AWS Launches Incident Response Service

AWS on Sunday announced a new service that provides organizations with quick and effective security incident management capabilities.

The new Security Incident Response, AWS says, relies on automation to triage and analyze security signals from Amazon GuardDuty and integrated third-party detection solutions through the AWS Security Hub cloud security posture management service.

With Security Incident Response, customers receive comprehensive support across the incident response lifecycle, benefiting from communication and coordination, and continuous assistance from the AWS Customer Incident Response Team (CIRT).

“The service is purpose-built to help customers prepare for, respond to, and recover from various security events, including account takeovers, data breaches, and ransomware attacks,” AWS explains.

The new service, AWS says, automatically triages security findings and filters them based on customer-specific information to identify incidents that require immediate attention and deliver critical alerts to security teams.

To simplify incident response, it provides preconfigured notification rules and permission settings ...