# Incident management examples


Incident management examples.

**Topics**
+ [

## Incident testing
](#incident-testing)
+ [

# Reporting incidents
](gui-ex-report-incident.md)
+ [

# Monitoring and updating incidents
](mon-update-incident-console.md)
+ [

# Managing incidents with the AWS Support API
](report-manage-incidents-api.md)
+ [

# Responding to AMS-generated incidents
](respond-to-sent-generated-incident.md)

The following examples describe using the AMS console to submit an incident. Once submitted, the AMS team works with you to resolve the incident per your Service Level Agreement (SLA).

## Incident testing


When testing AMS incident submissions, we ask that you include in the subject text this flag: **AMSTestNoOpsActionRequired**. This flag lets AMS know that the incident submission is only for testing. When AMS operations engineers see that flag, they will not respond in any way to the incident submission.

# Reporting incidents


Use the AMS console to report an incident. It's important to create a new incident for each new issue or question. When opening cases related to old inquiries, it's helpful to include the related case number so we can refer to previous correspondence.
**Note**  
If case correspondence strays from the original issue, an AMS operator might ask you to report a new incident.

To report an incident using the AMS console:

1. From the left navigation, choose **Incidents**

   The **Incidents** list opens:  
![\[Incidents page with options to create an incident and view open incidents.\]](http://docs.aws.amazon.com/managedservices/latest/userguide/images/guiIncidentlistOpenPnC.png)

   If your incident list is empty, the **Clear filter** option resets the filter to **Any status**.

   If you know you want to use phone or chat, click **Create incident in Support Center** to open the incident **Create** page in the Support Center Console, auto-populated with the AMS service type.
**Important**  
Phone calls initiated with Support are recorded, to better improve response. If the call drops, you must call back through the Support Center case, AWS has no mechanism for calling you back. 
Phone and chat support is designed to help with support cases, incidents. and service requests, not RFC or security issues.
For RFC issues, use the correspondence option on the relevant RFC details page, to reach an AMS engineer.
For security issues, create a high-priority (P1 or P2) support case. The live chat feature is not for security events.  
![\[Incidents page showing a list of resolved incidents with their creation dates, subjects, and IDs.\]](http://docs.aws.amazon.com/managedservices/latest/userguide/images/guiIncidentList2.png)

1. If you want to find an existing incident, select an incident status filter in the drop-down list.    
<a name="sr-filter-options"></a>[\[See the AWS documentation website for more details\]](http://docs.aws.amazon.com/managedservices/latest/userguide/gui-ex-report-incident.html)

1. Choose **Create**.

   The **Create an incident** page opens:  
![\[Incident details form with priority options, access issues dropdown, and input fields for subject and details.\]](http://docs.aws.amazon.com/managedservices/latest/userguide/images/guiIncidentCreate5.png)

1. Select a **Priority**:
   + **Low**: Non-critical functions of your business service or application related to AWS/AMS resources are impacted.
   + **Medium**: A business service or application related to AWS/AMS resources is moderately impacted and functioning in a degraded state.
   + **High**: Your business is significantly impacted. Critical functions of your application related to AWS/AMS resources are unavailable. Reserved for the most critical outages affecting production systems.

1. Select a **Category**.
**Note**  
If you are going to test incident functionality, then add the no-action flag (AMSTestNoOpsActionRequired) to your incident title.

1. Enter information for:
   + **Subject**: A descriptive title for the incident report.
   + **CC emails**: A list of email addresses for people you want informed about the incident report and resolution.
   + **Details**: A comprehensive description of the incident, the systems impacted, and the expected outcome of the resolution. Answer the pre-set questions, or delete them and enter any relevant information.

   To add an attachment, choose **Add Attachment**, browse to the attachment you want, and click **Open**. To delete the attachment, click the Delete icon: ![\[Blue circular icon with a white X symbol in the center.\]](http://docs.aws.amazon.com/managedservices/latest/userguide/images/icon-delete-attachment.png).

1. Choose **Submit**.

   A details page opens with information on the incident—such as **Type**, **Subject**, **Created**, **ID**, and **Status**—and a **Correspondence** area that includes the description of the request you created.

   Click **Reply** to open a correspondence area and provide additional details or updates in status.

   Click **Close Case** when the incident has been resolved.

   Click **Load More** if there is more correspondence than will fit on one page.

   Don't forget to rate the communication\$1  
![\[Correspondence section showing a test message from Amazon Web Services with rating stars.\]](http://docs.aws.amazon.com/managedservices/latest/userguide/images/guiSRcorrespond.png)

   Your incident displays on the **Incidents** list page.

