Single Lambda response

Configure for single Lambda response

In this section you will learn how to implement an automated incident response action on a single AWS Lambda Function. This function will perform all the necessary actions in the same code.

The steps we will be performing are:

• Create an IAM policy and attach it to the IAM role that the Lambda function will assume for the automated responses.
• Create the Lambda function.
• Test the Lambda function.
• Create an EventBridge rule that will call the Lambda function based on the GuardDuty findings.

The architecture for this alternative is the following:

Contents:

1. Create IAM Policies and Roles
2. Create Lambda Function
3. Test Lambda Function
4. Create EventBridge Rule