Learn how to build large-scale, cost-effective security event log processing systems using AWS serverless technologies in this 38-minute conference talk from fwd:cloudsec. Discover essential strategies for handling billions of security event and audit logs without relying on expensive vendor solutions. Explore best practices for selecting optimal streaming data storage services, implementing real-time event enrichment at scale, and balancing performance with cost efficiency. Master the techniques needed to create foundational infrastructure supporting threat hunting, detection, and incident response capabilities while maintaining control over your security data.