This rule evaluates whether health checks are enabled for ECS instances in an Auto Scaling group. A scaling group with health checks enabled is compliant.
Scenarios
When health checks are enabled, Auto Scaling monitors ECS instance health throughout their lifecycle and promptly removes or releases unhealthy instances.
Threat level
Default threat level: Medium.
You can change the threat level as needed.
Detection logic
-
A scaling group is considered compliant if health checks are enabled for its ECS instances.
-
A scaling group is considered non-compliant if health checks are disabled for its ECS instances. To resolve this issue, see Fixes.
Rule details
|
Parameter |
Description |
|
Rule name |
Enable health checks for ECS instances in an Auto Scaling group |
|
Rule identifier |
ess-group-health-check |
|
Tag |
ECS, ESS, ScalingGroup |
|
Automatic remediation |
Not supported |
|
Rule trigger |
Configuration changes |
|
Supported resource types |
ESS scaling groups |
|
Request parameters |
None |
Fixes
Enable health checks for the scaling group. For more information, see Lifecycle of instances in a scaling group.