AWS launches an incident response service

The cloud giant has equipped it with a dedicated CSIRT, available around the clock for its subscribed customers.

At the end of November 2024, Amazon Web Services (AWS) unveiled a new service dedicated to responding to IT incidents, called “Security Incident Response”. Its primary goal is to reduce the time it takes for businesses to recover from a cyberattack. The service is supported by the creation of a dedicated CSIRT, available 24/7, to provide assistance to the cloud giant’s clients.

The center also offers “investigation tools” that enable subscribers to handle incidents on their own or seek help from third-party cybersecurity providers. The new service includes an automatic incident sorting tool that identifies the severity level of incidents, ensuring that only the most critical ones are prioritized.

AWS Security Incident Response also features a dashboard accessible to customers and their providers, facilitating information exchange during an incident. Additionally, the service provides access to more detailed data on cyberattacks and their resolutions.

Currently available in a limited number of regions, excluding France, Security Incident Response is expected to gradually roll out to all AWS customers.