Open source project for Automating ECR Vulnerability Reports with Amazon EventBridge

Learn by using AWS-CDK, how to implement this automation without any AWS Lambda function code

Architecture Diagram

For more details on how to deploy the infrastructure and the solution details, please refer to the Blog Posts:

• Part 1: New AWS SDK Integration Feature of AWS Step Functions with DynamoDB.

• Part 2: Sending Notifications for High Severity Findings.

• Part 3: Fetching Detailed Vulnerability Information.

• Part 4: Leveraging Enhanced Inspector Scanning.

The cdk.json file tells the CDK Toolkit how to execute your app.

Useful commands

• npm run build compile typescript to js
• npm run watch watch for changes and compile
• npm run test perform the jest unit tests
• npx cdk deploy deploy this stack to your default AWS account/region
• npx cdk diff compare deployed stack with current state
• npx cdk synth emits the synthesized CloudFormation template