A token that ensures that the operation is called only once with the specified details.

A list of tags to add to the replication set.

The Regions that Incident Manager replicates your data to. You can have up to three Regions in your replication set.

The response's http status code.

The Amazon Resource Name (ARN) of the replication set.

The actions that the response plan starts at the beginning of an incident.

The Chatbot chat channel used for collaboration during an incident.

A token ensuring that the operation is called only once with the specified details.

The long format of the response plan name. This field can contain spaces.

The Amazon Resource Name (ARN) for the contacts and escalation plans that the response plan engages during an incident.

Information about third-party services integrated into the response plan.

A list of tags that you are adding to the response plan.

Details used to create an incident when using this response plan.

The short format name of the response plan. Can't include spaces.

The response's http status code.

The Amazon Resource Name (ARN) of the response plan.

A token ensuring that the action is called only once with the specified details.

Adds one or more references to the TimelineEvent. A reference can be an Amazon Web Services resource involved in the incident or in some way associated with it. When you specify a reference, you enter the Amazon Resource Name (ARN) of the resource. You can also specify a related item. As an example, you could specify the ARN of an Amazon DynamoDB (DynamoDB) table. The table for this example is the resource. You could also specify a Amazon CloudWatch metric for that table. The metric is the related item.

A short description of the event.

The time that the event occurred.

The type of the event. You can create timeline events of type Custom Event.

The Amazon Resource Name (ARN) of the incident record to which the event will be added.

The response's http status code.

The ID of the event for easy reference later.

The ARN of the incident record that you added the event to.

The Amazon Resource Name (ARN) of the incident record you are deleting.

The response's http status code.

The Amazon Resource Name (ARN) of the replication set you're deleting.

The response's http status code.

The ID of the resource policy you're deleting.

The Amazon Resource Name (ARN) of the resource you're deleting the policy from.

The response's http status code.

The Amazon Resource Name (ARN) of the response plan.

The response's http status code.

The ID of the event you are updating. You can find this by using ListTimelineEvents.

The Amazon Resource Name (ARN) of the incident that includes the timeline event.

The response's http status code.

The Amazon Resource Name (ARN) of the incident record.

The response's http status code.

Details the structure of the incident record.

The Amazon Resource Name (ARN) of the replication set you want to retrieve.

The response's http status code.

Details of the replication set.

The maximum number of resource policies to display for each page of results.

The pagination token to continue to the next page of results.

The Amazon Resource Name (ARN) of the response plan with the attached resource policy.

The pagination token to continue to the next page of results.

The response's http status code.

Details about the resource policy attached to the response plan.

The Amazon Resource Name (ARN) of the response plan.

The actions that this response plan takes at the beginning of the incident.

The Chatbot chat channel used for collaboration during an incident.

The long format name of the response plan. Can contain spaces.

The Amazon Resource Name (ARN) for the contacts and escalation plans that the response plan engages during an incident.

Information about third-party services integrated into the Incident Manager response plan.

The response's http status code.

The ARN of the response plan.

Details used to create the incident when using this response plan.

The short format name of the response plan. The name can't contain spaces.

The ID of the event. You can get an event's ID when you create it, or by using ListTimelineEvents.

The Amazon Resource Name (ARN) of the incident that includes the timeline event.

The response's http status code.

Details about the timeline event.

Filters the list of incident records through which you are searching. You can filter on the following keys:

• creationTime

• impact

• status

• createdBy

Note the following when deciding how to use Filters:

• If you don't specify a Filter, the response includes all incident records.
• If you specify more than one filter in a single request, the response returns incident records that match all filters.
• If you specify a filter with more than one value, the response returns incident records that match any of the values provided.

The maximum number of results per page.

The pagination token to continue to the next page of results.

The pagination token to continue to the next page of results.

The response's http status code.

The details of each listed incident record.

The maximum number of related items per page.

The pagination token to continue to the next page of results.

The Amazon Resource Name (ARN) of the incident record containing the listed related items.

The pagination token to continue to the next page of results.

The response's http status code.

Details about each related item.

The maximum number of results per page.

The pagination token to continue to the next page of results.

