AWS whitepapers documentation change
Summary
Entire content of the security incident response playbook guide was removed
Security assessment
Removes documentation about creating security incident playbooks but doesn't address any specific vulnerability. No evidence of security incident remediation.
Diff
diff --git a/whitepapers/latest/aws-security-incident-response-guide/what-to-create-playbooks-for.md b/whitepapers/latest/aws-security-incident-response-guide/what-to-create-playbooks-for.md index e0ae763bf..8b1378917 100644 --- a//whitepapers/latest/aws-security-incident-response-guide/what-to-create-playbooks-for.md +++ b//whitepapers/latest/aws-security-incident-response-guide/what-to-create-playbooks-for.md @@ -1 +0,0 @@ -[View a markdown version of this page](what-to-create-playbooks-for.md) @@ -3,36 +1,0 @@ -[](/pdfs/security-ir/latest/userguide/sir-ug.pdf#what-to-create-playbooks-for "Open PDF") - -[Documentation](/index.html)[Security Incident Response](/security-ir/index.html)[](what-is.html) - -# What to create playbooks for - -Playbooks should be created for incident scenarios such as: - - * **Expected incidents** – Playbooks should be created for incidents you anticipate. This includes threats like denial of service (DoS), ransomware, and credential compromise. - - * **Known security findings or alerts** – Playbooks should be created for your known security findings and alerts, such as GuardDuty findings. You might receive a GuardDuty finding and think, “Now what?” To prevent mishandling of a GuardDuty finding or ignoring the finding, create a playbook for each potential GuardDuty finding. Some remediation details and guidance can be found in the [GuardDuty documentation](https://docs.aws.amazon.com/guardduty/latest/ug/guardduty_remediate.html). It’s worth noting that GuardDuty is not enabled by default and does incur a cost. More details on GuardDuty can be found in Appendix A: Cloud capability definitions - [Visibility and alerting](./visibility-and-alerting.html). - - - - - **Javascript is disabled or is unavailable in your browser.** - -To use the Amazon Web Services Documentation, Javascript must be enabled. Please refer to your browser's Help pages for instructions. - -[Document Conventions](/general/latest/gr/docconventions.html) - -Develop incident response playbooks - -What to include in playbooks - -Did this page help you? - Yes - -Thanks for letting us know we're doing a good job! - -If you've got a moment, please tell us what we did right so we can do more of it. - -Did this page help you? - No - -Thanks for letting us know this page needs work. We're sorry we let you down. - -If you've got a moment, please tell us how we can make the documentation better.