updateCase
inline suspend fun SecurityIrClient.updateCase(crossinline block: UpdateCaseRequest.Builder.() -> Unit): UpdateCaseResponse
Grants permission to update an existing case.
Samples
import aws.sdk.kotlin.services.securityir.model.AwsRegion
import aws.sdk.kotlin.services.securityir.model.EngagementType
import aws.sdk.kotlin.services.securityir.model.ImpactedAwsRegion
import aws.sdk.kotlin.services.securityir.model.ThreatActorIp
import aws.sdk.kotlin.services.securityir.model.Watcher
fun main() {
//sampleStart
// Invoke UpdateCase
val resp = securityIrClient.updateCase {
caseId = "8403556009"
title = "My sample case"
description = "Case description"
reportedIncidentStartDate = "2023-03-27T15:32:01.789Z"
actualIncidentStartDate = "2023-03-25T15:32:01.789Z"
engagementType = EngagementType.fromValue("Investigation")
watchersToAdd = listOf<Watcher>(
Watcher {
email = "Sam@example.com"
name = "Same"
jobTitle = "CEO"
}
)
watchersToDelete = listOf<Watcher>(
Watcher {
email = "bob@example.com"
name = "Bob"
jobTitle = "CFO"
}
)
threatActorIpAddressesToAdd = listOf<ThreatActorIp>(
ThreatActorIp {
ipAddress = "190.160.190.160"
userAgent = "Browser"
}
)
threatActorIpAddressesToDelete = listOf<ThreatActorIp>(
ThreatActorIp {
ipAddress = "192.168.192.168"
userAgent = "Browser"
}
)
impactedServicesToAdd = listOf<String>(
"Amazon EC2"
)
impactedServicesToDelete = listOf<String>(
"Amazon EKS"
)
impactedAwsRegionsToAdd = listOf<ImpactedAwsRegion>(
ImpactedAwsRegion {
region = AwsRegion.fromValue("ap-southeast-1")
}
)
impactedAwsRegionsToDelete = listOf<ImpactedAwsRegion>(
ImpactedAwsRegion {
region = AwsRegion.fromValue("us-east-1")
}
)
impactedAccountsToAdd = listOf<String>(
"000000000000"
)
impactedAccountsToDelete = listOf<String>(
"111111111111"
)
}
//sampleEnd
}