**YouTube Video**: [ How do I raise an incident from the AWS Managed Services console?](https://www.youtube.com/watch?v=A51d8Qm_MvA&list=PLhr1KZpdzukc_VXASRqOUSM5AJgtHat6-&index=6&t=46s)

# Monitoring and updating incidents


You can update, monitor, and review incident reports and service requests, both called cases, by using the AMS console, or programmatically using the Support API. For information on using the Support API, see [https://docs.aws.amazon.com/awssupport/latest/APIReference/API_DescribeCases.html](https://docs.aws.amazon.com/awssupport/latest/APIReference/API_DescribeCases.html) operation.

To monitor a case, incident or service request, using the AMS console, follow these steps.

1. In the AMS console **Incident reports** or **Service requests** dashboard, browse to a case and choose the **Subject** to open a details page with current status and correspondences.  
![\[Incident detail card showing type, status, subject, ID, creation date, and priority.\]](http://docs.aws.amazon.com/managedservices/latest/userguide/images/guiIncidentDetail.png)  
![\[Service request detail showing type, subject, creation date, ID, and resolved status.\]](http://docs.aws.amazon.com/managedservices/latest/userguide/images/guiSRdetail.png)

   When a reported incident or service request case is updated by the AMS operations team, you receive an email and a link to the incident in the AMS console so you can respond. You can't respond to incident correspondence by replying to the email.
**Important**  
You must have entered an email address to receive notifications of state change for a service request or incident case. Notifications only go to the email address added to the case when it's created.  
The link in the notification email will not work unless you are using an email server on your AMS federated network. However, you can respond to the correspondence by going to your AMS console and using the case details page.

1.  If there are many cases in the list, you can use the **Filter** option:
   + **All open** (default): Use this filter to see all cases that have not been resolved.
   + **Unassigned**: Use if you've just submitted the case and have not received any notice that the case state has changed. Note, incidents and service request cases are addressed with different promptness depending on the submitted priority (incidents) or your service level agreement (service requests).
   + **Open**: Use if you have received notice that the case is "Pending Amazon" action; this means that the case has been assigned but work has not yet begun.
   + **Reopened**: Use if you have received notice that the case was reopened after having been resolved.
   + **Work in progress**: Use if you have received notice that an operator has begun to work on the case.
   + **Pending customer action**: Use if you have received an operator request for action on your part.
   + **Customer action completed**: Use if you have received notice that your action on the case has been processed.
   + **Resolved**: Use to view cases that you know have been resolved. Resolved cases are maintained in history for twelve months.
   + **Any status**: Use this filter to see all cases, regardless of status.

1. To check the latest status, refresh the page.

1. If there are so many correspondences that they do not all appear on the page, choose **Load More**.

1. To provide an update to the case status, choose **Reply**, enter the new correspondence, and then choose **Submit**.

1. To close out the case after it has been resolved to your satisfaction, choose **Close case**.

   Be sure to rate the service through the 1-5 star rating to let AMS know how we're doing\$1

# Managing incidents with the AWS Support API


The [AWS Support API](https://docs.aws.amazon.com/awssupport/latest/user/Welcome.html) enables you to create incidents and add correspondence to them throughout investigations of your issues and interactions with AWS Support staff. The AWS Support API models much of the behavior of the [ AWS Support Center](https://console.aws.amazon.com/support/home#/). For more details about how you can use this AWS support service, see [ Programming an AWS Support Case](https://docs.aws.amazon.com/awssupport/latest/user/Case_Life_Cycle.html#crebopbatecase).

**Note**  
When using the AWS Support API, or SAPI, for AMS Advanced incidents, use this service code: `sentinel-report-incident`.

# Responding to AMS-generated incidents


AMS proactively monitors your resources; for more information, see [Monitoring and event management](https://docs.aws.amazon.com/managedservices/latest/userguide/monitoring.html). Sometimes AMS identifies and creates an incident case, most often to notify you of an incident. In the event that action is required on your part to resolve an incident, AMS sends a notification to the contact information you have provided for the account. You respond to this incident in the same way as you would any other incident. You would usually respond to incidents via the AMS console; in some cases, contact by email or phone is required.

**Note**  
AMS sends communications to your primary email address on your AWS account; we recommend adding an alternate Operations contact email alias to facilitate the incident management process. This is covered during the AMS onboarding process and related onboarding documentation. If you have provided AMS with non-resource based contacts (that you informed your CSDM of) during onboarding, those contact are used. For example, you could provide a list of contacts named "SecurityContacts" to your CSDMs/CAs to use for security-related incidents or notifications. Contact tags on your instances/resources are used for AMS-generated incidents, if you have provided your consent to CSDM for using tag information.   
To learn more about this notification service, see [Notifications](https://docs.aws.amazon.com/managedservices/latest/userguide/notifications.html).