Substation is a cloud-native data pipeline toolkit designed for security teams to process and route event-driven data across AWS cloud services. The tool provides extensible data processing capabilities that allow security teams to transform and manipulate data streams according to their specific requirements. It supports conditional routing functionality, enabling data to be directed to different AWS services based on predefined criteria and rules. Substation includes custom schema formatting features that allow teams to structure data according to their organizational needs and compliance requirements. The toolkit supports unlimited data enrichment through integration with external APIs, enabling teams to augment their data with additional context and intelligence. The platform is designed for serverless deployment within AWS infrastructure, allowing teams to scale their data processing operations without managing underlying server resources. This architecture supports event-driven workflows that can automatically respond to incoming data streams and trigger appropriate processing actions.