Skip to main content

AWS Solutions Library

Automated Security Response on AWS

Resolve common security threats and improve your security posture

Open guide
Go to source code

Overview

Automated Security Response on AWS is an AWS Solution that enhances AWS Security Hub by automatically addressing common security issues across your organization's AWS environment. When Security Hub identifies a potential security concern, this solution initiates pre-defined responses to resolve the issue efficiently. It also operates across multiple AWS accounts for comprehensive security coverage. This solution logs all actions taken, sends notifications to your relevant parties, and can integrate with your existing ticketing services. By automating the remediation of your Security Hub findings, you can maintain a strong security posture with reduced manual effort, aligning with industry best practices and compliance standards while streamlining your overall security management process.

Benefits

Initiate remediations and findings using custom actions in the Security Hub console.
Configure AWS Foundations Benchmarks or AWS Foundational Security Best Practices.
Deploy a predefined set of response and remediation actions to respond to threats automatically.
Extend this solution with custom remediation and playbook implementations. Or, deploy a custom playbook for a new set of controls.

How it works

You can automatically deploy this architecture using the implementation guide and the accompanying AWS CloudFormation template.

Open implementation guide

About this deployment

Version: 2.3.2
Released: 8/2025
Author: AWS
Est. deployment time: 30 mins
Estimated cost: See details

Subscribe to RSS feed

Deploy with confidence

Everything you need to launch this AWS Solution in your account is right here

We'll walk you through it

Get started fast. Read the implementation guide for deployment steps, architecture details, cost information, and customization options.

Open guide

Let's make it happen

Ready to deploy? Open the CloudFormation template in the AWS Console to begin setting up the infrastructure you need. You'll be prompted to access your AWS account if you haven't yet logged in.

Launch Admin stack
Launch Member accounts stack
Launch Member roles stack