Eligible for Remediation
68↑ 12%vs previous periodTechnical Debt — Remediation & Workflows
Plan, approve, execute and verify remediation at scale
It provides automated and manual remediation workflows for technical debt items with approval gates, change management, and verification. It helps you reduce risk, lower costs and improve compliance by addressing issues across cloud and code.
In Progress
24↑ 9%vs previous periodRemediated (last 30 days)
54↑ 28%vs previous periodAwaiting Approval
16↓ 6%vs previous periodRemediation workflow
End-to-end workflow from identification to verification.
1. Identify
Select eligible technical debt items
2. Plan
Generate remediation plan and impact analysis
3. Approve
Review and approve changes (manual gate)
4. Execute
Run automated or manual remediation
5. Verify
Confirm resolution with source evidence
Remediation options
Choose the right remediation method based on the issue type and policy.
| Method | Description | Supported for |
|---|---|---|
| Automated | Run pre-defined remediation playbooks | AWS, GitHub, Policy, Drift |
| Manual | Provide step-by-step instructions | All sources |
| AI-assisted | Generate fix suggestions using AI | Code, Configuration |
| Custom script | Execute custom commands or Terraform | Cloud, Infrastructure |
| Bulk remediation | Remediate multiple items in a campaign | All sources |
Supported remediation types
Configuration fixes
Dependency updates
Compliance enforcement
Drift remediation
Optimization recommendations
Example remediation plan
A generated plan includes the issue details, impact analysis and execution steps.
Security Hub finding: S3 bucket public access
Critical- Resource
arn:aws:s3:::example-bucket- Issue
- S3 bucket allows public access
- Impact
- Data exposure risk
- Remediation
- Block public access and update bucket policy
Execution steps
- 1Enable block public access on the bucket
- 2Update bucket policy to restrict access
- 3Verify using AWS Security Hub