AWS Security ChangesHomeSearch

AWS security-ir documentation change

Service: security-ir · 2026-01-28 · Documentation low

File: security-ir/latest/userguide/setup-monitoring-and-investigation-workflows.md

Summary

Added note about creating AWS-supported cases for GuardDuty suppression rules, alert triaging, and response workflows.

Security assessment

Documents support process for security configurations without addressing specific vulnerabilities. Enhances guidance on managing security tools.

Diff

diff --git a/security-ir/latest/userguide/setup-monitoring-and-investigation-workflows.md b/security-ir/latest/userguide/setup-monitoring-and-investigation-workflows.md
index 4059ac9a6..9878a94a0 100644
--- a//security-ir/latest/userguide/setup-monitoring-and-investigation-workflows.md
+++ b//security-ir/latest/userguide/setup-monitoring-and-investigation-workflows.md
@@ -12,0 +13,4 @@ If you experience any onboarding issues, then please [ create an AWS Support cas
+###### Note
+
+If you have questions about Amazon GuardDuty suppression rules, alert triaging configurations, or proactive response workflows, you can create an AWS-supported case with the case type **Investigations and Inquiries** to consult with the AWS Security Incident Response team. For more information, see [Create an AWS supported case](./create-an-aws-supported-case.html). 
+