The pagination token to continue to the next page of results.

The response's http status code.

The Amazon Resource Name (ARN) of the list replication set.

The maximum number of response plans per page.

The pagination token to continue to the next page of results.

The pagination token to continue to the next page of results.

The response's http status code.

Details of each response plan.

The Amazon Resource Name (ARN) of the response plan.

The response's http status code.

A list of tags for the response plan.

Filters the timeline events based on the provided conditional values. You can filter timeline events using the following keys:

• eventTime

• eventType

Note the following when deciding how to use Filters:

• If you don't specify a Filter, the response includes all timeline events.
• If you specify more than one filter in a single request, the response returns timeline events that match all filters.
• If you specify a filter with more than one value, the response returns timeline events that match any of the values provided.

The maximum number of results per page.

The pagination token to continue to the next page of results.

Sort by the specified key value pair.

Sorts the order of timeline events by the value specified in the sortBy field.

The Amazon Resource Name (ARN) of the incident that includes the timeline event.

The pagination token to continue to the next page of results.

The response's http status code.

Details about each event that occurred during the incident.

Details of the resource policy.

The Amazon Resource Name (ARN) of the response plan to add the resource policy to.

The response's http status code.

The ID of the resource policy.

A token ensuring that the operation is called only once with the specified details.

Defines the impact to the customers. Providing an impact overwrites the impact provided by a response plan.

Possible impacts:

• 1 - Critical impact, this typically relates to full application failure that impacts many to all customers.
• 2 - High impact, partial application failure with impact to many customers.
• 3 - Medium impact, the application is providing reduced service to customers.
• 4 - Low impact, customer might aren't impacted by the problem yet.
• 5 - No impact, customers aren't currently impacted but urgent action is needed to avoid impact.

Add related items to the incident for other responders to use. Related items are AWS resources, external links, or files uploaded to an Amazon S3 bucket.

Provide a title for the incident. Providing a title overwrites the title provided by the response plan.

Details of what created the incident record in Incident Manager.

The Amazon Resource Name (ARN) of the response plan that pre-defines summary, chat channels, Amazon SNS topics, runbooks, title, and impact of the incident.

The response's http status code.

The ARN of the newly created incident record.

The Amazon Resource Name (ARN) of the response plan you're adding the tags to.

A list of tags to add to the response plan.

The response's http status code.

The Amazon Resource Name (ARN) of the response plan you're removing a tag from.

The name of the tag to remove from the response plan.

The response's http status code.

A token that ensures that the operation is called only once with the specified details.

The Amazon Resource Name (ARN) of the replication set to update.

Specifies if deletion protection is turned on or off in your account.

The response's http status code.

The Chatbot chat channel where responders can collaborate.

A token that ensures that the operation is called only once with the specified details.

Defines the impact of the incident to customers and applications. Providing an impact overwrites the impact provided by the response plan.

Possible impacts:

• 1 - Critical impact, full application failure that impacts many to all customers.
• 2 - High impact, partial application failure with impact to many customers.
• 3 - Medium impact, the application is providing reduced service to customers.
• 4 - Low impact, customer aren't impacted by the problem yet.
• 5 - No impact, customers aren't currently impacted but urgent action is needed to avoid impact.

The Amazon SNS targets that are notified when updates are made to an incident.

Using multiple SNS topics creates redundancy in the event that a Region is down during the incident.

The status of the incident. An incident can be Open or Resolved.

A longer description of what occurred during the incident.

A brief description of the incident.

The Amazon Resource Name (ARN) of the incident record you are updating.

The response's http status code.

A token ensuring that the operation is called only once with the specified details.

The Amazon Resource Name (ARN) of the incident record containing the related items you are updating.

Details about the item you are adding or deleting.

The response's http status code.

A token that ensures that the operation is called only once with the specified details.

An action to add or delete a Region.

The Amazon Resource Name (ARN) of the replication set you're updating.

The response's http status code.

The actions that this response plan takes at the beginning of an incident.

The Chatbot chat channel used for collaboration during an incident.

Use the empty structure to remove the chat channel from the response plan.

A token ensuring that the operation is called only once with the specified details.

