One post tagged with "Security Hub"

In this blog post, I'll be detailing how to set up automated Slack notifications for any new AWS Security Hub findings, through AWS CDK Typescript.

We'll create a single 'securityHubNotificationsStack' that will deploy all the infrastructure we need.

At a high level, here's what we'll build:

1. An EventBridge rule that triggers for any Security Hub findings
2. An SQS Queue that consumes the events triggered by the rule
3. A Lambda Function that processes messages from the queue and sends the notifications to Slack via a Slack incoming webhook
4. A dead letter queue (DLQ) to store any messages in our queue that fail processing
5. A CloudWatch alarm to notify us of any failed messages.