Action Items - AWS Security Incident Response User Guide

Action Items

An AWS Security Incident Response engineer working on the case may request actions from your internal team.

Action items that appear after a case has been created include:

  • Request to provide permissions for an incident responder to access a caseĀ 

  • Request to provide more information about the case

Action items when a case is ready to close:

  • Request to review the case report

  • Request to close the case