Skip to main content

AWS Solutions Library

Automated Security Response on AWS

Resolve common security threats and improve your security posture

Open guide
Go to source code

Overview

Automated Security Response on AWS is an AWS Solution that enhances AWS Security Hub by automatically addressing common security issues across your organization's AWS environment. When Security Hub identifies a potential security concern, this solution initiates pre-defined responses to resolve the issue efficiently. It also operates across multiple AWS accounts for comprehensive security coverage. This solution logs all actions taken, sends notifications to your relevant parties, and can integrate with your existing ticketing services. By automating the remediation of your Security Hub findings, you can maintain a strong security posture with reduced manual effort, aligning with industry best practices and compliance standards while streamlining your overall security management process.

Benefits

Initiate remediations and findings using custom actions in the Security Hub console.

Configure AWS Foundations Benchmarks or AWS Foundational Security Best Practices.

Deploy a predefined set of response and remediation actions to respond to threats automatically.

Extend this solution with custom remediation and playbook implementations. Or, deploy a custom playbook for a new set of controls.

How it works

You can automatically deploy this architecture using the implementation guide and the accompanying AWS CloudFormation template.

Open implementation guide

About this deployment

Version: 2.3.2
Released: 8/2025
Author: AWS
Est. deployment time: 30 mins
Estimated cost: See details

Subscribe to RSS feed

Deploy with confidence

Everything you need to launch this AWS Solution in your account is right here

We'll walk you through it

Get started fast. Read the implementation guide for deployment steps, architecture details, cost information, and customization options.

Open guide

Let's make it happen

Ready to deploy? Open the CloudFormation template in the AWS Console to begin setting up the infrastructure you need. You'll be prompted to access your AWS account if you haven't yet logged in.

Launch Admin stack
Launch Member accounts stack
Launch Member roles stack

Customers

Magnet Forensics

“At Magnet Forensics, we specialize in digital forensics software that helps law enforcement, government agencies, and corporate investigators recover and analyze digital evidence. We were looking to build our own automated, event-driven responses to security findings when we discovered Automated Security Response on AWS. After deploying this solution across our organization and using its playbooks for industry and AWS best practices, we've improved our security posture and significantly reduced our team's manual remediation efforts by up to 40%”

Jamie McQuaid, Technical Manager for Engineering Security, Magnet Forensics

Missing alt text value

6pillars.ai

“At 6pillars.ai, we see organizations struggling with alert fatigue and compliance drift daily. AUTOMATE+, powered by Automated Security Response on AWS, delivers automated remediation while ensuring enterprise-grade availability. We've uniquely integrated ASR capabilities into Well-Architected Framework, FTR and Control Tower workflows, providing comprehensive, non-breaking security automation. We enable our Well-Architected partners to benefit from automated deployment that has demonstrated up to 80% time savings in maintaining continuous compliance.”

Lorenzo Modesto, CEO, 6pillars.ai

Missing alt text value

Did you find what you were looking for today?

Let us know so we can improve the quality of the content on our pages