cloudguard-pro is an event-driven AWS security platform that detects and automatically remediates cloud misconfigurations. Seven Lambda functions, a shared data contract, dual IaC provisioning, and a unified findings store backed by DynamoDB Streams and SNS.

This writeup covers the architecture, the IaC split, and the implementation decisions that shaped the system.

Architecture

CloudTrail → EventBridge (default bus)

↓ forward rule