How I built a real-time serverless security detection pipeline on AWS using CloudTrail, EventBridge, Lambda, DynamoDB, and SNS — and what broke along the way.

All source code for this project is on GitHub: aws-siem-detection-pipeline




Most cloud security tutorials show you how to turn on GuardDuty and call it a day. I wanted to better...