AWS Security Automation

Automate security controls and incident response workflows for AWS environments using Terraform and Lambda

What is there?

EC2 Isolation

Response automation to compromised EC2 instances detecting by GuardDuty triggers a Step Function workflow to isolate the instance collect forensics and notify the security team

1. GuardDuty finding triggers EventBridge
2. Step Functions orchestrates response
3. Lambda functions execute isolation and forensics

Tagging Policy

Automatic enforcement of resource tagging standards evaluates resources against Config Rules and automatically remediates non compliant resources

1. AWS Config identifies non compliant resources
2. Lambda function applies required tags