AWS managedservices documentation change
Summary
Updated EC2 CPUUtilization alarm condition to trigger only when instances are unresponsive to Systems Manager polling. Renamed 'ELB instance' to 'Elastic Load Balancing instance' for terminology consistency.
Security assessment
The change adds an additional condition (Systems Manager unresponsiveness) to an existing monitoring alarm but doesn't address a specific security vulnerability. Terminology updates don't impact security functionality.
Diff
diff --git a/managedservices/latest/accelerate-guide/monitoring-default-metrics.md b/managedservices/latest/accelerate-guide/monitoring-default-metrics.md index 6407eb34f..4dcec2238 100644 --- a//managedservices/latest/accelerate-guide/monitoring-default-metrics.md +++ b//managedservices/latest/accelerate-guide/monitoring-default-metrics.md @@ -24 +24 @@ Application Load Balancer target | ApplicationLoadBalancerTargetGroupErrorCount -Amazon EC2 instance - all OSs | CPUUtilization***** > 95% for 5 mins, 6 consecutive times. | ${EC2::InstanceId}: CPU Too High CloudWatch alarm. High CPU utilization is an indicator of a change in application state such as deadlocks, infinite loops, malicious attacks, and other anomalies. These are Direct-Customer-Alerts alarms. +Amazon EC2 instance - all OSs | CPUUtilization***** > 95% for 5 mins, 6 consecutive times, if the instance is unresponsive to a polling Systems Manager command. | ${EC2::InstanceId}: CPU Too High CloudWatch alarm. High CPU utilization is an indicator of a change in application state such as deadlocks, infinite loops, malicious attacks, and other anomalies. These are Direct-Customer-Alerts alarms. @@ -36,3 +36,3 @@ Amazon EKS | See Amazon EKS [Baseline alerts in monitoring and incident manageme -ELB instance | SpilloverCountBackendConnectionErrors > 1 for 1 minute , 15 consecutive times. | Classic LoadBalancer Spillover Count Alarm CloudWatch alarm if an excess number of requests that were rejected because the surge queue is full. -ELB instance | HTTPCode_ELB_5XX_Count sum > 0 for 5 min, 3 consecutive times. | CloudWatch alarm on excess number of HTTP 5XX response codes that originate from the load balancer. -ELB instance | SurgeQueueLength > 100 for 1 minute, 15 consecutive times. | Classic LoadBalancer Surge Queue Length Alarm. CloudWatch alarm if an excess number of requests are pending routing. +Elastic Load Balancing instance | SpilloverCountBackendConnectionErrors > 1 for 1 minute , 15 consecutive times. | Classic LoadBalancer Spillover Count Alarm CloudWatch alarm if an excess number of requests that were rejected because the surge queue is full. +Elastic Load Balancing instance | HTTPCode_ELB_5XX_Count sum > 0 for 5 min, 3 consecutive times. | CloudWatch alarm on excess number of HTTP 5XX response codes that originate from the load balancer. +Elastic Load Balancing instance | SurgeQueueLength > 100 for 1 minute, 15 consecutive times. | Classic LoadBalancer Surge Queue Length Alarm. CloudWatch alarm if an excess number of requests are pending routing.