Remy
From AWS security findings
to a detailed remediation report.
Remy turns saved Prowler scan results into remediation guidance: what a finding means, what needs attention, and how an engineer might address it.
It produces reports and suggested Terraform. Engineers review the recommendations and make the changes themselves.
The problem
A security finding is the beginning of the work. Before changing infrastructure, an engineer needs to understand the affected resource, the surrounding system, and the consequences of a proposed fix.
Remy brings those review steps together. Some findings have a concrete Terraform example. Others need more context, a migration plan, or a manual action. The report makes that distinction explicit.
How it works
Start with a saved scan
Remy reads Prowler AWS findings in JSON-OCSF format. It validates the file before generating a report and leaves the source scan unchanged. It does not need AWS credentials or connect to the account.
Review the guidance
Each failed finding gets a stable reference ID, an explanation, and a recommended review path. Findings without supported guidance remain visible. Related findings are flagged when they may affect the same infrastructure setting.
Choose the next action
Read the report, share a review copy, or inspect the Terraform suggestions. Engineers reconcile the guidance with their existing infrastructure and decide what to implement. Remy does not apply changes.
What it produces
Open the HTML, PDF, or JSON example to see the same report in each format. All account details and findings are fictional.
- HTML report example (opens in a new tab)
- A self-contained report that opens in a browser.
- PDF example (opens in a new tab)
- A portable copy for review and discussion.
- JSON example (opens in a new tab)
- A structured snapshot for further analysis or tooling.
- Per-finding suggestions and a manifest. These are separate examples to review, rather than a combined deployment module.
Engineering approach
The command-line interface runs without a database, account, or server. An optional web workspace adds saved reports, organization membership, authentication, and audit history.
Both use the same report pipeline. Stable finding IDs help reviewers refer to the same issue across exports; reproducible output is available for identical inputs and a specified build timestamp.
Remy is built in Python, with FastAPI, server-rendered templates, and SQLAlchemy for the optional workspace. Guidance comes from a maintained recommendation catalog.
Current state
Remy is a local prototype with command-line reporting and an optional web workspace. Hosted customer access and direct AWS scanning are future work.
The reports include draft HIPAA references from a pinned Prowler framework. Applicability requires review; a report is not a compliance determination. Terraform examples also require review against the actual infrastructure before use.
Contact me about Remy