Alarm history for CloudTrailAuthorizationFailures

Question

We have an alarm setup for CloudTrailAuthorizationFailures which is one of the metric filters in the CloudTrail/DefaultLogGroup.  We have a retention on this log group for 12 months however when looking in the Alarm history for CloudTrailAuthorizationFailures it only shows the month of October 2023.  I am trying to complete an audit report and was wondering how I can see all the alarms going back to January 2023?  Thank you.

Answer

Hi,
a CloudWatch alarm has a 14-day history.

The following blog post shares a suggestion for extending the alarm history: https://aws.amazon.com/blogs/mt/extending-and-exploring-alarm-history-in-amazon-cloudwatch-part-1/.

Note that the blog post keeps alarm state changes history, I'm unsure whether you are looking for full alarm state change history or only for alarm configuration history. The solution explored by the blog post would work either way, although it would have to be configured differently, as configuration changes are a distinct event type to state changes.

Alarm history for CloudTrailAuthorizationFailures

Contenuto pertinente