Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.keephq.dev/llms.txt

Use this file to discover all available pages before exploring further.

The Incident Manager Provider allows you to push incidents from AWS IncidentManager to Keep.

Authentication

This provider requires authentication.
  • region: AWS region (required: True, sensitive: False)
  • response_plan_arn: AWS Response Plan’s arn (required: True, sensitive: False)
  • sns_topic_arn: AWS SNS Topic arn you want to be used/using in response plan (required: True, sensitive: False)
  • access_key: AWS access key (Leave empty if using IAM role at EC2) (required: False, sensitive: True)
  • access_key_secret: AWS access key secret (Leave empty if using IAM role at EC2) (required: False, sensitive: True)
Certain scopes may be required to perform specific actions or queries via the provider. Below is a summary of relevant scopes and their use cases:
  • ssm-incidents:ListIncidentRecords: Required to retrieve incidents. (mandatory) (Documentation)
  • ssm-incidents:GetResponsePlan: Required to get response plan and register keep as webhook (Documentation)
  • ssm-incidents:UpdateResponsePlan: Required to update response plan and register keep as webhook (Documentation)
  • iam:SimulatePrincipalPolicy: Allow Keep to test the scopes of the current user/role without modifying any resource. (Documentation)
  • sns:ListSubscriptionsByTopic: Required to list all subscriptions of a topic, so Keep will be able to add itself as a subscription. (Documentation)

In workflows

This provider can be used in workflows. As “step” to query data, example:
steps:
    - name: Query incidentmanager
      provider: incidentmanager
      config: "{{ provider.my_provider_name }}"
      
        
If you need workflow examples with this provider, please raise a GitHub issue.

Status Map

The Incident Manager Provider maps the following statuses:
  • “OPEN” to AlertStatus.FIRING
  • “RESOLVED” to AlertStatus.RESOLVED

Severities Map

The Incident Manager Provider maps the following severities:
  • 1 to AlertSeverity.CRITICAL
  • 2 to AlertSeverity.HIGH
  • 3 to AlertSeverity.LOW
  • 4 to AlertSeverity.WARNING
  • 5 to AlertSeverity.INFO

Notes

  1. Incident Manager only throws notification when there is chatChannel attached to response plan. Make sure to add chatChannel to response plan before adding webhook