CloudWatch Alarm Automatic Response Configuration

CloudWatch Alarm Automatic Response Configuration A workflow diagram generated by Archify. 01 / Detect and route 02 / Lambda responses 03 / AWS service responses Detect Route Automatic response CloudWatch Alarm · Detect and route › Detect CloudWatch Alarm EventBridge · Detect and route › Route EventBridge Event Rule · Detect and route › Route · put-rule Event Rule put-rule Lambda: Inspect input · Lambda responses › Automatic response Lambda: Inspect input Lambda: Approved action · Lambda responses › Automatic response Lambda: Approved action Lambda: Notification · Lambda responses › Automatic response Lambda: Notification SSM: Runbook Execution · AWS service responses › Automatic response SSM: Runbook Execution Step Functions: Recovery Workflow · AWS service responses › Automatic response Step Functions: Recovery Workflow state change event pattern match target Legend Lambda function Routing rule Event bus AWS service

Event pattern

  • • source: aws.cloudwatch
  • • detail-type: CloudWatch Alarm State Change
  • • detail.state.value: ALARM

Target registration

  • • put-targets also needs target-specific permissions and execution roles
  • • Verify rule/account/Region scope, retries, DLQ, and duplicate handling