AWS First Steps
New feature

Automated Security Response on AWS adds AI Toolkit for custom remediations

Automated Security Response on AWS introduces an AI toolkit that accelerates custom remediation development and automates responses to findings from Amazon Inspector, GuardDuty, and Macie, with enhanced console management and multi-channel notifications.

AWS has introduced an AI-driven toolkit for Automated Security Response on AWS, enabling users to generate custom remediations with built-in safety measures using any AI assistant. The service now automatically addresses findings from Amazon Inspector, GuardDuty, and Macie. An enhanced web console allows centralized configuration of automated remediations by account, OU, region, and resource tags. Additionally, users can set up notifications for AWS Security Hub findings through multiple channels-including Email, Slack, Jira, and ServiceNow-with severity-based filtering and configurable deadlines.

Why it matters

This update benefits customers who require security automation. Automated Security Response on AWS helps streamline rapid responses to security events, and these enhancements make custom remediation easier and improve response efficiency.

Read the original AWS announcement

Related articles and terms

Security Posture Management - Building a Unified Security Monitoring Foundation with AWS Security HubLearn about unified security monitoring with AWS Security Hub and automated threat detection through GuardDuty integration. This guide covers visualizing compliance with security best practices and security governance for multi-account environments.AWS Security HubA service that provides centralized visibility into the security posture of your entire AWS environment, performing automated assessments against industry-standard security benchmarks and aggregating findings.Centralized Security Posture Management with AWS Security Hub - Aggregating Findings and Automated ResponseAggregate findings from GuardDuty, Inspector, and Macie using ASFF, quantify your security score through automated security standard evaluations, and set up automated remediation via EventBridge.Data Privacy Protection - Automated Sensitive Data Discovery and Threat Defense with Amazon Macie and GuardDutyLearn practical data privacy protection techniques combining Amazon Macie's automated sensitive data discovery in S3 with Amazon GuardDuty's threat intelligence. This article covers comprehensive security measures from identifying personal information to real-time threat detection.Vulnerability Assessment and Threat Detection - Continuous Security Monitoring with Amazon Inspector and GuardDutyLearn how to design and operate vulnerability assessment and threat detection using Amazon Inspector and Amazon GuardDuty.