This solution uses AWS CloudFormation templates to deploy automated workflows to remediate deviations from the Payment Card Industry Data Security Standard (PCI DSS) and AWS Foundational Security Best Practices (AWS FSBP).
With this deployment, AWS Security Hub continuously evaluates your AWS resources against the PCI DSS and AWS FSBP controls. Deviations from controls invoke an automated process of remediation using AWS CloudWatch rules and AWS Systems Manager runbooks. Security Hub processes and prioritizes security check findings using the AWS Security Finding Format (ASFF).
https://aws.amazon.com/solutions/implementations/compliance-pci-fsbp-remediation/
