{"id":10083,"date":"2024-07-05T10:53:00","date_gmt":"2024-07-05T10:53:00","guid":{"rendered":"https:\/\/redingtongroup.com\/cloud\/?page_id=10083"},"modified":"2025-06-17T11:20:07","modified_gmt":"2025-06-17T11:20:07","slug":"automated-security-response","status":"publish","type":"page","link":"https:\/\/redingtongroup.com\/cloud\/automated-security-response\/","title":{"rendered":"Automated Security Response"},"content":{"rendered":"
\n
\n

\n\"Media\"
\nAutomated Deployment of WAF <\/a>
\n
\n\"Investors\"
\nSecure Shield <\/a>
\n
\n\"ESG\"
\nAutomated Security Response <\/a><\/div>\n<\/div>\n<\/div>\n

<\/p>\n

\n
\n

Resolve common security threats and improve your security posture<\/p>\n<\/div>\n<\/section>\n

\n
\n
\n

Our Offerings<\/h2>\n<\/div>\n
\n
\n
\n
\n
\n
\n

This Offering works with\u00a0AWS Security Hub\u00a0and provides predefined response and remediation actions based on industry compliance standards and best practices for security threats.<\/p>\n

\"Icon<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\n
\n

It helps to resolve common security findings and to improve their security posture in AWS.<\/p>\n

\"Icon<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n
\n
\n
\n
\n

It creates playbook contains the necessary actions to start the remediation workflow within the admin account or any member account.<\/p>\n

\"Icon<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
\n
\n
\"Key<\/div>\n
<\/div>\n
\n
\n

Key Benefits \u200b<\/h2>\n
    \n
  • AWS Security Hub integration<\/li>\n
  • Resolve Security Hub findings<\/li>\n
  • Automated remediation actions<\/li>\n
  • Increased overall security posture<\/li>\n
  • Improved visibility with QuickSight<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
    \n
    \n

    Architecture<\/h2>\n
    \n
    \"Architecture\"<\/div>\n<\/div>\n<\/div>\n<\/section>\n
    \n
    \n
    \n

    Our Approach \u200b<\/h2>\n

    Preconfigured templates are available for the solution<\/p>\n<\/div>\n

    \n
    \n
    \n
    \"Detect\"<\/div>\n
    \"AWS<\/p>\n
    \n

    Detect<\/h2>\n

    Security Hub\u00a0provides you with a comprehensive view of their AWS security state. It helps you to measure your environment against security industry standards and best practices. It works by collecting events and data from other AWS services, such as\u00a0AWS Config,\u00a0Amazon GuardDuty, and\u00a0AWS Firewall Manager.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

    \n
    \n
    \"initiate<\/div>\n
    \"AWS<\/p>\n
    \n

    Initiate<\/h2>\n

    You can initiate events against findings using custom actions, which result in\u00a0Amazon EventBridge Events.\u00a0AWS Security Hub Custom Actions\u00a0and\u00a0Amazon EventBridge rules\u00a0initiate Automated Security Response on AWS playbooks to address findings. One\u00a0EventBridge\u00a0rule is deployed to match the custom action event, and one\u00a0EventBridge Event\u00a0Rule is deployed for each supported control (deactivated by default) to match the real-time finding event.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

    \n
    \n
    \"Orchestrate\"<\/div>\n
    \"AWS<\/p>\n
    \n

    Orchestrate<\/h2>\n

    Using cross-account\u00a0AWS Identity and Access Management\u00a0(IAM) roles,\u00a0AWS Step Functions\u00a0in the admin account invokes the remediation in the member account containing the resource that produced the security finding.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

    \n
    \n
    \"Remediate\"<\/div>\n
    \"AWS<\/p>\n
    \n

    Remediate<\/h2>\n

    An\u00a0AWS Systems Manager Automation Document\u00a0in the member account performs the action required to remediate the finding on the target resource, such as disabling\u00a0AWS Lambda\u00a0public access.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

    \n
    \n
    \"Logs<\/div>\n
    \"Amazon<\/p>\n
    \n

    Log<\/h2>\n

    The playbook logs the results to an\u00a0Amazon CloudWatch Logs group, sends a notification to an\u00a0Amazon Simple Notification Service\u00a0(Amazon SNS) topic, and updates the\u00a0Security Hub\u00a0finding. An audit trail of actions taken is maintained in the\u00a0finding notes.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

