find AWS SECURITY ISSUES in minutes (OSS)

How to Automate AWS Security Assessments with Prowler & Security Hub - A Serverless Project (Part 1) In this free step-by-step guide, I show you how to automate security assessments using Prowler and push findings directly to Security Hub – all without having to deploy a single server 💪 This project builds on a webinar I hosted with Victoria Shutenko (https://cybr.com/webinars/using-prowl..., who shared a practical approach to AWS security automation. I've adapted her work with a few modifications to help you implement it in your own environments. Let's take a look: 👷‍♀️ The architecture 👷‍♂️ To build this out, we're going to use 4 AWS services: 🔴 Security Hub – to collect our findings in a central security tool 🟢 Amazon S3 – to store output files for historical purposes and future analysis 🔵 CodeBuild – to run Prowler without needing to configure or manage servers 🟣 EventBridge – to run on a schedule (this will be added on in part 2 of our project) ℹ️ You can also use SNS or Slack to send notifications whenever a scan finishes running (I'll show this in part 3), and you can use something like QuickSight to visualize results. (I'll show this in part 4) 🛠️ Steps 🛠️ The steps that we’ll take in this video include: 1️⃣ Enable the Security Hub Prowler integration 2️⃣ Grab the project code and configure it 3️⃣ Set up hashtag#CodeBuild 4️⃣ Verifying it all works AWS Security courses: https://cybr.com/courses/ AWS Security Hands-On Labs: https://cybr.com/hands-on-labs/