Grzegorz Kaczor

The solution collects and consolidates logs from multiple AWS accounts, making it easier for organizations to monitor and analyze their logs in one central location. The solution uses an Elasticsearch cluster to aggregate and store the logs, providing a centralized view of log data across multiple accounts.

Developers, system administrators, and analysts can access the dashboard to view logs and quickly identify issues or trends. The solution can help organizations rapidly troubleshoot problems, identify potential security threats, and gain insights into the application and system performance.

The centralized security solution is designed to collect security findings from multiple AWS accounts. The project utilizes automation to collect the findings and sends notifications to respective product teams. It also includes a centralized dashboard that aggregates all the findings and presents them in one place for easy analysis.

By collecting security findings from multiple AWS accounts, the solution provides a comprehensive view of security issues across the organization. The automation aspect of the project ensures that security findings are consistently and accurately collected, eliminating the potential for human error.

Services used: Elasticsearch, AWS Security Hub, Amazon CloudWatch, Amazon Event Bridge, AWS Lambda, AWS KMS, Amazon S3, and AWS Identity and Access Management (IAM).