Automated remediation: Securing the Volkswagen AWS landing zone at scale

The article discusses how Volkswagen (VW) implemented an automated remediation solution for securing their AWS landing zone at scale, developed in collaboration with AWS Professional Services.

• The solution addresses security vulnerabilities across 1,200 AWS accounts
• Key requirements included controlled remediation pace, clear communication, and exception management
• Implemented using AWS CodeBuild, EventBridge, and Security Hub
• Remediation modules automatically fix security misconfigurations
• Increased security issue resolution from 95% to 99.9% for critical vulnerabilities
• Performed over 100,000 remediations in the first year

The automated approach significantly improved VW's security posture, reduced operational burden, and minimized risks across their Digital Production Platform infrastructure.