A configuration policy applicable to one or more target resources is identified. An indication of a non-compliance remediation workflow corresponding to the policy, indicating an automated action, is obtained via a programmatic interface. In response to detecting that a particular target resource does not comply with the configuration policy, implementation of the automated action is initiated.