How to Scale Cloud Security with Auto-Remediation
Show notes
When Cloud Security Posture Management (CSPM) tools generate thousands of low and medium-severity alerts, security teams often struggle to manage the infinite backlog. Many organizations avoid auto-remediation due to the fear of breaking production environments and losing the trust of their engineering teams. However, by implementing strict guardrails and transparent communication, auto-remediation can become a powerful tool for standardizing security across complex, multi-cloud environments. In this episode of the Cloud Security Podcast, Ashish sits down with Andoni Alonso Fernández, DevSecOps Engineer, Crossmint and Samuel Burgos López, Senior Infrastructure Engineer, Flywire to discuss their pragmatic approach to auto-remediation. They share how their small team utilized infrastructure-as-code and open-source tools like Steampipe to automate fixes across AWS, GCP, and Azure. We speak about the importance of building trust with Site Reliability Engineers (SREs) by offering bypass options, configuration locks, and thorough testing in isolated environments. By automating the resolution of repetitive, low-risk issues like enabling default EBS encryption security teams can drastically reduce their alert fatigue and focus on complex, high-value architectural challenges.
Guest Socials - Samuel's Linkedin + Adoni's Linkedin
Podcast Twitter - @CloudSecPod
If you want to watch videos of this LIVE STREAMED episode and past episodes - Check out our other Cloud Security Social Channels:
If you are interested in AI Security, you can check out our sister podcast - AI Security Podcast
Questions asked:
(00:00) Introduction to Auto-Remediation in Cloud Security(01:50) Samuel and Andoni’s Backgrounds in Network Security and SRE(04:00) Why Auto-Remediation Initially Failed the Industry(05:50) Standardizing Compliance Across Multi-Cloud Environments(08:30) Building Trust with Engineering and SRE Teams(11:50) Navigating Security Challenges During M&A Integrations(16:50) The Architecture of Safe Auto-Remediation (Lambdas and SQS)(18:00) Implementing Guardrails: Configuration, Locks, and Bypasses(20:50) Balancing Preventative Controls with the CSPM Alert Backlog(24:00) How to Safely Start an Auto-Remediation Program(27:30) Recruiting Security Champions for Beta Testing(30:50) How AI Accelerates the Development of Multi-Cloud Remediation Scripts(34:30) Fun Questions: Running, Music, and Thai Food in Adelaide
Resources spoken about during the episode: