View a markdown version of this page

Investigative agent processing - AWS Security Incident Response User Guide

Investigative agent processing

The Security Incident Response investigative agent, powered by Amazon Bedrock, processes metadata from your case investigation data and findings data to generate insights, identify patterns, and recommend response actions. This processing occurs in Amazon Bedrock's global region as part of the agent's analysis workflow.

Important

The investigative agent processes metadata transiently and doesn't store this data persistently in Amazon Bedrock's global Region. The metadata is used only for generating investigation insights and isn't retained after processing completes.