Security automation
Event-driven remediation with Config, Lambda, EventBridge, Security Hub, and SSM Automations.
Problem
Manual remediation of findings requires human review, investigation, and changes. This increases the mean time to remediation (MTTR) for findings that can be easily autoamted.
Approach
- Security Hub findings routed through EventBridge
- Config findings trigger SSM automation documents
- Remediation functions in Python, Bash, and Powershell, with human review for risky changes
Outcome
Reduce MTTR, increase efficiency, and provide engineers more bandwidth for higher-impact work.