Automated Incident Response in AWS using GuardDuty, EventBridge, Lambda, and SNS to detect threats, quarantine compromised EC2 instances, and alert security teams. Built as part of AWS Certified Security – Specialty (CSS) Domain 1 exam preparation.

Secure cross-account access with IAM Roles + Service Control Policies (SCPs). Demonstrates Dev→Security account role assumption using External ID, enforced guardrails and proof of allowed/blocked actions.