    \n
    \n
    \"Output<\/div>\n
    \"Security<\/p>\n
    \n

    Output verification<\/h2>\n

    On the\u00a0Security Hub\u00a0dashboard, the finding workflow status is changed from new to either NOTIFIED or RESOLVED. Hub\u00a0dashboard. The security finding notes are updated to reflect the remediation performed<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

    \n
    \n
    \"Monitoring\"<\/div>\n
    \"Centralized<\/p>\n
    \n

    Monitoring<\/h2>\n

    Query the findings from the centralized findings repository and build dashboards for visualizations.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n

    <\/p>\n

    \n
    \n
    \n

    Target Customer<\/h2>\n
    \n
    \n
    \n
    \n
    \"Healthcare<\/div>\n
    Healthcare providers looking to safeguard patient information and comply with health data regulations<\/div>\n<\/div>\n<\/div>\n
    \n
    \n
    \"Educational<\/div>\n
    Educational institutions needing to secure online learning platforms and student data<\/div>\n<\/div>\n<\/div>\n
    \n
    \n
    \"Financial<\/div>\n
    Financial services companies focused on compliance and protection against security threats<\/div>\n<\/div>\n<\/div>\n
    \n
    \n
    \"Manufacturing<\/div>\n
    Manufacturing enterprises securing their operational technologies and data<\/div>\n<\/div>\n<\/div>\n
    \n
    \n
    \"E-commerce<\/div>\n
    E-commerce platforms requiring robust security measures to protect customer data and transactions<\/div>\n<\/div>\n<\/div>\n
    \n
    \n
    \"IT<\/div>\n
    IT and ITES organizations needing automated security responses for their cloud infrastructure<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
    \n
    \n
    \n

    Customer Engagement And Delivery Mechanism<\/h2>\n
    \n
    \"Customer<\/p>\n
    \n
    \n
    After understanding client requirements in the initial consultation, we draft a customized Statement of Work (SoW) outlining the specific security automation processes, timelines, and deliverables.<\/p>\n<\/div>\n<\/div>\n
    \n
    This SoW is submitted for client approval and, if applicable, to AWS for funding validation. Throughout the engagement, we conduct regular status meetings and provide detailed progress reports to ensure the project stays on track and meets client expectations.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n
    \n
    \n
    \n

    Use Cases\u200b<\/h2>\n

    Common automated security response use cases on AWS<\/p>\n<\/div>\n

    \n
    \n
    \n
    \n
    \"Automated<\/p>\n
    \n

    Automated Remediation for Resource Misconfigurations<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

    \n
    \n
    \"Automated<\/p>\n
    \n

    Automated Compliance Checks and Remediation<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

    \n
    \n
    \"Automated<\/p>\n
    \n

    Automated Threat Detection and Mitigation for EC2 Instances<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

    \n
    \n
    \"Automated<\/p>\n
    \n

    Automated Incident Response for Security Group Policy Violations<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"

