AWS security-ir documentation change

Service: security-ir · 2025-11-22 · Documentation medium

File: security-ir/latest/userguide/create-an-aws-supported-case.md

Summary

Added new section for creating AWS-supported cases with AI investigation capabilities, including responsible AI disclosure about human oversight requirements.

Security assessment

Documents new AI-assisted security investigation features and emphasizes human responsibility in security decisions. While security-related, there's no evidence of addressing a specific vulnerability - rather documenting new capabilities and governance requirements.

Diff

diff --git a/security-ir/latest/userguide/create-an-aws-supported-case.md b/security-ir/latest/userguide/create-an-aws-supported-case.md
index 8b9f50824..ae711ac1a 100644
--- a//security-ir/latest/userguide/create-an-aws-supported-case.md
+++ b//security-ir/latest/userguide/create-an-aws-supported-case.md
@@ -83,0 +84,40 @@ After a AWS supported case has been created, the AWS CIRT and your incident resp
+**To create an AWS-supported case with AI investigation**
+
+  1. Open the AWS Security Incident Response console at [console.aws.amazon.com/security-ir/](https://docs.aws.amazon.com/console.aws.amazon.com/security-ir/).
+
+  2. Choose **Cases** from the navigation pane.
+
+  3. Choose **Create case**.
+
+  4. For **Case type** , select **AWS-supported case**.
+
+  5. Provide case details including title, incident start date, and affected AWS account ID.
+
+  6. In the **Describe the security event** section, provide a thorough description of the incident.
+
+  7. Provide additional information about affected AWS services, regions, and other relevant details.
+
+  8. Choose **Create case**.
+
+
+
+
+After case creation, both the CIRT team and AI agent begin working simultaneously. 
+
+**To respond to AI clarifying questions (optional)**
+
+  1. Navigate to the **Investigation** tab in your case.
+
+  2. Review any clarifying questions presented by the AI agent.
+
+  3. Respond to the questions or choose **Skip** if you prefer not to answer.
+
+  4. Choose **Submit** to continue. All fields are optional.
+
+
+
+
+**Responsible AI disclosure**
+
+Investigation summaries are generated using AWS Generative AI capabilities. You are responsible for evaluating AI-generated recommendations in your specific context, implementing appropriate oversight mechanisms, verifying findings independently, and maintaining human oversight of all security decisions. 
+