AWS Security ChangesHomeSearch

AWS IDR documentation change

Service: IDR · 2025-08-28 · Documentation low

File: IDR/latest/userguide/idr-gs-questionnaire.md

Summary

Updated contact emails from 'xyz.com' to 'example.com', corrected AWS service names (e.g., 'Premimum Support' to 'Support', 'ELB' to 'Amazon Route 53'), and changed team references from 'XYZ' to 'Example'

Security assessment

Changes appear to be general documentation cleanup rather than security-specific updates. The modifications involve standardizing placeholder domains (xyz.com → example.com) and correcting AWS service terminology, but no security vulnerabilities, mitigations, or security feature enhancements are mentioned. While monitoring alarms are discussed, these are operational reliability measures rather than explicit security controls.

Diff

diff --git a/IDR/latest/userguide/idr-gs-questionnaire.md b/IDR/latest/userguide/idr-gs-questionnaire.md
index a1d65ca83..11dab8955 100644
--- a//IDR/latest/userguide/idr-gs-questionnaire.md
+++ b//IDR/latest/userguide/idr-gs-questionnaire.md
@@ -112,3 +112,3 @@ Alarm matrix table Metric name / ARN / Threshold | Description | Notes | Actions
-Workload volume / `CW Alarm ARN` / CallCount < 100000 for 5 datapoints within 5 minute , treat missing data as missing | This metric represents the number of incoming requests coming to the workload, measured at the Application Load Balancer level. This alarm is important because significant drops in incoming requests may indicate issues with upstream network connectivity, or issues with our DNS implementation that result in users not being able to access the workload. | The alarm has entered the "Alarm" state 10 times in the last week. This alarm is at risk of false positives. Threshold review is planned. Issues? No or Yes (if No, leave blank): This alarm flips frequently during a particular batch job execution. Resolvers: Site Reliability Engineers | Engage the Site Reliability Engineering team by sending an email to `[email protected]` Create an AWS Premimum Support case for our ELB, and Route 53 services. If IMMEDIATE action is needed: Check EC2 Free memory/disk space and inform the `XYZ` Team through email to restart the instance, or run a log flush. (if immediate action is not needed, leave blank)  
-Workload Request Latency / `CW Alarm ARN` / p90 Latency > 100ms for 5 datapoints within 5 minutes , treat missing data as missing | This metric represents the p90 latency for HTTP requests to be fulfilled by the workload. This alarm represents latency (important measure of customer experience for the website). | The alarm has entered the "Alarm" state 0 times in the last week. Issues? No or Yes (if No, leave blank): This alarm flips frequently during a particular batch job execution. Resolvers: Site Reliability Engineers | Engage the Site Reliability Engineering team by sending an email to `[email protected]` Create an AWS Premimum Support case for our ECW, and RDS services. If IMMEDIATE action is needed: Check EC2 Free memory/disk space and inform the `XYZ` Team through email to restart the instance, or run a log flush. (if immediate action is not needed, leave blank)  
-Workload Request Availability / `CW Alarm ARN` / Availability < 95% for 5 datapoints within 5 minutes , treat missing data as missing. | This metric represents the availability for HTTP requests to be fulfilled by the workload. (# of HTTP 200 / # of Requests) per period. This alarm represents the availability of the workload. | The alarm has entered the "Alarm" state 0 times in the last week. Issues? No or Yes (if No, leave blank): This alarm flips frequently during a particular batch job execution. Resolvers: Site Reliability Engineers | Engage the Site Reliability Engineering team by sending an email to `[email protected]` Create an AWS Premimum Support case for our ELB, and Route 53 services. If IMMEDIATE action is needed: Check EC2 Free memory/disk space and inform the `XYZ` Team through email to restart the instance, or run a log flush. (if immediate action is not needed, leave blank)  
