Before
Teams likely had to list the relevant AWS accounts, inspect WAF and VPC settings in each environment, and copy configuration findings into a report. They then had to identify non-conforming environments, archive the report, and notify the security team through a separate handoff.
How it works
- Discover the AWS environments in scope and create a new compliance report.
- Review each environment's WAF and VPC configuration, extract the relevant settings, update the report, and filter non-conforming environments.
- Archive the completed report and deliver it through the designated security channel.
Workflow details
- Environment discovery: The workflow retrieves all AWS accounts where the specified permission set is provisioned, establishing the set of environments to review.
- Report preparation: It creates a new spreadsheet for the current compliance review before processing the environments.
- Configuration collection: For each environment, the workflow retrieves WAF logging configuration and VPC listener rule information, then extracts the lookup configuration needed for the assessment.
- Compliance assessment: The extracted configuration is written to the spreadsheet and evaluated to filter environments that do not conform to the defined compliance standards.
- Security reporting: After the review is complete, the generated report is archived and sent through the designated security channel so the findings are available to the security team.
What changed
The workflow now performs the environment-by-environment configuration review, report updates, and compliance filtering as one repeatable process. Security receives the archived report through the designated channel after the automated assessment instead of relying on manual report assembly and handoff.
Work removed
Listing in-scope AWS environments, reviewing WAF and VPC configuration for each environment, extracting configuration details, copying findings into a spreadsheet, filtering non-conforming environments, archiving the report, and manually notifying the security team.
Expected outcome
A repeatable compliance review that identifies non-conforming environments and removes the need for manual per-environment lookups and report preparation.
