Edit a case - AWS Security Incident Response User Guide

Edit a case

Choose Edit to change the details of a case.

For AWS supported and self-managed cases:

You can change the following case details after a case has been created:

  • Title

  • Description

For AWS supported cases only:

You can change the additional fields: 

  • Request type:

    • Active Security Incident: This type is for urgent incident response support and services.  

    • Investigations: Investigations allow you to get support for perceived security incidents where the AWS Security Incident Response engineers can support in log dive and secondary confirmation of the security event.

  • Start date estimate: Change this field if you received indicators for this case that pre-date the initial provided start date. Consider providing additional details in regards to the newly detected indicator in the description field or add a comment in the communications tab.