Amazon Security Lake pricing calculator
CloudTrail, Other AWS Logs, and Normalization. Estimate your costs using AWS list prices.
Estimates from AWS list prices, not an AWS quote. Discounts, taxes and credit terms may affect your bill.
01 · How Amazon Security Lake pricing works
What you pay for
- CloudTrail management event ingestion: $0.75 per GB.
- Other AWS logs (VPC Flow, Route 53, Security Hub findings, S3 data events, Lambda): tiered from $0.25 per GB down to $0.05.
- Normalization of custom/third-party data to OCSF: $0.035 per GB (in this data); S3 storage and queries billed separately.
Common cost traps
- CloudTrail data events and VPC Flow Logs can be terabytes per month.
- S3 storage in the lake grows indefinitely without lifecycle rules.
- Subscribers querying with Athena pay per TB scanned.
Ways to reduce cost
- Pick only the log sources and accounts you need.
- Set retention and S3 lifecycle rules per source.
- Partition-aware queries keep Athena scans small.
Free Tier & account eligibility
Free Tier depends on account age. Accounts created on or after 15 July 2025 get a $100 sign-up credit plus up to $100 more for completing onboarding activities; on the Free plan these last 6 months (or until used up), on the Paid plan unused Free Tier credits stay usable for 12 months from sign-up. Accounts created before 15 July 2025 keep the legacy Free Tier (12-month offers plus always-free offers). Always-free offers apply on both plans. A 15-day free trial per account and Region has been offered. No always-free allowance; new-plan accounts can pay from Free Tier credits.
02 · AWS credits & runway
Do credits cover Amazon Security Lake?
Security Lake ingestion and normalization charges are eligible usage and are offset by credits; S3 storage, Glue, Lake Formation and Athena queries bill under those services. General rules: credits only offset charges from the billing cycle in which they were applied onward (never past bills), they apply only to the services listed on the credit in Billing and Cost Management > Credits, they expire on the date shown there, and accounts on the AWS Free plan cannot receive Activate credits until they upgrade to the Paid plan.
Check my creditsExcluded charges & conditions
- Upfront payments for Savings Plans and Reserved Instances (All Upfront, and the upfront part of Partial Upfront). The recurring hourly fee of a No Upfront commitment is billed as normal usage and can be offset.
- AWS Marketplace charges (Activate credits make an exception for third-party foundation models used through Amazon Bedrock).
- AWS Enterprise Support, Enterprise On-Ramp, Unified Operations, resold support and partner-led support.
- Amazon Route 53 domain name registration and transfer fees.
- Taxes (sales, use, VAT and similar), AWS Professional Services, Training and Certification, Mechanical Turk, AWS Managed Services, and any use for cryptocurrency mining.
Illustrative credit runway
Single-service examples from the supplied data, not your calculator result. Months = credit amount ÷ monthly cost, before credit expiry. Credits can expire before these theoretical months are used; coverage and other AWS services can shorten runway.
| Usage profile | Monthly estimate | $10,000 | $25,000 | $100,000 |
|---|---|---|---|---|
| Small | $62.50 | 160.0 mo. | 400.0 mo. | 1,600.0 mo. |
| Medium | $1,625.00 | 6.2 mo. | 15.4 mo. | 61.5 mo. |
| Large | $9,858.00 | 1.0 mo. | 2.5 mo. | 10.1 mo. |
Small profile assumptions
50 GB CloudTrail management logs, 100 GB VPC Flow/Route 53 logs | CloudTrail ingestion: 50 GB x $0.75 = $37.50; Other AWS logs: 100 GB tiered (100 @ $0.25) = $25.00 | Total ~$62.50/month, us-east-1 on-demand list prices, before Free Tier, taxes and support.
Medium profile assumptions
500 GB CloudTrail, 5 TB other AWS logs | CloudTrail ingestion: 500 GB x $0.75 = $375.00; Other AWS logs: 5,000 GB tiered (5,000 @ $0.25) = $1,250.00 | Total ~$1,625.00/month, us-east-1 on-demand list prices, before Free Tier, taxes and support.
Large profile assumptions
3 TB CloudTrail, 60 TB other AWS logs | CloudTrail ingestion: 3,000 GB x $0.75 = $2,250.00; Other AWS logs: 60,000 GB tiered (10,240 @ $0.25; 20,480 @ $0.15; 20,480 @ $0.075; 8,800 @ $0.05) = $7,608.00 | Total ~$9,858.00/month, us-east-1 on-demand list prices, before Free Tier, taxes and support.
04 · Questions
Amazon Security Lake pricing FAQ
How is Security Lake priced?
Per GB ingested: $0.75 for CloudTrail management events and tiered from $0.25 for other AWS logs, plus S3 and query costs.
Is there a free trial?
A 15-day trial per account and Region has been offered.
Do credits cover Security Lake?
Yes, it is eligible usage.
What else will I pay for?
S3 storage, Glue, Lake Formation and the query engine your subscribers use.
05 · Sources & estimate notes
Content pack dated 2026-10-19. Calculator rates remain their existing snapshots; this content update is not a price refresh.
Verification notes
- Security Lake free-trial length and the normalization fee should be confirmed.
- Runway prices come from the calculator repository snapshot rate card security-lake (no AWS Price List mapping in the build). Confirm the main unit prices on https://aws.amazon.com/security-lake/pricing/ before publishing.