AWS IDR medium security documentation change
Summary
Added warning to disable CloudWatch alarm actions before testing
Security assessment
Explicitly instructs users to disable alarm actions to prevent unintended consequences during testing, which mitigates risks of accidental infrastructure changes. This qualifies as security documentation.
Diff
diff --git a/IDR/latest/userguide/idr-workloads-testing.md b/IDR/latest/userguide/idr-workloads-testing.md index ccdd35f21..a56820029 100644 --- a//IDR/latest/userguide/idr-workloads-testing.md +++ b//IDR/latest/userguide/idr-workloads-testing.md @@ -29,0 +30,2 @@ AWS Incident Detection and Response tests your Amazon CloudWatch alarms by monit +To prevent unwanted actions, for example Amazon EC2 instance restarts, disable any CloudWatch alarm actions before you change the alarm state. You can re-enable CloudWatch alarm actions after the testing completes. To learn more about disabling or enabling alarm actions, see [DisableAlarmActions](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_DisableAlarmActions.html) and [EnableAlarmActions](https://docs.aws.amazon.com/AmazonCloudWatch/latest/APIReference/API_EnableAlarmActions.html) in the _Amazon CloudWatch API Reference_. +