├── CONTRIBUTING.md ├── LICENSE ├── LICENSE-SAMPLECODE ├── LICENSE-SUMMARY ├── README.md ├── docs ├── 01-environment-setup.md ├── 02-guardduty-dns-event.md ├── 03-securityhub-custom-actions.md ├── 04-ec2-instance-high-risk-config.md ├── 05-guardduty-iam-user.md ├── 06-ebs-snapshot-public.md ├── 07-cleanup.md ├── CNAME ├── LICENSE ├── Security-Hub-Automated-Remediations-Workshop.pptx ├── assets │ └── images │ │ ├── aws-favicon.ico │ │ ├── aws_smile_logo.png │ │ └── second-nav-blue.png ├── contribute.md ├── images │ ├── deploy-to-aws.png │ ├── iam-capabilities.png │ └── launch-stack-button.png ├── index.md ├── stylesheets │ └── custom.css └── theme │ └── partials │ ├── header.html │ └── nav.html ├── mkdocs.yml ├── module1 ├── cloudcustodian-memberrole.yml ├── deploy-memberrole.sh ├── force-vulnerability-finding.yml └── securityhub-remediations-workshop.yml ├── module2 └── ec2-sechub-remediate-severity-with-findings.yml ├── module3 ├── ec2-sechub-custom-actions.yml └── trace-ec2-sechub-custom-actions.yml ├── module4 ├── ec2-public-ingress-hubfinding.yml ├── ec2-public-ingress-s3-readable-kms-decrypt.yml └── ec2-public-ingress.yml ├── module5 └── iam-user-hubfinding-remediate-disable.yml └── module6 └── post-ebs-snapshot-public.yml /CONTRIBUTING.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/CONTRIBUTING.md -------------------------------------------------------------------------------- /LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/LICENSE -------------------------------------------------------------------------------- /LICENSE-SAMPLECODE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/LICENSE-SAMPLECODE -------------------------------------------------------------------------------- /LICENSE-SUMMARY: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/LICENSE-SUMMARY -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/README.md -------------------------------------------------------------------------------- /docs/01-environment-setup.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/01-environment-setup.md -------------------------------------------------------------------------------- /docs/02-guardduty-dns-event.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/02-guardduty-dns-event.md -------------------------------------------------------------------------------- /docs/03-securityhub-custom-actions.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/03-securityhub-custom-actions.md -------------------------------------------------------------------------------- /docs/04-ec2-instance-high-risk-config.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/04-ec2-instance-high-risk-config.md -------------------------------------------------------------------------------- /docs/05-guardduty-iam-user.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/05-guardduty-iam-user.md -------------------------------------------------------------------------------- /docs/06-ebs-snapshot-public.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/06-ebs-snapshot-public.md -------------------------------------------------------------------------------- /docs/07-cleanup.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/07-cleanup.md -------------------------------------------------------------------------------- /docs/CNAME: -------------------------------------------------------------------------------- 1 | securityhub-remediations.awssecworkshops.com 2 | -------------------------------------------------------------------------------- /docs/LICENSE: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/LICENSE -------------------------------------------------------------------------------- /docs/Security-Hub-Automated-Remediations-Workshop.pptx: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/Security-Hub-Automated-Remediations-Workshop.pptx -------------------------------------------------------------------------------- /docs/assets/images/aws-favicon.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/assets/images/aws-favicon.ico -------------------------------------------------------------------------------- /docs/assets/images/aws_smile_logo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/assets/images/aws_smile_logo.png -------------------------------------------------------------------------------- /docs/assets/images/second-nav-blue.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/assets/images/second-nav-blue.png -------------------------------------------------------------------------------- /docs/contribute.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/contribute.md -------------------------------------------------------------------------------- /docs/images/deploy-to-aws.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/images/deploy-to-aws.png -------------------------------------------------------------------------------- /docs/images/iam-capabilities.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/images/iam-capabilities.png -------------------------------------------------------------------------------- /docs/images/launch-stack-button.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/images/launch-stack-button.png -------------------------------------------------------------------------------- /docs/index.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/index.md -------------------------------------------------------------------------------- /docs/stylesheets/custom.css: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/stylesheets/custom.css -------------------------------------------------------------------------------- /docs/theme/partials/header.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/theme/partials/header.html -------------------------------------------------------------------------------- /docs/theme/partials/nav.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/docs/theme/partials/nav.html -------------------------------------------------------------------------------- /mkdocs.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/mkdocs.yml -------------------------------------------------------------------------------- /module1/cloudcustodian-memberrole.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/module1/cloudcustodian-memberrole.yml -------------------------------------------------------------------------------- /module1/deploy-memberrole.sh: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/module1/deploy-memberrole.sh -------------------------------------------------------------------------------- /module1/force-vulnerability-finding.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/module1/force-vulnerability-finding.yml -------------------------------------------------------------------------------- /module1/securityhub-remediations-workshop.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/module1/securityhub-remediations-workshop.yml -------------------------------------------------------------------------------- /module2/ec2-sechub-remediate-severity-with-findings.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/module2/ec2-sechub-remediate-severity-with-findings.yml -------------------------------------------------------------------------------- /module3/ec2-sechub-custom-actions.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/module3/ec2-sechub-custom-actions.yml -------------------------------------------------------------------------------- /module3/trace-ec2-sechub-custom-actions.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/module3/trace-ec2-sechub-custom-actions.yml -------------------------------------------------------------------------------- /module4/ec2-public-ingress-hubfinding.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/module4/ec2-public-ingress-hubfinding.yml -------------------------------------------------------------------------------- /module4/ec2-public-ingress-s3-readable-kms-decrypt.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/module4/ec2-public-ingress-s3-readable-kms-decrypt.yml -------------------------------------------------------------------------------- /module4/ec2-public-ingress.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/module4/ec2-public-ingress.yml -------------------------------------------------------------------------------- /module5/iam-user-hubfinding-remediate-disable.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/module5/iam-user-hubfinding-remediate-disable.yml -------------------------------------------------------------------------------- /module6/post-ebs-snapshot-public.yml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/aws-samples/aws-securityhub-automated-remediations-workshop/HEAD/module6/post-ebs-snapshot-public.yml --------------------------------------------------------------------------------