AWS access-log lakehouse gateway. Keep every log in S3 + Apache Iceberg; forward only the signal to CloudWatch / OpenSearch / SIEM. Cut ingest bills 50-90%.
S4 AccessLake sits between your AWS log sources (S3 server access logs, AWS WAF, CloudFront, ALB, NLB, VPC Flow Logs, Network Firewall, Route 53 Resolver) and the high-priced destinations they normally flow into (CloudWatch Logs, OpenSearch, SIEM). It archives the full-fidelity log stream in zstd + Apache Parquet + Apache Iceberg on your own S3 buckets, then forwards only the signals you actually need - critical events, top-N noisy IPs, aggregated counts, sampled traces - to the expensive downstream services. Result: 50-90% reduction in CloudWatch / SIEM ingest GB while keeping every record for audit, incident response, and forensics. A built-in cost dashboard quantifies your savings in real time. A policy DSL controls what flows where, with dry-run rules and preflight lint validation. Merkle-anchored attestation proves the archive is complete - third parties can verify offline. Sold as a single Marketplace AMI on Usage-pricing with a 14-day free trial. You pay per ingested GB (metered via AWS Marketplace Metering Service - no license keys, no extra accounts) plus the EC2 instance cost from your own AWS account. Private Offers customize per-GB rates and annual commitments without a separate listing.
Highlights
50-90% reduction in CloudWatch Logs / SIEM ingest GB while keeping full-fidelity access logs on S3 + Apache Iceberg (zstd + Parquet).
Policy DSL with dry-run rules and preflight lint validation; Merkle-anchored raw archive attestation for third-party audit.
Usage-priced Marketplace AMI with a 14-day free trial: per-normalized-GB metered via AWS Marketplace Metering Service; no license keys, IMDSv2 enforced, SSE-KMS by default.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Try this product free for 14 days according to the free trial terms set by the vendor. Usage-based pricing is in effect for usage beyond the free trial terms. Your free trial gets automatically converted to a paid subscription when the trial ends, but may be canceled any time before that.
This listing uses a single usage-based dimension. You pay per normalized GB of log data ingested through the gateway. AWS Marketplace Metering Service tracks your ingested volume, so your cost scales directly with how much you route through the product. There is no hourly software charge for this dimension. You separately pay the EC2 instance cost in your own AWS account. Because billing follows actual ingest, your spend rises and falls with usage rather than a fixed commitment. A 14-day free trial applies before metered charges begin.
Top-of-mind questions for buyers
What counts as one normalized GB for billing purposes?
You are billed per GB of log data after the gateway normalizes it, not the raw byte count. This covers eight supported log formats: S3 server access, WAF, CloudFront, ALB, NLB, VPC Flow, Network Firewall, and Route 53 Resolver. The AWS Marketplace Metering Service records this normalized volume.
Does archiving every record to my S3 bucket add to the metered per-GB charge?
No. The per-GB charge meters normalized volume ingested through the gateway. Archiving the full-fidelity stream to your own S3 as compressed Parquet does not add a separate software charge. You do pay AWS for the S3 storage and the EC2 instance in your own account.
If I forward only a small share of logs downstream, does that lower my per-GB charge?
No. The charge meters normalized GB ingested into the gateway, not what you forward downstream. Filtering to critical events reduces your separate CloudWatch or SIEM ingest costs, but the S4 AccessLake per-GB charge tracks total ingested volume regardless of how much continues onward.
abyo.net
Helpful?
Vendor refund policy
Usage-based charges are metered and non-refundable. For billing or subscription questions, contact aws-support@abyo.net.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
S4 AccessLake v1.0.3 - billing fix: the daemon no longer attempts a per-instance-type hourly MeterUsage dimension (not registrable on AMI custom-metering products; on v1.0.2 every hourly emit failed with InvalidUsageDimensionException and tripped the 6-hour fail-closed ingest gate). Billing is per ingested GB (ingest_gb) only, and the public offer now includes a 14-day free trial. No changes to ingest, archive, forwarding, or the dashboard.
Additional details
Usage instructions
Deploy via the bundled CloudFormation or Terraform Quick Start. The admin API and dashboard bind to 127.0.0.1:8080 (reach via SSM port-forward). Configure ingest (SQS / Firehose / direct HTTP), archive bucket, and optional S3 Tables Iceberg lake in /opt/s4-accesslake/config/accesslake.yaml. See /opt/s4-accesslake/docs/operations/runbook.md.
Support
Vendor support
Email support at aws-support@abyo.net. Standard SLA: 1 business day response (JST 09:00-18:00 Mon-Fri, excluding Japanese national holidays). Enterprise SLA via Private Offer: 4 business hours, 24x7 pager. Bundled runbook lives at /opt/s4-accesslake/docs/operations/runbook.md; incident-response process at /opt/s4-accesslake/docs/security/incident-response.md. Vendor: abyo software LLC (Tokyo, Japan).
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
AWS access-log lakehouse gateway (x86_64 build). Keep every log in S3 + Apache Iceberg; forward only the signal to CloudWatch / OpenSearch / SIEM. Cut ingest bills 50-90%.
Self-contained EC2 AMI of the S4 transparent S3 compression gateway with CPU codecs (zstd / gzip) preinstalled. Launch on any general-purpose or compute-optimized instance (t3 / m6i / m7i / c6i / c7i), point your S3 clients at it, and cut S3 storage bytes 50-80 percent for compressible data with zero application changes.
Self-contained EC2 AMI of the S4 transparent S3 compression gateway with NVIDIA nvCOMP GPU codecs preinstalled. Launch on a GPU instance (g4dn / g5 / g6), point your S3 clients at it, and cut S3 storage bytes 50-80 percent for compressible data with zero application changes.
Drop-in S3-compatible gateway that transparently compresses every object (CPU zstd or GPU nvCOMP), cutting S3 storage bytes 50-80 percent for compressible data with zero application changes. Includes pre-deployment savings estimation and measured-savings reporting.
Drop-in S3-compatible gateway that transparently compresses every object, cutting S3 storage bytes 50-80 percent for compressible data with zero application changes. This edition bills by measured savings: you pay per GB of backend storage avoided, per hour, at roughly one third of the avoided storage cost.
Cut your CloudWatch custom-metric bill: govern metric cardinality at ingest, then auto-baseline and roll up savings across your whole AWS Organization.
Be the first to review this product. We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.