AWS is launching a new response service to help customers respond more quickly to security incidents.

The impact of cyberattacks is increasing. In order to nip cyber attacks in the bud, quick and adequate action is necessary, but a lack of resources and/or people often prevents this. In this context, AWS announces a new security incident response service within its cloud.

From detection to recovery

Security Incident Response automates the processing of security alerts from Amazon GuardDuty and external threat detection tools through AWS Security Hub. The service identifies priority alerts and provides 24/7 access to AWS experts to support customers through all phases of the response, from detection to recovery.

The service also includes automated case history, reporting and collaboration tools. This allows companies to respond faster and focus on recovery activities. Customers can set permissions to coordinate incidents with internal and external stakeholders. The service offers three main features:

• Automatic triage of security notifications: Security Incident Response filters and suppresses alerts based on customer information, allowing security teams to focus on critical alerts.
• Easy incident response: Customers can use a central console with integrated features such as messaging and video conferencing. Preset notifications and permissions simplify coordination.
• Access to self-service tools and 24/7 support: Customers receive tools for investigations and can handle incidents independently or with external partners.

AWS provides the Response service across 12 cloud regions, including four in Europe (Frankfurt, London, Stockholm, Ireland). This week, the cloud giant is hosting its annual high-mass Re:Invent in Las Vegas.