Tamnoon builds Tami, an agentic cloud remediation orchestrator on Amazon Bedrock
An AWS Machine Learning Blog post describes how Tamnoon built Tami, an agentic cloud remediation orchestrator, on Amazon Bedrock. Tami ingests findings from CNAPP and cloud-native tools such as Wiz, CrowdStrike and AWS Security Hub, then uses four specialized agents — investigation, safety scoring, remediation and code generation — to produce fixes rated SAFE, RISKY or AWAITING DATA, with Bedrock Guardrails, a generate-and-review loop and human approval gating execution. Tamnoon says the approach cut critical cloud exposure by more than 90% in 90 days with zero production issues; those figures are the vendor's own and have not been independently verified.
It shows how enterprises are applying agents to high-risk cloud security remediation under guardrails and human approval, rather than stopping at alert triage.
Critical cloud exposures pile up faster than security teams can close them. Cloud-native application protection platforms (CNAPP), cloud providers, and posture scanners generate more findings than any team can triage, and risk accumulates in the gap between detected and fixed. Most findings sit untouched, not because they’re hard to fix. Someone must investigate context, identify the owner, confirm the fix won’t break production, and then do it at a volume that outpaces headcount.
In this post, we share how Tamnoon built Tami, an agentic cloud remediation orchestrator on Amazon Bedrock, to close that gap. Tami autonomously investigates findings ingested from CNAPP and cloud-native sources and assesses whether remediation is safe. It then generates and orchestrates the fix with guardrails and governance wherever a change touches a customer’s cloud. The approach drove an over 90 percent reduction in critical cloud exposure in 90 days with zero production issues.
About Tamnoon
Tamnoon is an AI-powered cloud security remediation platform that works alongside CNAPPs. Its AI assistant, Tami, helps human cloud security experts investigate, prioritize, and safely remediate misconfigurations and issues across customer environments in AWS, Azure, Google Cloud, and other cloud providers.
#Tamnoon#Tami#Amazon Bedrock#Amazon Bedrock AgentCore#Amazon Bedrock Guardrails#Anthropic Claude#AWS Lambda#Amazon EKS#Wiz#CrowdStrike#AWS Security Hub#Amazon GuardDuty