Amazon Security Lake Pricing Calculator
Estimate tiered log ingestion, normalization, and S3 storage — the charges that do not show up until CloudTrail and GuardDuty feeds are flowing.
- No signup
- Instant results
- ~3 min
Rates reviewed
Log sources
us-east-1list rates, pricing as of 2026-07-05. S3, Glue, Lambda, and query costs excluded. Source: AWS public pricing.
Enter monthly ingestion volume per source. CloudTrail is priced higher than VPC Flow, Route 53, Security Hub, and other AWS logs.
$0.75/GB ingestion in us-east-1.
$0.25/GB ingestion.
Who This Tool Is For
Security engineers and compliance leads centralizing CloudTrail, VPC Flow, and DNS logs for SOC 2, HIPAA, or PCI audits.
Why We Built This Tool
Ingestion is priced per GB by source type with tiered rates — a 500 GB/month CloudTrail feed costs 3× more per GB than VPC Flow Logs.
What Problem It Solves
- CloudTrail premium. Management and data events bill at $0.75/GB — often the top ingestion line item.
- Hidden S3 bill. Security Lake stores OCSF Parquet in your account; retention multiplies storage cost.
- Adjacent services. Glue crawlers, Lambda transforms, and Athena queries are billed separately.
See Cloud Security or the GuardDuty calculator.
Frequently Asked Questions
Which log sources cost the most to ingest?
CloudTrail management and data events at $0.75/GB are the highest Security Lake ingestion rate. VPC Flow Logs, Route 53, Security Hub findings, and similar sources bill at $0.25/GB.
Is Security Lake cheaper than sending everything to CloudWatch Logs?
For high-volume centralized analytics, Security Lake plus S3 is often cheaper than CloudWatch Logs ingestion at scale — but you must model Athena query and storage costs separately.
Do I pay for OCSF normalization separately?
Yes. Normalization to OCSF and Parquet format is $0.035/GB on the volume ingested from AWS sources when enabled.
How does retention affect monthly storage cost?
This calculator models cumulative GB stored as monthly ingestion × retention months at S3 Standard rates. Lifecycle to IA or Glacier reduces long-term storage.
Can I scope costs to a single AWS Region?
Security Lake is deployed per Region. Ingestion and storage costs apply per participating Region; rollup to a central Region adds replication transfer.
Where do these prices come from?
Rates are AWS published us-east-1 list prices (Amazon Security Lake pricing), pricing as of 2026-07-05.