AWS AmazonCloudWatch documentation change
Summary
Expanded list of automated actions triggered by CloudWatch alarms including EC2 instance management, Auto Scaling, Lambda invocation, and incident management integrations
Security assessment
The changes document operational response capabilities rather than address vulnerabilities. While features like incident management and EC2 termination could impact security posture, there's no evidence of patching a security flaw. The documentation addition helps users implement security-related automation.
Diff
diff --git a/AmazonCloudWatch/latest/monitoring/Acting_Alarm_Changes.md b/AmazonCloudWatch/latest/monitoring/Acting_Alarm_Changes.md index 679aa4f40..60be404a8 100644 --- a//AmazonCloudWatch/latest/monitoring/Acting_Alarm_Changes.md +++ b//AmazonCloudWatch/latest/monitoring/Acting_Alarm_Changes.md @@ -9 +9 @@ CloudWatch can notify users on two types of alarm changes: when an alarm changes -When an alarm evaluates, it might change from one state to another, such as ALARM, OK or INSUFFICIENT_DATA. These alarm state changes can signal a possible incident, a return to normal, or a metric being unavailable. In such cases, you might want to engage or notify users using either of the following options: +When an alarm evaluates, it might change from one state to another, such as ALARM, OK or INSUFFICIENT_DATA. These alarm state changes can signal a possible incident, a return to normal, or a metric being unavailable. In such cases, you might want to the alarm to automatically take one of the following actions @@ -11 +11 @@ When an alarm evaluates, it might change from one state to another, such as ALAR - * You can configure the alarm to send a notification to a SNS topic as part of the alarm’s actions. An SNS topic can then be configured for application-to-application (A2A) messaging as well as application-to-person (A2P) notifications, including channels such as email notifications and SMS. All the destinations that you define for your SNS topic receive the alarm notification. For more information, see [ Amazon SNS event destinations](https://docs.aws.amazon.com/sns/latest/dg/sns-event-destinations.html). + * Send a notification to a SNS topic as part of the alarm’s actions. An SNS topic can then be configured for application-to-application (A2A) messaging as well as application-to-person (A2P) notifications, including channels such as email notifications and SMS. All the destinations that you define for your SNS topic receive the alarm notification. For more information, see [ Amazon SNS event destinations](https://docs.aws.amazon.com/sns/latest/dg/sns-event-destinations.html). @@ -14,0 +15,12 @@ When an alarm evaluates, it might change from one state to another, such as ALAR + * Reboot, stop, recover, or terminate an Amazon EC2 instance. For more information, see [Create alarms to stop, terminate, reboot, or recover an EC2 instance](./UsingAlarmActions.html). + + * Scale the capacity of an Amazon EC2 Auto Scaling group. For more information, see [ Step and simple scaling policies for Amazon EC2 Auto Scaling](https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-scaling-simple-step.html). + + * Start an investigation in Amazon Q operational investigations. For more information, see [Start an investigation in Amazon Q operational investigations from an alarm](./Start-Investigation-Alarm.html) + + * Invoke a Lambda function. + + * Create an incident in Systems Manager Incident Manager. For more information, see [ Creating incidents automatically with CloudWatch alarms](https://docs.aws.amazon.com/incident-manager/latest/userguide/incident-creation.html#incident-tracking-auto-alarms). + + * Create an OpsItem in Systems Manager OpsCenter. For more information, see [ Configure CloudWatch alarms to create OpsItems](https://docs.aws.amazon.com/systems-manager/latest/userguide/OpsCenter-create-OpsItems-from-CloudWatch-Alarms.html). +