SyntheticSun is a defense-in-depth security automation and monitoring framework which utilizes threat intelligence, machine learning, managed AWS security services and, serverless technologies to continuously prevent, detect and respond to threats.

Advanced AWS Security Automation Resources: Used by Udemy Course 🎓

Automated AWS Organizations configuration for security operations

Automated Amazon GuardDuty Security Response

A Step Functions microservice for remediating GuardDuty findings.

Automation ☁️AWS Security 👮- Incident Response using Lambda⚡️to prevent credential exfiltration

Perform file-based malware scan on your on-prem servers with AWS

A serverless application for processing AWS GuardDuty findings.

Go straight from Guard Duty alerts to Automated Investigations in AWS with Cado Response

Update AWS GuardDuty threat intel list using AWS Lambda.

An open-source toolkit for automating security incident response in Amazon EKS (Elastic Kubernetes Service) clusters. This project helps security and DevSecOps teams detect, contain, and remediate threats in real-time with minimal manual intervention.eks-security-automation-demo

"AWS Cloud Support Lab - Hands-On Troubleshooting & Monitoring Portfolio"

Keep secure your Bastion Host from unauthorized login attempts automatically.

Automated AWS incident response: Detect and quarantine compromised EC2s with GuardDuty, CloudTrail, and Lambda—includes playbook and sample code.

Automatically activates and invites GuardDuty members

Feed Guard Duty with MVISION Insights curated Threat Intelligence Feed