    Automated Deployment of WAF Secure Shield Automated Security Response Resolve common security threats and improve your security posture Our Offerings […]<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"cloud_common_template.php","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-10083","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\nAutomated Security Response - cloud<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/redingtongroup.com\/cloud\/automated-security-response\/\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"10 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/redingtongroup.com\/cloud\/automated-security-response\/\",\"url\":\"https:\/\/redingtongroup.com\/cloud\/automated-security-response\/\",\"name\":\"Automated Security Response - cloud\",\"isPartOf\":{\"@id\":\"https:\/\/redingtongroup.com\/cloud\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/redingtongroup.com\/cloud\/automated-security-response\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/redingtongroup.com\/cloud\/automated-security-response\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/redingtongroup.com\/cloud\/wp-content\/uploads\/sites\/5\/2024\/07\/bundles.webp\",\"datePublished\":\"2024-07-05T10:53:00+00:00\",\"dateModified\":\"2025-06-17T11:20:07+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/redingtongroup.com\/cloud\/automated-security-response\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/redingtongroup.com\/cloud\/automated-security-response\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/redingtongroup.com\/cloud\/automated-security-response\/#primaryimage\",\"url\":\"https:\/\/redingtongroup.com\/cloud\/wp-content\/uploads\/sites\/5\/2024\/07\/bundles.webp\",\"contentUrl\":\"https:\/\/redingtongroup.com\/cloud\/wp-content\/uploads\/sites\/5\/2024\/07\/bundles.webp\",\"width\":30,\"height\":30},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/redingtongroup.com\/cloud\/automated-security-response\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/redingtongroup.com\/cloud\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Automated Security Response\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/redingtongroup.com\/cloud\/#website\",\"url\":\"https:\/\/redingtongroup.com\/cloud\/\",\"name\":\"cloud\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/redingtongroup.com\/cloud\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/redingtongroup.com\/cloud\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/redingtongroup.com\/cloud\/#organization\",\"name\":\"cloud\",\"url\":\"https:\/\/redingtongroup.com\/cloud\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/redingtongroup.com\/cloud\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/redingtongroup.com\/cloud\/wp-content\/uploads\/sites\/5\/2024\/03\/logo-white.svg\",\"contentUrl\":\"https:\/\/redingtongroup.com\/cloud\/wp-content\/uploads\/sites\/5\/2024\/03\/logo-white.svg\",\"caption\":\"cloud\"},\"image\":{\"@id\":\"https:\/\/redingtongroup.com\/cloud\/#\/schema\/logo\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Automated Security Response - cloud","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/redingtongroup.com\/cloud\/automated-security-response\/","twitter_misc":{"Est. reading time":"10 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/redingtongroup.com\/cloud\/automated-security-response\/","url":"https:\/\/redingtongroup.com\/cloud\/automated-security-response\/","name":"Automated Security Response - cloud","isPartOf":{"@id":"https:\/\/redingtongroup.com\/cloud\/#website"},"primaryImageOfPage":{"@id":"https:\/\/redingtongroup.com\/cloud\/automated-security-response\/#primaryimage"},"image":{"@id":"https:\/\/redingtongroup.com\/cloud\/automated-security-response\/#primaryimage"},"thumbnailUrl":"https:\/\/redingtongroup.com\/cloud\/wp-content\/uploads\/sites\/5\/2024\/07\/bundles.webp","datePublished":"2024-07-05T10:53:00+00:00","dateModified":"2025-06-17T11:20:07+00:00","breadcrumb":{"@id":"https:\/\/redingtongroup.com\/cloud\/automated-security-response\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/redingtongroup.com\/cloud\/automated-security-response\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/redingtongroup.com\/cloud\/automated-security-response\/#primaryimage","url":"https:\/\/redingtongroup.com\/cloud\/wp-content\/uploads\/sites\/5\/2024\/07\/bundles.webp","contentUrl":"https:\/\/redingtongroup.com\/cloud\/wp-content\/uploads\/sites\/5\/2024\/07\/bundles.webp","width":30,"height":30},{"@type":"BreadcrumbList","@id":"https:\/\/redingtongroup.com\/cloud\/automated-security-response\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/redingtongroup.com\/cloud\/"},{"@type":"ListItem","position":2,"name":"Automated Security Response"}]},{"@type":"WebSite","@id":"https:\/\/redingtongroup.com\/cloud\/#website","url":"https:\/\/redingtongroup.com\/cloud\/","name":"cloud","description":"","publisher":{"@id":"https:\/\/redingtongroup.com\/cloud\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/redingtongroup.com\/cloud\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/redingtongroup.com\/cloud\/#organization","name":"cloud","url":"https:\/\/redingtongroup.com\/cloud\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/redingtongroup.com\/cloud\/#\/schema\/logo\/image\/","url":"https:\/\/redingtongroup.com\/cloud\/wp-content\/uploads\/sites\/5\/2024\/03\/logo-white.svg","contentUrl":"https:\/\/redingtongroup.com\/cloud\/wp-content\/uploads\/sites\/5\/2024\/03\/logo-white.svg","caption":"cloud"},"image":{"@id":"https:\/\/redingtongroup.com\/cloud\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/redingtongroup.com\/cloud\/wp-json\/wp\/v2\/pages\/10083","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/redingtongroup.com\/cloud\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/redingtongroup.com\/cloud\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/redingtongroup.com\/cloud\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/redingtongroup.com\/cloud\/wp-json\/wp\/v2\/comments?post=10083"}],"version-history":[{"count":0,"href":"https:\/\/redingtongroup.com\/cloud\/wp-json\/wp\/v2\/pages\/10083\/revisions"}],"wp:attachment":[{"href":"https:\/\/redingtongroup.com\/cloud\/wp-json\/wp\/v2\/media?parent=10083"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}