By Implementation

Service Control PoliciesConfig RulesAuto Remediation RulesConformance PacksAmazon GuardDutyAmazon InspectorAWS Security HubAWS Network FirewallRoute53 Resolver SecurityAmazon MacieS3 Bucket PoliciesCloudWatch Alarms and Event RulesAWS WAFAWS Secrets ManagerAWS Systems ManagerSecurity Groups & NACLsAWS KMSIAM Policies

By Service Protected

Configuration Packages

Strategy Guides

Other

CloudWatch Alarms and Event Rules

VPN Connection State Alarm

A CloudWatch Alarm that triggers when the state of both VPN tunnels in an AWS VPN connection are down.

This CloudWatch Alarm is configured per VPN connection, which is set as an alarm dimension. Provide the VPN Connection ID by entering it under the Dimension.Value field in the Configure Alarm Settings settings page.

AWS Documentation
Items
2
Size
0.9 KB
Missing Parameters
AWSTemplateFormatVersion: "2010-09-09"
Description: ""
Resources:
  SnsTopicMetricFilterCloudWatchAlarm:
    Type: "AWS::SNS::Topic"
    Properties:
      Subscription:
        - Endpoint: "email@example.com"
          Protocol: "email"
      TopicName: "alarm-action"
  CloudWatchAlarm:
    Type: "AWS::CloudWatch::Alarm"
    Properties:
      AlarmName: "vpnstate_alarm"
      AlarmDescription: "A CloudWatch Alarm that triggers when the state of both VPN tunnels in an AWS VPN connection are down."
      MetricName: "TunnelState"
      Namespace: "AWS/VPN"
      Statistic: "Maximum"
      Period: "300"
      EvaluationPeriods: "1"
      Threshold: "0"
      ComparisonOperator: "LessThanOrEqualToThreshold"
      AlarmActions:
        - Ref: "SnsTopicMetricFilterCloudWatchAlarm"
      Dimensions:
        - Name: "VpnId"
          Value: ""
Parameters: {}
Metadata: {}
Conditions: {}

Actions



Customize Template

Action Settings

Alarm Configuration

* Required field