Reference architecture for security scan process

Some people at my company are building an app that executes security scans on cloud accounts such as AWS, GCP etc…
I only have a high level understanding of the project but I know that it involves a few microservices with serveral steps in the end to end process. There is also the need to alert human users to results and an audit log would probably make sense.
Does anyone know of a project like this being implemented with Camunda or Zeebe?

What’s your scale and Min performance requirement?

Either would work. Usually just a question of how you want to deploy and secondary capabilities.

I did some similar work with Stix / taxii: https://github.com/StephenOTT/TAXII-springboot-bpmn

1 Like