Build A Smarter Security Chatbot With Amazon Bedrock Agents

Chatbot integrates Amazon Security Lake and Amazon Bedrock agents to assist with incident investigation using natural language input via a React-based GUI

[{"selector":"#anim-7d733731-7715-4d19-8272-a199adb9a3ac [data-leaf-element=\"true\"]","keyframes":{"transform":["translate(0%, 0%) scale(1.5)","translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] [{"selector":"#anim-c08fb699-266f-453e-80a2-1b12af4e3d15","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-bb807009-ec54-42e9-9dfd-faafddadd829","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

The chatbot uses Amazon Bedrock agents to generate SQL queries for Security Lake or recommend incident response playbooks

[{"selector":"#anim-c0db7a12-e25a-4bf6-a3f5-16352e27e93b [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-6ee035b9-1989-45c7-ae82-2cc55a35b007","keyframes":{"opacity":[1,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-31c7a300-78e3-4502-ad19-71c71a0f673e","keyframes":{"transform":["scale(3)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

The solution leverages MCP to coordinate specialized AI models like Claude 3 Sonnet for translation and query generation

[{"selector":"#anim-132b4366-5800-46d0-9ef4-26bf1028cb79 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(-12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-3f31063e-c99a-4f8e-9abc-81342eeb64f1","keyframes":{"transform":["translate3d(115.2381%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-b354ebc7-86ad-468c-a627-f7aa34a21dd9","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-79f5032a-d4e2-48b1-8bf0-e9541b54cd85","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

User queries are processed through API Gateway, Lambda functions, and Amazon Bedrock agents, with results displayed in a chat interface

[{"selector":"#anim-fed2546c-c5a2-45fd-be7c-025f3efc00da [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-1041f1f7-b158-4ecb-a090-317c73a5ce3d","keyframes":{"opacity":[0,1]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-abf33b5a-4454-49f8-a69f-a83b0145e1c2","keyframes":{"transform":["scale(0.3333333333333333)","scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]

Amazon Bedrock agents use a knowledge base to query Security Lake schemas and recommend pre-approved incident response playbooks

[{"selector":"#anim-81cf9313-70d8-4051-a2a5-dd90502512a5 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-8a88aa8d-a9d7-4373-9ed6-8df017caabe9","keyframes":{"transform":["translate3d(-115.55555%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-6be291db-4832-4e4a-8503-64cd4dc03549","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-5227a6b9-991e-43c3-9d6f-85dc76b36ff4","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

Costs depend on data processed in Security Lake, tokens used in Amazon Bedrock, and data scanned by Athena for SQL queries

[{"selector":"#anim-22c4bca4-7dd7-4f8d-90b5-69ac38a5f255 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate(0%, 0%) scale(1.5)","translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}] [{"selector":"#anim-0f5c7ab8-28e8-4b29-8333-d9f495d89686","keyframes":{"transform":["rotate(-540deg) scale(0.1)","none"],"opacity":[0,1]},"delay":0,"duration":1000,"fill":"both","iterations":1}]

Clean-Up Process: Use AWS CloudFormation or AWS CDK commands to delete the deployed resources after testing the solution

[{"selector":"#anim-89d31376-f399-4d89-8e40-268385dc3c65 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate3d(12.514648210040342%, 0, 0)","translate3d(0%, 0, 0)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"both"}] [{"selector":"#anim-7cb81540-096f-4d78-86a9-bf01f75c6763","keyframes":{"transform":["translate3d(110.9756%, 0px, 0)","translate3d(0px, 0px, 0)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-ad34234e-ba4d-4d95-a668-a4f776e5d0c4","keyframes":{"opacity":[0,1]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"both"}] [{"selector":"#anim-a0af2f3d-7bf6-4438-864d-e2665a7c6281","keyframes":{"transform":["scale(0.15)","scale(1)"]},"delay":0,"duration":600,"easing":"cubic-bezier(0.4, 0.4, 0.0, 1)","fill":"forwards"}]

For more details visit Govindhtech.com

[{"selector":"#anim-29c25b3f-dd18-40ec-abc1-04cbdac8e9a1 [data-leaf-element=\"true\"]","keyframes":{"transform":["translate(0%, 0%) scale(1.5)","translate(0%, 0%) scale(1)"]},"delay":0,"duration":2000,"easing":"cubic-bezier(.3,0,.55,1)","fill":"forwards"}]