aws-samples/aws-incident-response-playbooks resource

Health v2 · maintenance only

Adoption not part of the score

1099 stars · 232 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A collection of sample incident response playbooks for AWS environments, aligned to NIST SP 800-61r3 and CSF 2.0. It provides templates and scenario-specific guides for handling identity, compute, and data security incidents in the cloud.

Use cases

• build incident response capability on aws
• respond to compromised iam credentials
• handle ransomware in aws environment
• create incident response playbooks for cloud
• triage security incident severity
• plan response to ec2 compromise
• prepare for ddos response on aws
• map incident response to nist framework

When to choose

• you run workloads on AWS and need IR documentation
• you want playbooks aligned to NIST SP 800-61r3
• you need templates to customize for your security team

When to avoid

• you need automated incident response tooling rather than documentation
• you are not using AWS
• you need official AWS support or documentation

Facets

learning-resource · maturity active

security documentation security cloud-computing cloud incident-response playbooks aws nist-800-61 cloud-security forensics security-operations devops

Member repositories

For agents

markdown · JSON · MCP: product_card(name="aws-samples/aws-incident-response-playbooks")