Automated Threat Response Architecture
Designed and deployed an event driven AWS security architecture using Terraform, integrating GuardDuty, Event Bridge, Lambda, CloudWatch, IAM, SNS, and DynamoDB to detect, process, and record security findings. Built a python Lambda responder that automatically ingests GuardDuty findings, logs structured security events data, and supports automated notification and audit workflows. Validated the architecture with a provisioned EC2 instance, GuardDuty sample findings, and CloudWatch logs while applying least-privilege IAM and Terraform IaC.