A demo tool integrating AWS Config rules and AWS Security Hub to automate cloud configuration scanning, compliance auditing, and remediation.
AWS Config and Security Hub demo
This tool is designed for cloud security professionals and AWS users who want to monitor and enforce compliance of their AWS resources using AWS Config and Security Hub. It helps detect configuration changes, especially to critical resources like CloudTrail, and automates remediation via Lambda functions. Users can visualize security posture and resource timelines to maintain continuous compliance.
Security Hub must be enabled manually in the AWS Console before scanning begins. For multi-region or organization-wide CloudTrail trails, ensure the trail is created in the home or master account region. Allow sufficient time after deployment for AWS Config and Security Hub to collect and display compliance data. This tool is a demo and may require customization for production use.
terraform init
terraform apply -auto-approve
Enable AWS Security Hub manually via AWS Console
Allow time for AWS Config and Security Hub to scan resourcesterraform init
Initializes the Terraform working directory and downloads necessary providers.
terraform apply -auto-approve
Applies the Terraform configuration to create required AWS resources without manual approval.