Product and service integrations with Incident Manager - Incident Manager

Product and service integrations with Incident Manager

Incident Manager, a capability of AWS Systems Manager, integrates with the following products, services, and tools.

Integration with AWS services

Incident Manager integrates with the AWS services and tools described in the following table.

AWS CDK

The AWS CDK is a development framework for using code to define your cloud infrastructure and using AWS CloudFormation for provisioning. The AWS CDK supports multiple programming languages including TypeScript, JavaScript, Python, Java, and C#/.Net.

For information about using the AWS CDK with Incident Manager, see the following sections in the AWS CDK API Reference:

AWS Chatbot

AWS Chatbot enables DevOps and software development teams to use messaging program chat rooms to monitor and respond to operational events in their AWS Cloud.

Using AWS Chatbot with Incident Manager, you can create chat channels that responders can use to monitor and respond to incidents. AWS Chatbot supports Slack chat rooms, Microsoft Teams channels, and Amazon Chime chat rooms as chat channels.

As part of creating a chat channel, you also create a topic in Amazon Simple Notification Service (Amazon SNS). Amazon SNS is a managed service that provides message delivery from publishers to subscribers. In incident response plans, when you associate a chat channel you have created with the plan, you also choose one or more topics that you associated with the chat channel. These SNS topics are used to send notifications about an incident to the incident responders.

For more information, see Working with chat channels in Incident Manager.

AWS CloudFormation

AWS CloudFormation is a service that you can use to create a template with all the resources you need for your application, and then configure and provision the resources for you. It will also configure all the dependencies, so you can focus more on your application and less on managing resources.

For information about using AWS CloudFormation with Incident Manager, see the following topics in the AWS CloudFormation User Guide:

Amazon CloudWatch

CloudWatch monitors your AWS resources and the applications you run on AWS in real time. You can use CloudWatch to collect and track metrics, which are variables you can measure for your resources and applications.

You can configure CloudWatch alarms to create incidents in Incident Manager. CloudWatch works with Systems Manager and Incident Manager to create an incident from a response plan template when an alarm goes into alarm state.

For more information, see Creating incidents automatically with CloudWatch alarms.

Amazon Chime Amazon Chime is an online workplace that combines meetings, chat, and business calls. You can meet, chat, and place business calls inside and outside your organization using Amazon Chime.

You can integrate an Amazon Chime room into your Incident Manager operations by creating a chat channel for Amazon Chime in AWS Chatbot, and then adding that channel to a response plan.

For more information, see Working with chat channels in Incident Manager.

Amazon EventBridge

EventBridge is a serverless service that uses events to connect application components, making it easier for you to build scalable event-driven applications.

You can configure EventBridge rules to watch for event patterns in your AWS resources and create an incident in Incident Manager when an event matches a pattern that you have defined. Your rules can monitor for event patterns in dozens of AWS services and third-party applications and services.

For more information, see Creating incidents automatically with EventBridge events.

AWS Secrets Manager

Secrets Manager helps you manage, retrieve, and rotate database credentials, application credentials, OAuth tokens, API keys, and other secrets throughout their lifecycles.

When you integrate Incident Manager with the PagerDuty service, you create a secret in Secrets Manager that contains your PagerDuty credentials.

For more information, see Storing PagerDuty access credentials in an AWS Secrets Manager secret.

AWS Systems Manager

Systems Manager is an operations hub that you can use to view and control your application infrastructure and a secure end-to-end management solution for cloud environments. The following Systems Manager capabilities integrate directly with Incident Manager:

  • Automation – An Automation runbook defines the actions that Systems Manager performs on your AWS resources. In Incident Manager, a runbook defines a series of automated and manual steps to use to resolve your incidents.

    For information about creating Automation runbooks for use with Incident Manager, see Working with Systems Manager Automation runbooks in Incident Manager.

  • OpsCenter – OpsCenter provides a central location where operations engineers and IT professionals can manage operational work items, called OpsItems, related to AWS resources. You can create OpsItems directly from a post-incident analysis to follow up on related work.

    For more information, see Performing a post-incident analysis in Incident Manager.

