AWS Security Platform CloudGuard-Pro Auto-Remediates Misconfigurations Using Terraform and Pulumi

CloudGuard-Pro is an open-source, event-driven AWS security platform designed to detect and automatically fix cloud misconfigurations in real time. The system routes CloudTrail management events through EventBridge to seven specialized Lambda functions that handle ingestion, remediation, and compliance scanning in parallel. Auto-remediation covers specific, unambiguous issues such as open SSH/RDP security group rules, removed S3 public access blocks, and IAM console accounts lacking MFA, while higher-risk changes like S3 bucket policy modifications are flagged for human review. Infrastructure provisioning is split between Terraform, which manages static resources like EventBridge, DynamoDB, and SNS, and Pulumi, which handles the compute layer including all Lambda functions and their IAM roles. All findings from CloudTrail events, scheduled CIS Benchmark scans, and AWS Security Hub are consolidated into a single DynamoDB table, with a daily sync Lambda providing a unified security view.