All checks
High CloudWatch · regional

CloudWatch alarm actions should be enabled

Ensures CloudWatch metric alarms have actions enabled so they trigger the configured response when a state change occurs. With actions disabled, the alarm still changes state but notifies no one and changes nothing.

service
CloudWatch
severity
High
scope
evaluated in every region

How to fix it

  • Affects another check: An alarm with no action for the ALARM state passes here once actions are on and still does nothing when it fires; CloudWatch.15 fails it until one is added.
  • Interrupts service: An Auto Scaling action on an alarm already in ALARM is invoked once a minute while it stays there, so it can scale as soon as actions are on.

In the console

CloudWatch → Alarms → the alarm → Actions

Enable actions
On, once you know what each of the alarm's actions does

With the AWS CLI

aws cloudwatch enable-alarm-actions --alarm-names <alarm-name> --region <region>

With Terraform

resource "aws_cloudwatch_metric_alarm" "this" {
  alarm_name          = var.alarm_name
  comparison_operator = var.comparison_operator
  evaluation_periods  = var.evaluation_periods
  metric_name         = var.metric_name
  actions_enabled     = true
}

See which of your accounts this check is failing on.

Book a live scan