v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-1424171133.3 KB

Returns the attributes of a case.

get/v1/cases/{caseId}/get-case

Path parameters

caseIdstring required

Required element for GetCase to identify the requested case ID.

Response

Success

titlestring password

Response element for GetCase that provides the case title.

caseArnstring

Response element for GetCase that provides the case ARN

descriptionstring password

Response element for GetCase that provides contents of the case description.

caseStatus'Submitted' | 'Acknowledged' | 'Detection and Analysis' | 'Containment, Eradication and Recovery' | 'Post-incident Activities' | 'Ready to Close' | 'Closed'

Response element for GetCase that provides the case status. Options for statuses include <code>Submitted | Detection and Analysis | Eradication, Containment and Recovery | Post-Incident Activities | Closed </code>

engagementType'Security Incident' | 'Investigation'

Response element for GetCase that provides the engagement type. Options for engagement type include <code>Active Security Event | Investigations</code>

reportedIncidentStartDatestring date-time

Response element for GetCase that provides the customer provided incident start date.

actualIncidentStartDatestring date-time

Response element for GetCase that provides the actual incident start date as identified by data analysis during the investigation.

pendingAction'Customer' | 'None'

Response element for GetCase that identifies the case is waiting on customer input.

impactedAccountsAWSAccountId[]

Response element for GetCase that provides a list of impacted accounts.

createdDatestring date-time

Response element for GetCase that provides the date the case was created.

lastUpdatedDatestring date-time

Response element for GetCase that provides the date a case was last modified.

closureCode'Investigation Completed' | 'Not Resolved' | 'False Positive' | 'Duplicate'

Response element for GetCase that provides the summary code for why a case was closed.

resolverType'AWS' | 'Self'

Response element for GetCase that provides the current resolver types.

impactedServicesAwsService[]

Response element for GetCase that provides a list of impacted services.

closedDatestring date-time

Response element for GetCase that provides the date a specified case was closed.