AWS Certified Security Study Guide

Chapter 7Incident Response

THE AWS CERTIFIED SECURITY SPECIALTY EXAM OBJECTIVES THAT LEVERAGE CONCEPTS EXPLAINED IN THIS CHAPTER INCLUDE THE FOLLOWING:

• Domain 1: Incident Response
  • 1.1. Given an AWS abuse notice, evaluate the suspected compromised instance or exposed access keys
  • 1.2. Verify that the Incident Response plan includes relevant AWS services
  • 1.3. Evaluate the configuration of automated alerting, and execute possible remediation of security-related incidents and emerging issues

Introduction

In this chapter, you will learn about incident response best practices and how to identify the resources you will need in your incident response plan.

As you learned in Chapter 1, “Security Fundamentals,” incidents are defined as ...