CrowdStrike advances SIEM and cloud security access on AWS

CrowdStrike has claimed to be the first cybersecurity partner to deliver an enhanced version of SaaS Quick Launch in AWS Marketplace for Falcon Next-Gen SIEM, combining automated configuration with new pay-as-you-go access.

SaaS Quick Launch, a feature in AWS Marketplace introduced in 2023, aims to make it easy and secure to deploy SaaS products, offering step-by-step instructions and resource deployment using preconfigured AWS CloudFormation templates

The enhanced onboarding experience for Falcon Next-Gen SIEM in AWS Marketplace delivers a single location, guided setup that connects directly to core AWS security services – including AWS CloudTrail, AWS Security Hub, and Amazon GuardDuty. This workflow automatically discovers active data sources and begins ingesting telemetry within minutes.

By streamlining how customers connect their AWS environments to CrowdStrike, organisations can unify data from endpoints, cloud workloads, and identities with AWS telemetry to deliver cross-domain threat detection and response, according to the company.

CrowdStrike is expanding Falcon Next-Gen SIEM capabilities for AWS with real-time response powered by Amazon EventBridge, eliminating the latency of traditional batch processes. Detections from AWS Security Hub and Amazon GuardDuty now stream into the Falcon platform instantly, enabling investigation and response.

CrowdStrike is also introducing pay-as-you-go pricing for both Falcon Next-Gen SIEM and Falcon Cloud Security in AWS Marketplace.

CrowdStrike is introducing new federated search capabilities via Amazon Athena, providing access to data stored in Amazon Simple Storage Service (Amazon S3). Customers can query data in place — without re-ingestion or duplication — to investigate incidents, perform audits, and build operational insights.

Accenture also joins as the inaugural launch partner to help organisations accelerate adoption of Falcon Next-Gen SIEM for AWS and optimise third-party data integrations across complex environments.

“CrowdStrike and AWS are transforming how security is delivered in the cloud,” said Daniel Bernard, chief business officer at CrowdStrike.

“Together, we’re removing friction so customers can innovate fearlessly, accelerate outcomes, and stop breaches faster.”

“AWS Marketplace is the fastest, most efficient way for customers to procure cloud solutions with unified billing, streamlined purchasing, and simplified configuration,” said Matt Yanchyshyn, vice president of marketplace at AWS.

“With CrowdStrike’s enhanced onboarding experience in AWS Marketplace, we’re making it seamless for customers to connect Falcon Next-Gen SIEM to critical AWS services like AWS CloudTrail, AWS Security Hub, and Amazon GuardDuty – all through a guided setup experience.

"Combined with pay-as-you-go pricing, customers can discover, configure, and deploy protection faster than ever, ensuring a seamless experience from purchase to protection.”

“Clients are looking to modernize their security operations with cloud-scale visibility, rapid speed, and streamlined simplicity,” said Rex Thexton, chief technology officer for Accenture’s cybersecurity practice.

“By partnering with CrowdStrike and AWS, we’re enabling organizations to unify security data, leverage AI-driven insights, and transform how they detect, investigate, and respond to cyber threats across their entire digital estate.”