update_case_status
¶
update_case_status(
case_id: CaseId,
case_status: SelfManagedCaseStatus,
*,
config_overrides: Optional[SecurityIRClientConfig] = None,
) -> UpdateCaseStatusResponse
Updates the state transitions for a designated cases.
Self-managed: the following states are available for self-managed cases.
-
Submitted → Detection and Analysis
-
Detection and Analysis → Containment, Eradication, and Recovery
-
Detection and Analysis → Post-incident Activities
-
Containment, Eradication, and Recovery → Detection and Analysis
-
Containment, Eradication, and Recovery → Post-incident Activities
-
Post-incident Activities → Containment, Eradication, and Recovery
-
Post-incident Activities → Detection and Analysis
-
Any → Closed
AWS supported: You must use the CloseCase API to close.
Parameters:
-
case_id(CaseId) –Required element for UpdateCaseStatus to identify the case to update.
-
case_status(SelfManagedCaseStatus) –Required element for UpdateCaseStatus to identify the status for a case. Options include
Submitted | Detection and Analysis | Containment, Eradication and Recovery | Post-incident Activities.
Raises:
-
AccessDeniedException– -
ConflictException– -
InternalServerException– -
InvalidTokenException– -
ResourceNotFoundException– -
SecurityIncidentResponseNotActiveException– -
ServiceQuotaExceededException– -
ThrottlingException– -
ValidationException– -
UnknownServiceError–The service returned an error code this client does not model.
Examples:
Invoke UpdateCaseStatus