Use an Amazon Bedrock powered chatbot with Amazon Security Lake to help investigate incidents

This article describes a new solution that uses Amazon Bedrock and Amazon Security Lake to create an AI-powered chatbot for security incident investigation. The solution allows security teams to:

• Generate and execute SQL queries using natural language
• Retrieve relevant incident response playbooks
• Quickly investigate security findings across AWS accounts
• Use a graphical user interface powered by an Amazon Bedrock agent

Key features of the chatbot include:

• Generating SQL queries to investigate security findings
• Finding and recommending incident response playbooks
• Providing context-aware responses for security events
• Supporting natural language interactions for threat hunting

The solution demonstrates how generative AI can help security teams accelerate incident investigation and improve overall security posture by making complex security data more accessible and actionable.