AWS Security ChangesHomeSearch

AWS AmazonCloudWatch documentation change

Service: AmazonCloudWatch · 2026-04-04 · Documentation low

File: AmazonCloudWatch/latest/monitoring/alarm-actions.md

Summary

Updated alarm actions table to include PromQL Alarm support column and clarified notification differences for different alarm types, added PromQL alarm SNS notification example

Security assessment

This is a feature documentation update adding support for PromQL alarms. The changes are functional (showing which alarm types support which actions) and informational (adding notification examples). No security vulnerabilities, permissions, or security features are mentioned or addressed.

Diff

diff --git a/AmazonCloudWatch/latest/monitoring/alarm-actions.md b/AmazonCloudWatch/latest/monitoring/alarm-actions.md
index 51d6f45a2..6027b1a7b 100644
--- a//AmazonCloudWatch/latest/monitoring/alarm-actions.md
+++ b//AmazonCloudWatch/latest/monitoring/alarm-actions.md
@@ -36,11 +36,11 @@ The following table shows the actions executed for alarms along with their behav
-Action Type | Multiple Time Series Alarm support | More Information  
----|---|---  
-SNS notifications | Contributor Level | [Amazon SNS event destinations](https://docs.aws.amazon.com/sns/latest/dg/sns-event-destinations.html)  
-EC2 actions (stop, terminate, reboot, recover) | Not supported | [Stop, terminate, reboot, or recover an EC2 instance](./UsingAlarmActions.html)  
-Auto Scaling actions | Not supported | [Step and simple scaling policies for Amazon EC2 Auto Scaling](https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-scaling-simple-step.html)  
-Systems Manager OpsItem creation | Alarm Level | [Configure CloudWatch alarms to create OpsItems](https://docs.aws.amazon.com/systems-manager/latest/userguide/OpsCenter-create-OpsItems-from-CloudWatch-Alarms.html)  
-Systems Manager Incident Manager incidents | Alarm Level | [Creating incidents automatically with CloudWatch alarms](https://docs.aws.amazon.com/incident-manager/latest/userguide/incident-creation.html#incident-tracking-auto-alarms)  
-Lambda function invocation | Contributor Level | [Invoke a Lambda function from an alarm](./alarms-and-actions-Lambda.html)  
-CloudWatch investigations investigation | Alarm Level | [Start a CloudWatch investigations from an alarm](./Start-Investigation-Alarm.html)  
-  
-The content of alarm notifications differs between single-metric alarms and multi-time series alarms:
+Action Type | Metrics Insights Multiple Time Series Alarm support | PromQL Alarm support | More Information  
+---|---|---|---  
+SNS notifications | Contributor Level | Contributor Level | [Amazon SNS event destinations](https://docs.aws.amazon.com/sns/latest/dg/sns-event-destinations.html)  
+EC2 actions (stop, terminate, reboot, recover) | Not supported | Not supported | [Stop, terminate, reboot, or recover an EC2 instance](./UsingAlarmActions.html)  
+Auto Scaling actions | Not supported | Not supported | [Step and simple scaling policies for Amazon EC2 Auto Scaling](https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-scaling-simple-step.html)  
+Systems Manager OpsItem creation | Alarm Level | Not supported | [Configure CloudWatch alarms to create OpsItems](https://docs.aws.amazon.com/systems-manager/latest/userguide/OpsCenter-create-OpsItems-from-CloudWatch-Alarms.html)  
+Systems Manager Incident Manager incidents | Alarm Level | Not supported | [Creating incidents automatically with CloudWatch alarms](https://docs.aws.amazon.com/incident-manager/latest/userguide/incident-creation.html#incident-tracking-auto-alarms)  
+Lambda function invocation | Contributor Level | Contributor Level | [Invoke a Lambda function from an alarm](./alarms-and-actions-Lambda.html)  
+CloudWatch investigations investigation | Alarm Level | Not supported | [Start a CloudWatch investigations from an alarm](./Start-Investigation-Alarm.html)  
+  
+The content of alarm notifications differs depending on the alarm type:
@@ -50 +50,3 @@ The content of alarm notifications differs between single-metric alarms and mult
-  * Multi-time series alarms provide a simplified state reason for each contributor, without the detailed state reason data block.
+  * Multi-time series Metrics Insights alarms provide a simplified state reason for each contributor, without the detailed state reason data block.
+
+  * PromQL alarms do not include a state reason or state reason data in their notifications.
@@ -97,0 +100,16 @@ Multiple time series Metrics Insights Alarm SNS notification for Contributor exa
+PromQL Alarm SNS notification for Contributor example:
+    
+    
+    {
+      "AlarmName": "HighCPUUsageAlarm",
+      "NewStateValue": "ALARM",
+      "StateChangeTime": "2025-12-01T13:42:04.919+0000",
+      "OldStateValue": "OK",
+      "AlarmContributorId": "1d502278dcd546a1",
+      "AlarmContributorAttributes": {
+        "team": "example-team-name"
+      }
+      // Additional information...
+    }
+          
+