Remy
From AWS security findings
to a plan engineers can review.
Remy turns saved Prowler scan results into remediation guidance: what a finding means, what needs attention, and how an engineer might address it.
It produces reports and suggested Terraform. Engineers review the recommendations and make the changes themselves.
The problem
A security finding is the beginning of the work. Before changing infrastructure, an engineer needs to understand the affected resource, the surrounding system, and the consequences of a proposed fix.
Remy brings those review steps together. Some findings have a concrete Terraform example. Others need more context, a migration plan, or a manual action. The report makes that distinction explicit.
How it works
Start with a saved scan
Remy reads Prowler AWS findings in JSON-OCSF format. It validates the file before generating a report and leaves the source scan unchanged. It does not need AWS credentials or connect to the account.
Review the guidance
Each failed finding gets a stable reference ID, an explanation, and a recommended review path. Findings without supported guidance remain visible. Related findings are flagged when they may affect the same infrastructure setting.
Choose the next action
Read the report, share a review copy, or inspect the Terraform suggestions. Engineers reconcile the guidance with their existing infrastructure and decide what to implement. Remy does not apply changes.
What it produces
- HTML report
- A self-contained report that opens in a browser.
- A portable copy for review and discussion.
- JSON
- A structured snapshot for further analysis or tooling.
- Terraform ZIP
- Per-finding suggestions and a manifest. These are separate examples to review, rather than a combined deployment module.
Engineering approach
The command-line interface runs without a database, account, or server. An optional web workspace adds saved reports, organization membership, authentication, and audit history.
Both use the same report pipeline. Stable finding IDs help reviewers refer to the same issue across exports; reproducible output is available for identical inputs and a specified build timestamp.
Remy is built in Python, with FastAPI, server-rendered templates, and SQLAlchemy for the optional workspace. Guidance comes from a maintained recommendation catalog.
Current state
Remy is a local prototype with command-line reporting and an optional web workspace. Hosted customer access and direct AWS scanning are future work.
The reports include draft HIPAA references from a pinned Prowler framework. Applicability requires review; a report is not a compliance determination. Terraform examples also require review against the actual infrastructure before use.
Contact me about Remy