CPC H04L 41/5054 (2013.01) [H04L 41/0681 (2013.01); H04L 41/0816 (2013.01); H04L 41/0886 (2013.01); H04L 41/0894 (2022.05); H04L 63/0263 (2013.01); H04L 63/0281 (2013.01); H04L 63/20 (2013.01); G06F 3/0482 (2013.01); H04L 12/4633 (2013.01); H04L 41/22 (2013.01); H04L 63/1441 (2013.01)] | 20 Claims |
1. A computer-implemented method comprising:
receiving, at an information technology (IT) and security operations application executing in a cloud provider network, one or more messages carrying data defining a user-configured playbook, the user-configured playbook identifying a plurality of codeblocks implementing operations to be performed to respond to an identification of an incident occurring in an IT environment associated with a user, the plurality of codeblocks including at least a first codeblock associated with custom code provided by the user and a second codeblock; and
upon a detection of the incident in the IT environment, initiating execution of the user-configured playbook by the IT and security operations application, the initiating comprising:
sending, to a proxy application executing in the IT environment, a request to execute at least the custom code of the first codeblock; and
causing at least the second codeblock to be executed within the cloud provider network.
|