Functionality of Event Driven Automation using Ansible or inhouse automation tools like shell script or webhooks

@Guest At this time, SCC does not have plan to support such capability. This will require major efforts on the foundational capability, but it is not a priority. Can you connect with @Venky Nerkunam to find some work around?

@Guest We will discuss it in our 3-in-box and provide you feedback on your ask.

Hi Milind, Actually this does not support what we are looking for and I know that it is not currently supported in SCC. And thats we are looking for some extended notifications. It just support 4 type of notifications, which does not include what we are looking for:

https://cloud.ibm.com/docs/security-compliance?topic=security-compliance-event-notifications&interface=ui#event-notifications-list

We are looking for, when a scan is complete and I need the list of failed controls together or individual, so that we can take that further.

Hi @Milind, Thank you for the response but this does not meet my ask. I want to receive a notifications at a more granualer level. E.g. I want notification for all the controls which are failed and success. Say, I need to automate the fix of the failed controls by redeploying or doing someting else. How do I achieve that?

@Guest Does that meet your needs ?

SCC does support Event notification service available on IBM cloud to generate alerts and consume them.

see https://cloud.ibm.com/docs/security-compliance?topic=security-compliance-event-notifications&interface=ui