Workflows use cases

The following use cases show some of the ways you can use Workflows to leverage notifications.

Reduce security event storm Security alert noise reduction

Application Security

In this use case, you set up a workflow to explore all incoming AWS events but receive notifications only for the critical ones and only for certain relevant accounts. See how you can process, triage, enrich, and classify incoming AWS alerts so the security team can act on everything that matters immediately.

Intrusion notification automation Instant intrusion response

Application Security

In this use case, you set up a workflow to identify whenever an attack occurs, determine what is affected, and notify the responsible team for the affected entities. See how you can collect, processes, and enrich the data with context, and convert the resulting information into notifications on your desired channels so that you can respond much faster to attacks.