Case closure - AWS Security Incident Response User Guide

Case closure

AWS Security Incident Response engineers close your case when:

  • The incident has been contained and remediated

  • All investigation findings have been shared with you

  • No further Security Incident Response engineer assistance is required

  • You request case closure

Before closing a case, your Security Incident Response engineer provides a summary of findings, actions taken, and recommendations for improving your security posture.

If you need additional assistance after case closure, you can open a new case or contact AWS Support.