AWS Auto Remediate

AWS Auto Remediate is an automated security compliance remediation system that integrates with AWS Config to address security violations in real-time. The system operates through a serverless architecture using AWS Lambda functions triggered by SQS queues. When AWS Config detects non-compliance events, they are filtered through a CloudWatch Event rule and sent to the auto-remediate-config-compliance SQS queue. The Lambda function processes these compliance payloads and attempts to automatically remediate identified security concerns. Failed remediation attempts are sent to a dead letter queue (DLQ) with retry logic that tracks attempt counts through message attributes. When the retry count exceeds the configured RETRYCOUNT variable, messages are no longer processed. For AWS Config events that have no corresponding remediation logic, the system forwards the payload to an SNS topic for manual review or alternative handling. The tool provides automated response capabilities for AWS security misconfigurations, reducing manual intervention requirements and improving security posture maintenance across AWS environments.