Create Custom Email Templates Configured for Wiz.io
– Dynamic Fields that support all Wiz enabled Template Variables –
– Add contextually unique HTML text by individual Wiz Automation Rule –
– Dynamically send the emails to both static & resource tag value email addresses –
Having the ability to send custom email notifications to users using internal company branding, and issue severity is a requirement of many IT Organizations.
The Wiz.io Email Integration Module allows you to create custom email templates that can be configured to extract and leverage finding information from the Automation Rule data payload providing access to use all Wiz.io supported template variables and dynamically address the email using resource tag values.
Requirements:
- Wiz.io SaaS Platform Account
- AWS Account for Cloud Formation Template Deployment and the Wiz.io service account role
- Utilizes your companies AWS Simple Email Service (SES) to send emails
- Comes with three out-of-the-box email templates for testing and customization
This integration ensures that critical security non-conformances are communicated effectively, aligning with your organizational requirements and enhancing your cloud security operations.
Example Templates Included
For Your Awareness
When using Wiz auto-remediation playbooks to correct a non-conformance such as overly permissive IAM policies, the For Your Awareness template can be used to notify an individual team or dynamically assigned owner from a resource tag such as “Owner” that a specific resource was out of compliance and has either been deleted or modified to be in compliance.
For Your Action
Some organizations prefer to notify a team or the owner that a resource has been discovered which is non-compliant and require that the non-conformance be corrected manually. The For Your Action template can be used to notify that a resource needs to be made compliant or when using auto-remediation playbooks and the modification to correct the non-conformance has failed.
For Your Information
The For Your Information template is a good way to notify teams and resource owners that a non-security related event such as a cost optimization opportunity, or non-conformances such as non-compliance to meta-tagging data of a resource has been detected and should be taken care of when able.