AWS IR is a Python-based command line utility designed for incident response in Amazon Web Services environments. The tool focuses on mitigating instance and key compromises within AWS infrastructure. The utility provides automated response capabilities for handling security incidents involving compromised EC2 instances and AWS access keys. It offers processing functionality for both host-based and key-based security incursions. AWS IR can be installed via pip and includes a quickstart guide for rapid deployment during incident response scenarios. The tool supports various command line arguments to customize incident response procedures based on specific compromise types. The utility is designed to operate without delays during critical incident response situations, providing immediate mitigation capabilities for AWS security incidents.