Create a new Security Incident Response membership.

External Documentation

To learn more, visit the AWS documentation.

​
Parameters

ParameterDescription
AWS Region(s)A comma-separated list of AWS region(s) where this action will be executed.

For example, to execute in US East and Europe, enter us-east-1,eu-west-1.

Alternatively, you can use the asterisk symbol * to run the action in all available AWS Regions.
Client TokenA unique identifier (typically a UUID) to ensure request idempotency, preventing duplicate case creation if a request is retried.
Incident Response TeamAn list of Customer Incident Response team members and trusted partners as objects.

For example:
[
{
"name": "Jane Smith",
"email": "jane.smith@example.com",
"jobTitle": "Security Lead"
},
{
"name": "Bob Johnson",
"email": "bob.johnson@example.com",
"jobTitle": "Security Analyst"
}
]

Note: At least 2 members are required and the maximum is 10 members.
Membership NameThe name of the new membership.
Opt In FeaturesAn list of monitoring and investigation features to enable.

Each entry must contain:
* featureName - string
* isEnabled - boolean

For example:
[
{
"featureName": "Triage",
"isEnabled": true
}
]
TagsA list of key-value pairs of tags to apply to the membership.

For example:
{
"Environment": "Production",
"Team": "Security"
}

​
Example Output

{
	"membershipId": "m-a1b2c3d4e5"
}

​
Workflow Library Example

Sir Create Membership with Aws and Send Results Via Email

Preview this Workflow on desktop