|Default|Description|
94
94
|---|---|---|---|---|
95
-
| **function.url** | string | N | - | Azure Function App endpoint URL for indirect uploads|
96
-
| **function.method** | string | N | `POST` | HTTP method for function app requests|
95
+
|`function.url`|string|N|-|Azure Function App endpoint URL for indirect uploads|
96
+
|`function.method`|string|N|`POST`|HTTP method for function app requests|
97
97
98
98
### Debug
99
99
100
-
|Parameter | Type | Required | Default | Description|
100
+
|Parameter|Type|Required|Default|Description|
101
101
|---|---|---|---|---|
102
-
| **description** | string | N | - | Optional description of target purpose|
103
-
| **tag** | string | N | - | Target identifier tag for routing and filtering|
104
-
| **status** | boolean | N | `true` | Enable or disable target processing|
102
+
|`description`|string|N|-|Optional description of target purpose|
103
+
|`tag`|string|N|-|Target identifier tag for routing and filtering|
104
+
|`status`|boolean|N|`true`|Enable or disable target processing|
105
105
106
106
## Details
107
107
108
-
AWS S3 target provides enterprise-grade cloud storage integration with comprehensive file format support and AWS Security Lake compatibility.
108
+
The target provides enterprise-grade cloud storage integration with comprehensive file format support and AWS Security Lake compatibility.
109
109
110
110
**Authentication Methods**: Supports static credentials (access key and secret key) with optional session tokens for temporary credentials. When deployed on AWS infrastructure, can leverage IAM role-based authentication without explicit credentials.
111
111
112
112
**File Formats**: Supports four output formats with distinct use cases:
113
-
- **json**: Single JSON object per file (human-readable, suitable for small datasets)
114
-
- **multijson**: Newline-delimited JSON objects (streaming format, efficient for large datasets)
- `parquet`: Columnar storage format (optimized for analytics, compression-friendly)
117
118
118
119
**Compression Options**: All formats support optional compression (`gzip`, `snappy`, `deflate`) to reduce storage costs and transfer times. Compression is applied before upload.
0 commit comments