SecurityIncidentResponse / Client / update_case
update_case#
- SecurityIncidentResponse.Client.update_case(**kwargs)#
Grants permission to update an existing case.
See also: AWS API Documentation
Request Syntax
response = client.update_case( caseId='string', title='string', description='string', reportedIncidentStartDate=datetime(2015, 1, 1), actualIncidentStartDate=datetime(2015, 1, 1), engagementType='Security Incident'|'Investigation', watchersToAdd=[ { 'email': 'string', 'name': 'string', 'jobTitle': 'string' }, ], watchersToDelete=[ { 'email': 'string', 'name': 'string', 'jobTitle': 'string' }, ], threatActorIpAddressesToAdd=[ { 'ipAddress': 'string', 'userAgent': 'string' }, ], threatActorIpAddressesToDelete=[ { 'ipAddress': 'string', 'userAgent': 'string' }, ], impactedServicesToAdd=[ 'string', ], impactedServicesToDelete=[ 'string', ], impactedAwsRegionsToAdd=[ { 'region': 'af-south-1'|'ap-east-1'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'ap-south-1'|'ap-south-2'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-southeast-4'|'ap-southeast-5'|'ca-central-1'|'ca-west-1'|'cn-north-1'|'cn-northwest-1'|'eu-central-1'|'eu-central-2'|'eu-north-1'|'eu-south-1'|'eu-south-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'il-central-1'|'me-central-1'|'me-south-1'|'sa-east-1'|'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2' }, ], impactedAwsRegionsToDelete=[ { 'region': 'af-south-1'|'ap-east-1'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'ap-south-1'|'ap-south-2'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-southeast-4'|'ap-southeast-5'|'ca-central-1'|'ca-west-1'|'cn-north-1'|'cn-northwest-1'|'eu-central-1'|'eu-central-2'|'eu-north-1'|'eu-south-1'|'eu-south-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'il-central-1'|'me-central-1'|'me-south-1'|'sa-east-1'|'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2' }, ], impactedAccountsToAdd=[ 'string', ], impactedAccountsToDelete=[ 'string', ] )
- Parameters:
caseId (string) –
[REQUIRED]
Required element for UpdateCase to identify the case ID for updates.
title (string) – Optional element for UpdateCase to provide content for the title field.
description (string) – Optional element for UpdateCase to provide content for the description field.
reportedIncidentStartDate (datetime) – Optional element for UpdateCase to provide content for the customer reported incident start date field.
actualIncidentStartDate (datetime) – Optional element for UpdateCase to provide content for the incident start date field.
engagementType (string) – Optional element for UpdateCase to provide content for the engagement type field.
Available engagement types include Security Incident | Investigation
.watchersToAdd (list) –
Optional element for UpdateCase to provide content to add additional watchers to a case.
(dict) –
email (string) – [REQUIRED]
name (string) –
jobTitle (string) –
watchersToDelete (list) –
Optional element for UpdateCase to provide content to remove existing watchers from a case.
(dict) –
email (string) – [REQUIRED]
name (string) –
jobTitle (string) –
threatActorIpAddressesToAdd (list) –
Optional element for UpdateCase to provide content to add additional suspicious IP addresses related to a case.
(dict) –
ipAddress (string) – [REQUIRED]
userAgent (string) –
threatActorIpAddressesToDelete (list) –
Optional element for UpdateCase to provide content to remove suspicious IP addresses from a case.
(dict) –
ipAddress (string) – [REQUIRED]
userAgent (string) –
impactedServicesToAdd (list) –
Optional element for UpdateCase to provide content to add services impacted.
(string) –
impactedServicesToDelete (list) –
Optional element for UpdateCase to provide content to remove services impacted.
(string) –
impactedAwsRegionsToAdd (list) –
Optional element for UpdateCase to provide content to add regions impacted.
(dict) –
region (string) – [REQUIRED]
impactedAwsRegionsToDelete (list) –
Optional element for UpdateCase to provide content to remove regions impacted.
(dict) –
region (string) – [REQUIRED]
impactedAccountsToAdd (list) –
Optional element for UpdateCase to provide content to add accounts impacted.
(string) –
impactedAccountsToDelete (list) –
Optional element for UpdateCase to provide content to add accounts impacted.
(string) –
- Return type:
dict
- Returns:
Response Syntax
{}
Response Structure
(dict) –
Exceptions
SecurityIncidentResponse.Client.exceptions.ServiceQuotaExceededException
SecurityIncidentResponse.Client.exceptions.AccessDeniedException
SecurityIncidentResponse.Client.exceptions.ValidationException
SecurityIncidentResponse.Client.exceptions.SecurityIncidentResponseNotActiveException
SecurityIncidentResponse.Client.exceptions.InternalServerException
SecurityIncidentResponse.Client.exceptions.ConflictException
SecurityIncidentResponse.Client.exceptions.ResourceNotFoundException
SecurityIncidentResponse.Client.exceptions.ThrottlingException
SecurityIncidentResponse.Client.exceptions.InvalidTokenException