CloudWatch alarm actions should be enabled
Ensures CloudWatch metric alarms have actions enabled so they trigger the configured response when a state change occurs. With actions disabled, the alarm still changes state but notifies no one and changes nothing.
- service
- CloudWatch
- severity
- High
- scope
- evaluated in every region
How to fix it
- Affects another check: An alarm with no action for the ALARM state passes here once actions are on and still does nothing when it fires; CloudWatch.15 fails it until one is added.
- Interrupts service: An Auto Scaling action on an alarm already in ALARM is invoked once a minute while it stays there, so it can scale as soon as actions are on.
In the console
CloudWatch → Alarms → the alarm → Actions
- Enable actions
- On, once you know what each of the alarm's actions does
With the AWS CLI
aws cloudwatch enable-alarm-actions --alarm-names <alarm-name> --region <region>With Terraform
resource "aws_cloudwatch_metric_alarm" "this" {
alarm_name = var.alarm_name
comparison_operator = var.comparison_operator
evaluation_periods = var.evaluation_periods
metric_name = var.metric_name
actions_enabled = true
}
See which of your accounts this check is failing on.
Book a live scan