- Security Hub adds remediation plans that group related findings by root cause, enabling a single fix to resolve multiple exposures
- Plans provide risk‑based prioritization, impact assessment, and step‑by‑step instructions with examples for CLI, Terraform, CloudFormation, Python, and CDK, auto‑ranked by risk reduction
- AI agents can consume remediation plans via API for automated fixes; available in all regions at no extra cost