03 de out. de 2026
Security Hub remediation plans: root-cause remediation, dissected
On October 1, 2026, Security Hub gained remediation plans: instead of a queue of findings, one plan per root cause, with an impact assessment and instructions in CLI, Terraform, CloudFormation, Python, and CDK. I dissect the root-cause remediation pattern (the problem it solves, its anatomy, when to use it and when not) and the detail that deserves the most scrutiny: AI agents consuming plans through the API.
