Orca Security × Tines

Ingest AWS alerts from Orca Security, focusing on IAM misconfigurations. Take appropriate action based on severity and automatically remediate S3 bucket alerts. Confirm with user/team via Slack.

Tools: AWS, Jira Software, Orca Security, Slack

This story gets alerts from Orca for AWS buckets that have been made public. It then pulls the details of the bucket in AWS to get the current bucket permissions and identify if this alert is a false positive or negative. If the bucket is now private, the alert in Orca is dismissed. If the bucket is still public, a Slack message is sent with bucket details and the option to either leave the bucket open and dismiss the alert or make the bucket private and close the alert. Once the choice has been made in slack, the message updates to reflect that choice and a comment confirming the chosen action has been completed is added to the thread.

Tools: AWS, Orca Security, Slack

Intake a cloud asset using a form, run a scan, and check for vulnerabilities using Orca Security. If vulnerabilities are present, an artifact is created and added to the vulnerability security controls in Drata. For both positive and negative vulnerability findings, the asset owner will be updated via email. Records will be added to Tines detailing the scan that took place.

Tools: Drata, Orca Security

Intake cloud assets, run a scan, and check for vulnerabilities. If vulnerabilities are present, a JIRA ticket will be created for remediation. If not, the asset owner will be updated via email.

Tools: Jira Software, Orca Security