New AWS Security Incident Response helps organizations respond to and recover from security events

AWS has launched AWS Security Incident Response, a new service designed to help organizations manage and recover from security events more effectively.

• Automatically triages security findings from GuardDuty and third-party tools
• Provides preconfigured notification rules and permission settings
• Offers 24/7 access to AWS Customer Incident Response Team (CIRT)
• Includes a service dashboard with key performance metrics
• Integrates with AWS Organizations for comprehensive security coverage

The service aims to help organizations respond to security events like account takeovers, data breaches, and ransomware attacks by simplifying incident response and providing automated investigation tools.