High
CloudWatch
Regional
CloudWatch alarm actions should be enabled
NISTISO 27001HIPAA
Description
This check ensures that CloudWatch alarms have actions enabled, allowing them to perform specified actions when a state change occurs.
Remediation
To comply with this control, ensure that actions are configured and enabled for CloudWatch alarms. These actions can include notifications, EC2 instance changes, or Auto Scaling adjustments.
Steps
- Sign in to the AWS Management Console and open the CloudWatch console at https://console.aws.amazon.com/cloudwatch/.
- In the CloudWatch console, click on 'Alarms' in the left navigation pane.
- Select the alarm you want to configure actions for.
- In the alarm details pane, click on the 'Modify' or 'Edit' button.
- Scroll to the 'Actions' section. Here, you can set up different actions for when the alarm is in 'ALARM', 'OK', or 'INSUFFICIENT_DATA' state.
- To add an action, click on 'Add action' in the respective state section.
- Choose the action type (e.g., 'Notify me', 'Take Auto Scaling action', 'Restart, terminate, or recover an EC2 instance').
- Configure the specific details for the action, such as SNS topic for notifications or specific EC2 or Auto Scaling actions.
- After configuring the actions, click on 'Save changes' to update the alarm settings.
Compliance
NISTISO 27001HIPAA