---
title: "POST /v1/cases/{caseId}/close-case"
method: POST
path: "/v1/cases/{caseId}/close-case"
---

# POST /v1/cases/{caseId}/close-case

`POST /v1/cases/{caseId}/close-case`

Closes an existing case.

## Path parameters

- `caseId` string, required

## Response `200`

Success

- CloseCaseResponse
  - `caseStatus` 'Submitted' | 'Acknowledged' | 'Detection and Analysis' | 'Containment, Eradication and Recovery' | 'Post-incident Activities' | 'Ready to Close' | 'Closed' — A response element providing responses for requests to CloseCase. This element responds <code>Closed </code> if successful.
  - `closedDate` string, date-time — A response element providing responses for requests to CloseCase. This element responds with the ISO-8601 formatted timestamp of the moment when the case was closed.

## Other responses

- `480` — ServiceQuotaExceededException
- `481` — AccessDeniedException
- `482` — ValidationException
- `483` — SecurityIncidentResponseNotActiveException
- `484` — InternalServerException
- `485` — ThrottlingException
- `486` — ConflictException
- `487` — ResourceNotFoundException
- `488` — InvalidTokenException

---

[API](https://skmtc.net/aws/apis/security-ir.md) · [All operations](https://skmtc.net/aws/apis/security-ir/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/security-ir/versions/e22a88ccce95/schema)