5Incident and Event Response

• 5.1Event-Driven Automation

  Understand automated responses to events—EventBridge (rules/targets), CloudWatch alarms, EventBridge Scheduler, and SNS/SQS. Trigger actions automatically on state changes.

• 5.2Auto-Remediation and Runbooks

  Understand automating detect-to-remediate—SSM Automation (runbooks), Config auto-remediation, Lambda remediation, and Auto Scaling self-healing. Correct drift without human intervention.

• 5.3Notification and Escalation

  Understand incident notification and operations—SNS, EventBridge, Systems Manager Incident Manager, Chatbot (Slack/Teams), and dead-letter queues (DLQ). Reach the right people reliably and coordinate response.