Case Comment Events - AWS Security Incident Response User Guide

Case Comment Events

Case Comment Created by AWS Responder

{ "version": "0", "id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111", "detail-type": "Case Comment Created", "source": "aws.security-ir", "account": "111122223333", "time": "2023-05-12T04:30:00Z", "region": "us-west-2", "resources": [ "arn:aws:security-ir:us-west-2:111122223333:case/1234567890" ], "detail": { "caseId": "1234567890", "createdBy": "AWS Responder" } }

Case Comment Created by Customer

{ "version": "0", "id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111", "detail-type": "Case Comment Created", "source": "aws.security-ir", "account": "111122223333", "time": "2023-05-12T02:15:00Z", "region": "us-west-2", "resources": [ "arn:aws:security-ir:us-west-2:111122223333:case/1234567890" ], "detail": { "caseId": "1234567890", "createdBy": "111122223333" } }

Case Comment Created by AWS Security Incident Response Service

{ "version": "0", "id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111", "detail-type": "Case Comment Created", "source": "aws.security-ir", "account": "111122223333", "time": "2023-05-12T02:15:00Z", "region": "us-west-2", "resources": [ "arn:aws:security-ir:us-west-2:111122223333:case/1234567890" ], "detail": { "caseId": "1234567890", "createdBy": "security-ir.amazonaws.com" } }

Case Comment Updated by Customer

{ "version": "0", "id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111", "detail-type": "Case Comment Updated", "source": "aws.security-ir", "account": "111122223333", "time": "2023-05-12T02:45:00Z", "region": "us-west-2", "resources": [ "arn:aws:security-ir:us-west-2:111122223333:case/1234567890" ], "detail": { "caseId": "1234567890", "updatedBy": "111122223333" } }

Case Comment Updated by AWS Security Incident Response Service

{ "version": "0", "id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111", "detail-type": "Case Comment Updated", "source": "aws.security-ir", "account": "111122223333", "time": "2023-05-12T02:45:00Z", "region": "us-west-2", "resources": [ "arn:aws:security-ir:us-west-2:111122223333:case/1234567890" ], "detail": { "caseId": "1234567890", "updatedBy": "security-ir.amazonaws.com" } }

Case Comment Created by AWS Responder

{ "version": "0", "id": "a1b2c3d4-5678-90ab-cdef-EXAMPLE11111", "detail-type": "Case Comment Updated", "source": "aws.security-ir", "account": "111122223333", "time": "2023-05-12T02:45:00Z", "region": "us-west-2", "resources": [ "arn:aws:security-ir:us-west-2:111122223333:case/1234567890" ], "detail": { "caseId": "1234567890", "updatedBy": "AWS Responder" } }