Automated Security Response on AWS adds AI Toolkit for custom remediations

AWS Automated Security Response Updates

AWS has introduced four new capabilities for Automated Security Response (ASR) on AWS:

• AI Remediation Toolkit: Generates custom remediations using AI assistants with safety guardrails, reducing development time from weeks to hours.
• Automatic Remediation: Automatically remediates findings from Amazon Inspector, Amazon GuardDuty, and Amazon Macie.
• Centralized Configuration: Configure and scope automated remediations by account, OU, region, and resource tags through an enhanced web console.
• Multi-Channel Notifications: Configure notifications for AWS Security Hub findings with adapters for Email, Slack, Jira, and ServiceNow, including severity-based filtering and deadline enforcement.

What to do

• Utilize the AI Remediation Toolkit for faster, safer remediations.
• Enable automatic remediation for Amazon Inspector, GuardDuty, and Macie findings.
• Configure and manage remediations centrally through the enhanced web console.
• Set up multi-channel notifications to ensure timely responses.

Source: AWS release notes

If you need further guidance on AWS, our experts are available at AWS@westloop.io. You may also reach us by submitting the Contact Us form.