AWS Launches New Incident Response Service

AWS announced a new Security Incident Response service that uses machine learning to triage and analyze security findings from GuardDuty and integrated third-party tools via Security Hub, enabling automated containment, case management, and 24/7 escalation to CIRT. The service provides investigation tools, secure data sharing, stakeholder communications, and performance dashboards (e.g., MTTR), and is available across 12 AWS Regions. Organizations can enable it through the AWS console/APIs and are encouraged to activate GuardDuty and Security Hub for full functionality.