AWS Trusted Advisor

Trusted Advisor is a tool available to AWS customers with a Basic or Developer support plan. Trusted Advisor inspects your AWS environment, and then makes recommendations when opportunities exist to save money, improve system availability and performance, or help close security gaps.

For Incident Manager, Trusted Advisor checks that a replication set’s configuration uses more than one AWS Region to support Regional failover and response.

Integration with other products and services

You can integrate or use Incident Manager with the third-party services described in the following table.

Jira Cloud

Using the AWS Service Management Connector, you can integrate Incident Manager with Jira Cloud (Atlassian), a third-party cloud-based workflow platform.

After you configure integration with Jira Cloud, when you create a new incident in Incident Manager, the integration creates the incident in Jira Cloud as well. If you update an incident in Incident Manager, it makes these updates to the corresponding incident in Jira Cloud. If you resolve an incident in either Incident Manager or Jira Cloud, the integration resolves the incident in both services based on which preferences you configure.

For more information, see Integrating AWS Systems Manager Incident Manager (Jira Cloud) in the AWS Service Management Connector Administrator Guide.

Jira Service Management

Using the AWS Service Management Connector, you can integrate Incident Manager with Jira Service Management, a third-party cloud-based workflow platform.

After you configure integration with Jira Service Management, when you create a new incident in Incident Manager, the integration creates the incident in Jira Service Management as well. If you update an incident in Incident Manager, it makes these updates to the corresponding incident in Jira Service Management. If you resolve an incident in either Incident Manager or Jira Service Management, the integration resolves the incident in both services based on which preferences you configure.

For more information, see Configuring Jira Service Management in the AWS Service Management Connector Administrator Guide.

Microsoft Teams

Microsoft Teams provides collaborative cloud-based tools for team messaging, audio and video conferencing, and file sharing.

You can integrate a Microsoft Teams channel into your Incident Manager operations by creating a chat channel for Microsoft Team in AWS Chatbot, and then adding that channel to a response plan.

For more information, see Working with chat channels in Incident Manager.

PagerDuty

PagerDuty is an incident response tool that supports paging workflows and escalation policies.

When you integrate Incident Manager with PagerDuty, you can add a PagerDuty service to your response plan. After that, a corresponding incident is created in PagerDuty whenever an incident in created in Incident Manager. The incident in PagerDuty uses the paging workflow and escalation policies that you defined there in addition to those in Incident Manager. PagerDuty attaches timeline events from Incident Manager as notes on your incident.

To integrate Incident Manager with PagerDuty, you must first create a secret in AWS Secrets Manager that contains your PagerDuty credentials.

For information about adding a PagerDuty REST API Key and other required details to a secret in AWS Secrets Manager, see Storing PagerDuty access credentials in an AWS Secrets Manager secret.

For information about adding a PagerDuty service from your PagerDuty account to a response plan in Incident Manager, see the steps for Integrate a PagerDuty service into the response plan in the topic Creating a response plan.

ServiceNow

Using the AWS Service Management Connector, you can integrate Incident Manager with ServiceNow, a third-party cloud-based workflow platform.

After you configure integration with ServiceNow, when you create a new incident in Incident Manager, the integration creates the incident in ServiceNow as well. If you update an incident in Incident Manager, it makes these updates to the corresponding incident in ServiceNow. If you resolve an incident in either Incident Manager or ServiceNow, the integration resolves the incident in both services based on which preferences you configure.

For more information, see Integrating AWS Systems Manager Incident Manager in ServiceNow in the AWS Service Management Connector Administrator Guide.

Slack

Slack provides collaborative cloud-based tools for team messaging, audio and video conferencing, and file sharing.

You can integrate a Slack channel into your Incident Manager operations by creating a chat channel for Slack in AWS Chatbot, and then adding that channel to a response plan.

For more information, see Working with chat channels in Incident Manager.

Terraform

HashiCorp Terraform is an open-source infrastructure as code (IaC) software tool that provides a command line interface (CLI) workflow to manage various cloud services. For Incident Manager, you can use Terraform to manage or provision the following:

SSM Incident Manager Contacts resources

SSM Contacts data sources

SSM Incident Manager resources

SSM Incident Manager data sources