The long format name of the response plan. The display name can't contain spaces.

The Amazon Resource Name (ARN) for the contacts and escalation plans that the response plan engages during an incident.

The string Incident Manager uses to prevent duplicate incidents from being created by the same incident in the same account.

Defines the impact to the customers. Providing an impact overwrites the impact provided by a response plan.

Possible impacts:

• 5 - Severe impact
• 4 - High impact
• 3 - Medium impact
• 2 - Low impact
• 1 - No impact

The Amazon SNS targets that are notified when updates are made to an incident.

A brief summary of the incident. This typically contains what has happened, what's currently happening, and next steps.

Tags to assign to the template. When the StartIncident API action is called, Incident Manager assigns the tags specified in the template to the incident. To call this action, you must also have permission to call the TagResource API action for the incident record resource.

The short format name of the incident. The title can't contain spaces.

Information about third-party services integrated into the response plan.

The Amazon Resource Name (ARN) of the response plan.

The response's http status code.

A token ensuring that the operation is called only once with the specified details.

A short description of the event.

Updates all existing references in a TimelineEvent. A reference can be an Amazon Web Services resource involved in the incident or in some way associated with it. When you specify a reference, you enter the Amazon Resource Name (ARN) of the resource. You can also specify a related item. As an example, you could specify the ARN of an Amazon DynamoDB (DynamoDB) table. The table for this example is the resource. You could also specify a Amazon CloudWatch metric for that table. The metric is the related item.

This update action overrides all existing references. If you want to keep existing references, you must specify them in the call. If you don't, this action removes them and enters only new references.

The time that the event occurred.

The type of the event. You can update events of type Custom Event.

The ID of the event you are updating. You can find this by using ListTimelineEvents.

The Amazon Resource Name (ARN) of the incident that includes the timeline event.

The response's http status code.

The Systems Manager automation document to start as the runbook at the beginning of the incident.

The KMS key ID to use to encrypt your replication set.

The Amazon Web Services Region name to add to the replication set.

The list of integer values that the filter matches.

The list of string values that the filter matches.

The Amazon Resource Name (ARN) of the automation process.

The Amazon SNS targets that Chatbot uses to notify the chat channel of updates to an incident. You can also make updates to the incident through the chat channel by using the Amazon SNS topics.

Used to remove the chat channel from an incident record or response plan.

After the specified timestamp.

Before the specified timestamp

The value is equal to the provided string or integer.

The name of the Amazon Web Services Region you're deleting from the replication set.

Variable dynamic parameters. A parameter value is determined when an incident is created.

The ID of a RelatedItem referenced in a TimelineEvent.

The Amazon Resource Name (ARN) of an Amazon Web Services resource referenced in a TimelineEvent.

A list of references in a TimelineEvent.

The timeline event ID.

The time that the event occurred.

The type of event. The timeline event must be Custom Event.

The time that the timeline event was last updated.

The Amazon Resource Name (ARN) of the incident that the event happened during.

The condition accepts before or after a specified time, equal to a string, or equal to an integer.

The key that you're filtering on.

The runbook, or automation document, that's run at the beginning of the incident.

The chat channel used for collaboration during an incident.

The Amazon SNS targets that are notified when updates are made to an incident.

The time at which the incident was resolved. This appears as a timeline event.

The summary of the incident. The summary is a brief synopsis of what occurred, what's currently happening, and context of the incident.

The Amazon Resource Name (ARN) of the incident record.

The time that Incident Manager created the incident record.

The string Incident Manager uses to prevent duplicate incidents from being created by the same incident in the same account.

The impact of the incident on customers and applications.

Details about the action that started the incident.

Who modified the incident most recently.

The time at which the incident was most recently modified.

The current status of the incident.

The title of the incident.

The service principal that assumed the role specified in createdBy. If no service principal assumed the role this will be left blank.

The resource that caused the incident to be created.

The principal that started the incident.

The service that started the incident. This can be manually created from Incident Manager, automatically created using an Amazon CloudWatch alarm, or Amazon EventBridge event.

The time the incident was resolved.

The Amazon Resource Name (ARN) of the incident.

The time the incident was created.

Defines the impact to customers and applications.

What caused Incident Manager to create the incident.

The current status of the incident.

The title of the incident. This value is either provided by the response plan or overwritten on creation.

Used to stop Incident Manager from creating multiple incident records for the same incident.

Tags to assign to the template. When the StartIncident API action is called, Incident Manager assigns the tags specified in the template to the incident.

The Amazon SNS targets that are notified when updates are made to an incident.

The summary of the incident. The summary is a brief synopsis of what occurred, what's currently happening, and context.

The impact of the incident on your customers and applications.

The title of the incident.

Information about the PagerDuty service where the response plan creates an incident.

The type of related item.

Details about the related item.

The Amazon Resource Name (ARN) of the related item, if the related item is an Amazon resource.

The metric definition, if the related item is a metric in Amazon CloudWatch.

Details about an incident that is associated with a PagerDuty incident.

The URL, if the related item is a non-Amazon Web Services resource.

The Amazon Resource Name (ARN) of the SNS topic.

The name of the PagerDuty configuration.

Details about the PagerDuty service associated with the configuration.

The ID of the Amazon Web Services Secrets Manager secret that stores your PagerDuty key, either a General Access REST API Key or User Token REST API Key, and other user credentials.

The ID of the PagerDuty service that the response plan associates with an incident when it launches.

Indicates whether to resolve the PagerDuty incident when you resolve the associated Incident Manager incident.

The ID of the Amazon Web Services Secrets Manager secret that stores your PagerDuty key, either a General Access REST API Key or User Token REST API Key, and other user credentials.

The ID of the incident associated with the PagerDuty service for the response plan.

The ID of the KMS key used to encrypt the data in this Amazon Web Services Region.

Information displayed about the status of the Amazon Web Services Region.

The status of the Amazon Web Services Region in the replication set.

The most recent date and time that Incident Manager updated the Amazon Web Services Region's status.

The KMS key used to encrypt the data in your replication set.

A unique ID for a RelatedItem.

Don't specify this parameter when you add a RelatedItem by using the UpdateRelatedItems API action.

The title of the related item.

Details about the related item.

Details about the related item you're adding.

Details about the related item you're deleting.

The Amazon Resource Name (ARN) of the replication set.

Details about who created the replication set.

When the replication set was created.

Determines if the replication set deletion protection is enabled or not. If deletion protection is enabled, you can't delete the last Amazon Web Services Region in the replication set.

Who last modified the replication set.

When the replication set was last updated.

The map between each Amazon Web Services Region in your replication set and the KMS key that's used to encrypt the data in that Region.

The status of the replication set. If the replication set is still pending, you can't use Incident Manager functionality.

The JSON blob that describes the policy.

The ID of the resource policy.

The Amazon Web Services Region that policy allows resources to be used in.

The human readable name of the response plan. This can include spaces.

The Amazon Resource Name (ARN) of the response plan.

The name of the response plan. This can't include spaces.

The automation document's version to use when running.

The key-value pair to resolve dynamic parameter values when processing a Systems Manager Automation runbook.

The key-value pair parameters to use when running the automation document.

The account that the automation document will be run in. This can be in either the management account or an application account.

The automation document's name.

The Amazon Resource Name (ARN) of the role that the automation document will assume when running commands.

A list of references in a TimelineEvent.

A short description of the event.

The ID of the timeline event.

The time that the event occurred.

The type of event that occurred. Currently Incident Manager supports only the Custom Event type.

The time that the timeline event was last updated.

The Amazon Resource Name (ARN) of the incident that the event occurred during.

Raw data passed from either Amazon EventBridge, Amazon CloudWatch, or Incident Manager when an incident is created.

The Amazon Resource Name (ARN) of the source that detected the incident.

Identifies the service that sourced the event. All events sourced from within Amazon Web Services begin with "aws." Customer-generated events can have any value here, as long as it doesn't begin with "aws." We recommend the use of Java package-name style reverse domain-name strings.

The time that the incident was detected.

Details about the Amazon Web Services Region that you're adding to the replication set.

Details about the Amazon Web Services Region that you're deleting to the replication set.