+Workload volume / `CW Alarm ARN` / CallCount < 100000 for 5 datapoints within 5 minute , treat missing data as missing | This metric represents the number of incoming requests coming to the workload, measured at the Application Load Balancer level. This alarm is important because significant drops in incoming requests may indicate issues with upstream network connectivity, or issues with our DNS implementation that result in users not being able to access the workload. | The alarm has entered the "Alarm" state 10 times in the last week. This alarm is at risk of false positives. Threshold review is planned. Issues? No or Yes (if No, leave blank): This alarm flips frequently during a particular batch job execution. Resolvers: Site Reliability Engineers | Engage the Site Reliability Engineering team by sending an email to `[email protected]` Create an AWS Support case for our ELB, and Amazon Route 53 services. If IMMEDIATE action is needed: Check EC2 Free memory/disk space and inform the `Example` team through email to restart the instance, or run a log flush. (if immediate action is not needed, leave blank)  
+Workload Request Latency / `CW Alarm ARN` / p90 Latency > 100ms for 5 datapoints within 5 minutes , treat missing data as missing | This metric represents the p90 latency for HTTP requests to be fulfilled by the workload. This alarm represents latency (important measure of customer experience for the website). | The alarm has entered the "Alarm" state 0 times in the last week. Issues? No or Yes (if No, leave blank): This alarm flips frequently during a particular batch job execution. Resolvers: Site Reliability Engineers | Engage the Site Reliability Engineering team by sending an email to `[email protected]` Create an AWS Support case for our ECW, and RDS services. If IMMEDIATE action is needed: Check EC2 Free memory/disk space and inform the `Example` team through email to restart the instance, or run a log flush. (if immediate action is not needed, leave blank)  
+Workload Request Availability / `CW Alarm ARN` / Availability < 95% for 5 datapoints within 5 minutes , treat missing data as missing. | This metric represents the availability for HTTP requests to be fulfilled by the workload. (# of HTTP 200 / # of Requests) per period. This alarm represents the availability of the workload. | The alarm has entered the "Alarm" state 0 times in the last week. Issues? No or Yes (if No, leave blank): This alarm flips frequently during a particular batch job execution. Resolvers: Site Reliability Engineers | Engage the Site Reliability Engineering team by sending an email to `[email protected]` Create an AWS Support case for our ELB, and Amazon Route 53 services. If IMMEDIATE action is needed: Check EC2 Free memory/disk space and inform the `Example` team through email to restart the instance, or run a log flush. (if immediate action is not needed, leave blank)  
@@ -116 +116 @@ Workload Request Availability / `CW Alarm ARN` / Availability < 95% for 5 datapo
-End to End Integration test / `CW Alarm ARN` / 3% failure rate for 1 minute metrics over 3 minutes duration , treat missing data as missing Workload Identifier: End to End Test Workflow, AWS Region: US-EAST-1, AWS Account ID: 012345678910 | This metric tests if a request can traverse each layer of the workload. If this test fails, it represents a critical failure to process business transactions. This alarm represents the ability to process business transactions for the workload. | The alarm has entered the "Alarm" state 0 times in the last week. Issues? No or Yes (if No, leave blank): This alarm flips frequently during a particular batch job execution. Resolvers: Site Reliability Engineers | Engage the Site Reliability Engineering team by sending an email to `[email protected]` Create an AWS Premimum Support case for our ECS, and DynamoDB services. If IMMEDIATE action is needed: Check EC2 Free memory/disk space and inform the `XYZ` Team through email to restart the instance, or run a log flush. (if immediate action is not needed, leave blank)  
+End to End Integration test / `CW Alarm ARN` / 3% failure rate for 1 minute metrics over 3 minutes duration , treat missing data as missing Workload Identifier: End to End Test Workflow, AWS Region: US-EAST-1, AWS account ID: 012345678910 | This metric tests if a request can traverse each layer of the workload. If this test fails, it represents a critical failure to process business transactions. This alarm represents the ability to process business transactions for the workload. | The alarm has entered the "Alarm" state 0 times in the last week. Issues? No or Yes (if No, leave blank): This alarm flips frequently during a particular batch job execution. Resolvers: Site Reliability Engineers | Engage the Site Reliability Engineering team by sending an email to `[email protected]` Create an AWS Support case for our Amazon Elastic Container Service, and Amazon DynamoDB services. If IMMEDIATE action is needed: Check EC2 Free memory/disk space and inform the `Example` team through email to restart the instance, or run a log flush. (if immediate action is not needed, leave blank)