AWS security-ir documentation change
Summary
Enhanced documentation for managing proactive security cases with console instructions and case identification details
Security assessment
Adds operational documentation about security feature usage (proactive case handling) but doesn't address vulnerabilities. Improves clarity around security incident management processes.
Diff
diff --git a/security-ir/latest/userguide/responding-to-an-aws-generated-case.md b/security-ir/latest/userguide/responding-to-an-aws-generated-case.md index 8e9ebb250..34e710d0b 100644 --- a//security-ir/latest/userguide/responding-to-an-aws-generated-case.md +++ b//security-ir/latest/userguide/responding-to-an-aws-generated-case.md @@ -7 +7 @@ -AWS Security Incident Response may create an outbound notification or case when you need to act on or be aware of something that might impact your account or resources. This will only occur if you have enabled the proactive response and alert triaging workflows enabled as part of your subscription. +AWS Security Incident Response may create an outbound notification or case when you need to act on or be aware of something that might impact your account or resources. This will only occur if you have enabled the proactive response and alert triaging workflows as part of your subscription. @@ -9 +9,12 @@ AWS Security Incident Response may create an outbound notification or case when -These notifications will appear in Support Center. The Support user guide has information and detailed steps for [updating, resolving, and reopening](https://docs.aws.amazon.com/awssupport/latest/user/monitoring-your-case.html) these cases. +These notifications will appear as Security Incident Response cases with the prefix "[Proactive case]" in the AWS Security Incident Response console. To view and manage these cases: + + * Open the Security Incident Response console at https://console.aws.amazon.com/security-ir/ + + * Click "Cases" in the menu. + + * You should be able to see all the cases, including those with the "[Proactive case]" prefix. + + + + +These cases allow you to update, resolve, and reopen them as needed. You can communicate directly with the AWS Security Incident Response team through these cases, ensuring efficient handling of potential security issues.