SecurityIncidentResponse / Client / update_case

update_case#

SecurityIncidentResponse.Client.update_case(**kwargs)#

Grants permission to update an existing case.

See also: AWS API Documentation

Request Syntax

response = client.update_case(
    caseId='string',
    title='string',
    description='string',
    reportedIncidentStartDate=datetime(2015, 1, 1),
    actualIncidentStartDate=datetime(2015, 1, 1),
    engagementType='Security Incident'|'Investigation',
    watchersToAdd=[
        {
            'email': 'string',
            'name': 'string',
            'jobTitle': 'string'
        },
    ],
    watchersToDelete=[
        {
            'email': 'string',
            'name': 'string',
            'jobTitle': 'string'
        },
    ],
    threatActorIpAddressesToAdd=[
        {
            'ipAddress': 'string',
            'userAgent': 'string'
        },
    ],
    threatActorIpAddressesToDelete=[
        {
            'ipAddress': 'string',
            'userAgent': 'string'
        },
    ],
    impactedServicesToAdd=[
        'string',
    ],
    impactedServicesToDelete=[
        'string',
    ],
    impactedAwsRegionsToAdd=[
        {
            'region': 'af-south-1'|'ap-east-1'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'ap-south-1'|'ap-south-2'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-southeast-4'|'ap-southeast-5'|'ca-central-1'|'ca-west-1'|'cn-north-1'|'cn-northwest-1'|'eu-central-1'|'eu-central-2'|'eu-north-1'|'eu-south-1'|'eu-south-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'il-central-1'|'me-central-1'|'me-south-1'|'sa-east-1'|'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'
        },
    ],
    impactedAwsRegionsToDelete=[
        {
            'region': 'af-south-1'|'ap-east-1'|'ap-northeast-1'|'ap-northeast-2'|'ap-northeast-3'|'ap-south-1'|'ap-south-2'|'ap-southeast-1'|'ap-southeast-2'|'ap-southeast-3'|'ap-southeast-4'|'ap-southeast-5'|'ca-central-1'|'ca-west-1'|'cn-north-1'|'cn-northwest-1'|'eu-central-1'|'eu-central-2'|'eu-north-1'|'eu-south-1'|'eu-south-2'|'eu-west-1'|'eu-west-2'|'eu-west-3'|'il-central-1'|'me-central-1'|'me-south-1'|'sa-east-1'|'us-east-1'|'us-east-2'|'us-west-1'|'us-west-2'
        },
    ],
    impactedAccountsToAdd=[
        'string',
    ],
    impactedAccountsToDelete=[
        'string',
    ]
)
Parameters:
  • caseId (string) –

    [REQUIRED]

    Required element for UpdateCase to identify the case ID for updates.

  • title (string) – Optional element for UpdateCase to provide content for the title field.

  • description (string) – Optional element for UpdateCase to provide content for the description field.

  • reportedIncidentStartDate (datetime) – Optional element for UpdateCase to provide content for the customer reported incident start date field.

  • actualIncidentStartDate (datetime) – Optional element for UpdateCase to provide content for the incident start date field.

  • engagementType (string) – Optional element for UpdateCase to provide content for the engagement type field. Available engagement types include Security Incident | Investigation.

  • watchersToAdd (list) –

    Optional element for UpdateCase to provide content to add additional watchers to a case.

    • (dict) –

      • email (string) – [REQUIRED]

      • name (string) –

      • jobTitle (string) –

  • watchersToDelete (list) –

    Optional element for UpdateCase to provide content to remove existing watchers from a case.

    • (dict) –

      • email (string) – [REQUIRED]

      • name (string) –

      • jobTitle (string) –

  • threatActorIpAddressesToAdd (list) –

    Optional element for UpdateCase to provide content to add additional suspicious IP addresses related to a case.

    • (dict) –

      • ipAddress (string) – [REQUIRED]

      • userAgent (string) –

  • threatActorIpAddressesToDelete (list) –

    Optional element for UpdateCase to provide content to remove suspicious IP addresses from a case.

    • (dict) –

      • ipAddress (string) – [REQUIRED]

      • userAgent (string) –

  • impactedServicesToAdd (list) –

    Optional element for UpdateCase to provide content to add services impacted.

    • (string) –

  • impactedServicesToDelete (list) –

    Optional element for UpdateCase to provide content to remove services impacted.

    • (string) –

  • impactedAwsRegionsToAdd (list) –

    Optional element for UpdateCase to provide content to add regions impacted.

    • (dict) –

      • region (string) – [REQUIRED]

  • impactedAwsRegionsToDelete (list) –

    Optional element for UpdateCase to provide content to remove regions impacted.

    • (dict) –

      • region (string) – [REQUIRED]

  • impactedAccountsToAdd (list) –

    Optional element for UpdateCase to provide content to add accounts impacted.

    • (string) –

  • impactedAccountsToDelete (list) –

    Optional element for UpdateCase to provide content to add accounts impacted.

    • (string) –

Return type:

dict

Returns:

Response Syntax

{}

Response Structure

  • (dict) –

Exceptions