StartIncident - AWS Systems Manager Incident Manager


Used to start an incident from CloudWatch alarms, EventBridge events, or manually.

Request Syntax

POST /startIncident HTTP/1.1 Content-type: application/json { "clientToken": "string", "impact": number, "relatedItems": [ { "identifier": { "type": "string", "value": { "arn": "string", "metricDefinition": "string", "url": "string" } }, "title": "string" } ], "responsePlanArn": "string", "title": "string", "triggerDetails": { "rawData": "string", "source": "string", "timestamp": number, "triggerArn": "string" } }

URI Request Parameters

The request does not use any URI parameters.

Request Body

The request accepts the following data in JSON format.


A token ensuring that the operation is called only once with the specified details.

Type: String

Length Constraints: Minimum length of 0. Maximum length of 128.

Required: No


Defines the impact to the customers. Providing an impact overwrites the impact provided by a response plan.

Possible impacts:

  • 1 - Critical impact, this typically relates to full application failure that impacts many to all customers.

  • 2 - High impact, partial application failure with impact to many customers.

  • 3 - Medium impact, the application is providing reduced service to customers.

  • 4 - Low impact, customer might aren't impacted by the problem yet.

  • 5 - No impact, customers aren't currently impacted but urgent action is needed to avoid impact.

Type: Integer

Valid Range: Minimum value of 1. Maximum value of 5.

Required: No


Add related items to the incident for other responders to use. Related items are AWS resources, external links, or files uploaded to an Amazon S3 bucket.

Type: Array of RelatedItem objects

Array Members: Minimum number of 0 items. Maximum number of 100 items.

Required: No


The Amazon Resource Name (ARN) of the response plan that pre-defines summary, chat channels, Amazon SNS topics, runbooks, title, and impact of the incident.

Type: String

Length Constraints: Minimum length of 0. Maximum length of 1000.

Pattern: ^arn:aws(-cn|-us-gov)?:[a-z0-9-]*:[a-z0-9-]*:([0-9]{12})?:.+$

Required: Yes


Provide a title for the incident. Providing a title overwrites the title provided by the response plan.

Type: String

Length Constraints: Minimum length of 0. Maximum length of 200.

Required: No


Details of what created the incident record in Incident Manager.

Type: TriggerDetails object

Required: No

Response Syntax

HTTP/1.1 200 Content-type: application/json { "incidentRecordArn": "string" }

Response Elements

If the action is successful, the service sends back an HTTP 200 response.

The following data is returned in JSON format by the service.


The ARN of the newly created incident record.

Type: String

Length Constraints: Minimum length of 0. Maximum length of 1000.

Pattern: ^arn:aws(-cn|-us-gov)?:[a-z0-9-]*:[a-z0-9-]*:([0-9]{12})?:.+$


For information about the errors that are common to all actions, see Common Errors.


You don't have sufficient access to perform this operation.

HTTP Status Code: 403


Updating or deleting a resource causes an inconsistent state.

HTTP Status Code: 409


The request processing has failed because of an unknown error, exception or failure.

HTTP Status Code: 500


Request references a resource which doesn't exist.

HTTP Status Code: 404


The request was denied due to request throttling.

HTTP Status Code: 429


The input fails to satisfy the constraints specified by an AWS service.

HTTP Status Code: 400



This example illustrates one usage of StartIncident.

Sample Request

POST /startIncident HTTP/1.1 Host: Accept-Encoding: identity User-Agent: aws-cli/2.2.4 Python/3.8.8 Linux/5.4.129-72.229.amzn2int.x86_64 exe/x86_64.amzn.2 prompt/off command/ssm-incidents.start-incident X-Amz-Date: 20210811T181411Z Authorization: AWS4-HMAC-SHA256 Credential=AKIAIOSFODNN7EXAMPLE/20210811/us-east-1/ssm-incidents/aws4_request, SignedHeaders=host;x-amz-date, Signature=AKIAIOSFODNN7EXAMPLE Content-Length: 144 { "responsePlanArn": "arn:aws:ssm-incidents::111122223333:response-plan/example-response", "clientToken": "aa1b2cde-27e3-42ff-9cac-99380EXAMPLE" }

Sample Response

{ "incidentRecordArn": "arn:aws:ssm-incidents::111122223333:incident-record/example-response/1abd9b35-ff4c-eb47-f20f-712a6c4c88cc" }

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: