AWS Security ChangesHomeSearch

AWS wellarchitected documentation change

Service: wellarchitected · 2025-11-22 · Documentation low

File: wellarchitected/2025-02-25/framework/rel_monitor_aws_resources_notification_monitor.md

Summary

Updated documentation to clarify that composite alarms cannot perform Amazon EC2 Auto Scaling actions (instead of generic 'Auto Scaling')

Security assessment

The change only corrects terminology from 'Auto Scaling' to 'Amazon EC2 Auto Scaling' to align with official service naming. There is no indication this addresses a security vulnerability or adds security-related content. The modification improves accuracy but does not impact security controls or practices.

Diff

diff --git a/wellarchitected/2025-02-25/framework/rel_monitor_aws_resources_notification_monitor.md b/wellarchitected/2025-02-25/framework/rel_monitor_aws_resources_notification_monitor.md
index 192294249..2025fc185 100644
--- a//wellarchitected/2025-02-25/framework/rel_monitor_aws_resources_notification_monitor.md
+++ b//wellarchitected/2025-02-25/framework/rel_monitor_aws_resources_notification_monitor.md
@@ -64 +64 @@ Messages are unstructured and can be in any format. Amazon SNS supports forwardi
-    2. A composite alarm consists of a rule expression that considers the alarm conditions of other alarms you've created. The composite alarm only enters alarm state if all rule conditions are met. The alarms specified in the rule expression of a composite alarm can include metric alarms and additional composite alarms. Composite alarms can send Amazon SNS notifications when their state changes and can create Systems Manager [OpsItems](https://docs.aws.amazon.com/systems-manager/latest/userguide/OpsCenter-create-OpsItems-from-CloudWatch-Alarms.html) or [incidents](https://docs.aws.amazon.com/incident-manager/latest/userguide/incident-creation.html) when they enter the alarm state, but they cannot perform Amazon EC2 or Auto Scaling actions. 
+    2. A composite alarm consists of a rule expression that considers the alarm conditions of other alarms you've created. The composite alarm only enters alarm state if all rule conditions are met. The alarms specified in the rule expression of a composite alarm can include metric alarms and additional composite alarms. Composite alarms can send Amazon SNS notifications when their state changes and can create Systems Manager [OpsItems](https://docs.aws.amazon.com/systems-manager/latest/userguide/OpsCenter-create-OpsItems-from-CloudWatch-Alarms.html) or [incidents](https://docs.aws.amazon.com/incident-manager/latest/userguide/incident-creation.html) when they enter the alarm state, but they cannot perform Amazon EC2 or Amazon EC2 Auto Scaling actions.