Note: You are viewing the documentation for an older major version of the AWS CLI (version 1).

AWS CLI version 2, the latest major version of AWS CLI, is now stable and recommended for general use. To view this page for the AWS CLI version 2, click here. For more information see the AWS CLI version 2 installation instructions and migration guide.

[ aws . ssm-incidents ]



Returns the details for the specified incident record.

See also: AWS API Documentation

See 'aws help' for descriptions of global parameters.


--arn <value>
[--cli-input-json <value>]
[--generate-cli-skeleton <value>]


--arn (string)

The Amazon Resource Name (ARN) of the incident record.

--cli-input-json (string) Performs service operation based on the JSON string provided. The JSON string follows the format provided by --generate-cli-skeleton. If other arguments are provided on the command line, the CLI values will override the JSON-provided values. It is not possible to pass arbitrary binary values using a JSON-provided value as the string will be taken literally.

--generate-cli-skeleton (string) Prints a JSON skeleton to standard output without sending an API request. If provided with no value or the value input, prints a sample input JSON that can be used as an argument for --cli-input-json. If provided with the value output, it validates the command inputs and returns a sample output JSON for that command.

See 'aws help' for descriptions of global parameters.


To get an incident record

The following get-incident-record example gets details about the specified incident record.

aws ssm-incidents get-incident-record \
    --arn "arn:aws:ssm-incidents::111122223333:incident-record/Example-Response-Plan/6ebcc812-85f5-b7eb-8b2f-283e4d844308"


    "incidentRecord": {
        "arn": "arn:aws:ssm-incidents::111122223333:incident-record/Example-Response-Plan/6ebcc812-85f5-b7eb-8b2f-283e4d844308",
        "automationExecutions": [],
        "creationTime": "2021-05-21T18:16:57.579000+00:00",
        "dedupeString": "c4bcc812-85e7-938d-2b78-17181176ee1a",
        "impact": 5,
        "incidentRecordSource": {
            "createdBy": "arn:aws:iam::111122223333:user/draliatp",
            "invokedBy": "arn:aws:iam::111122223333:user/draliatp",
            "source": "aws.ssm-incidents.custom"
        "lastModifiedBy": "arn:aws:iam::111122223333:user/draliatp",
        "lastModifiedTime": "2021-05-21T18:16:59.149000+00:00",
        "notificationTargets": [],
        "status": "OPEN",
        "title": "Example-Incident"

For more information, see Incident details in the Incident Manager User Guide.


incidentRecord -> (structure)

Details the structure of the incident record.

arn -> (string)

The Amazon Resource Name (ARN) of the incident record.

automationExecutions -> (list)

The runbook, or automation document, that's run at the beginning of the incident.


The Systems Manager automation document process to start as the runbook at the beginning of the incident.

ssmExecutionArn -> (string)

The Amazon Resource Name (ARN) of the automation process.

chatChannel -> (structure)

The chat channel used for collaboration during an incident.

chatbotSns -> (list)

The Amazon SNS targets that Chatbot uses to notify the chat channel of updates to an incident. You can also make updates to the incident through the chat channel by using the Amazon SNS topics.


empty -> (structure)

Used to remove the chat channel from an incident record or response plan.

creationTime -> (timestamp)

The time that Incident Manager created the incident record.

dedupeString -> (string)

The string Incident Manager uses to prevent duplicate incidents from being created by the same incident in the same account.

impact -> (integer)

The impact of the incident on customers and applications.

incidentRecordSource -> (structure)

Details about the action that started the incident.

createdBy -> (string)

The principal that started the incident.

invokedBy -> (string)

The service principal that assumed the role specified in createdBy . If no service principal assumed the role this will be left blank.

resourceArn -> (string)

The resource that caused the incident to be created.

source -> (string)

The service that started the incident. This can be manually created from Incident Manager, automatically created using an Amazon CloudWatch alarm, or Amazon EventBridge event.

lastModifiedBy -> (string)

Who modified the incident most recently.

lastModifiedTime -> (timestamp)

The time at which the incident was most recently modified.

notificationTargets -> (list)

The Amazon SNS targets that are notified when updates are made to an incident.


The SNS targets that are notified when updates are made to an incident.

snsTopicArn -> (string)

The Amazon Resource Name (ARN) of the SNS topic.

resolvedTime -> (timestamp)

The time at which the incident was resolved. This appears as a timeline event.

status -> (string)

The current status of the incident.

summary -> (string)

The summary of the incident. The summary is a brief synopsis of what occurred, what's currently happening, and context of the incident.

title -> (string)

The title of the incident.