What is AWS Security Incident Response? - AWS Security Incident Response User Guide

What is AWS Security Incident Response?

AWS Security Incident Response helps you quickly prepare for, respond to, and receive guidance to help recover from security incidents. This includes incidents like account takeovers, data breaches, and ransomware attacks.

AWS Security Incident Response triages findings, escalates security events, and manages cases that require your immediate attention. Additionally, you have access to the AWS Customer Incident Response Team (CIRT), who will investigate impacted resources.

Note

There is no guarantee impacted resources can be recovered. We recommend establishing and maintaining backups for resources that could impact your business requirements.

AWS Security Incident Response works with other AWS Detection and Response services, guiding you through the entire incident lifecycle – from detection to recovery.