Project No. 17

AWS Security Assessment Automation

Scheduled Prowler and ScoutSuite runs cross-referenced with Trusted Advisor, each recurring finding paired with a ready-to-run remediation script instead of a re-researched fix.

Timeline 2 months
Stack Prowler, ScoutSuite, AWS Lambda, AWS Trusted Advisor, GitHub Actions
Challenge

AWS accounts drift out of a good security posture faster than a quarterly manual audit can catch; by the time someone runs the assessment, the misconfigurations have been sitting for weeks.

Approach

I bundled Prowler and ScoutSuite into scheduled runs via Lambda and GitHub Actions, cross-referenced their findings with Trusted Advisor, and paired each recurring finding with a remediation script so common fixes don't need to be re-derived from the CLI docs every time.

The point of an audit isn't the report; it's the next fix.
Outcome

Posture drift now surfaces on a weekly cadence instead of a quarterly one, and the same fix doesn't get researched twice.

  • Scheduled Prowler and ScoutSuite runs surface drift automatically
  • Trusted Advisor findings folded into the same report
  • Remediation scripts paired with common findings so fixes are one command away