From 18870ca9379ded4aee1c4f5436fb5bf615c7db42 Mon Sep 17 00:00:00 2001
From: Michele Cereda <cereda.michele@gmail.com>
Date: Thu, 13 Feb 2025 00:14:58 +0100
Subject: [PATCH] chore(aws): add snippets for cloudwatch alarms for memory and
 disk utilization

---
 ...d take action when instance is impaired.ts | 54 +++++++++++++++++++
 1 file changed, 54 insertions(+)

diff --git a/snippets/pulumi/aws/notify slack channel and take action when instance is impaired.ts b/snippets/pulumi/aws/notify slack channel and take action when instance is impaired.ts
index 57902b0..460d268 100644
--- a/snippets/pulumi/aws/notify slack channel and take action when instance is impaired.ts	
+++ b/snippets/pulumi/aws/notify slack channel and take action when instance is impaired.ts	
@@ -147,4 +147,58 @@ instance_output.id.apply( ( instanceId: string ) => {
         },
     );
 
+    // requires the host to have the cloudwatch agent installed and configured to send 'mem_used_percent' metrics
+    new aws.cloudwatch.MetricAlarm(
+        `${instanceId}-memUsedPercent`,
+        {
+            name: `${instanceId}_MemUsedPercent`,
+            alarmDescription: "Notify on Slack when the memory utilization is > 85% 3 consecutive times over 15 minutes.",
+            tags: {
+                Controls: "SOC2/CC7.2",  // FIXME
+            },
+
+            namespace: "CWAgent",
+            dimensions: {
+                InstanceId: instanceId,
+            },
+            metricName: "mem_used_percent",
+            statistic: "Average",
+            comparisonOperator: "GreaterThanThreshold",
+            threshold: 85,
+            period: 300,
+            evaluationPeriods: 3,
+            datapointsToAlarm: 3,
+            alarmActions: [
+                notifications_snsTopic.arn,
+            ],
+        },
+    );
+
+    // requires the host to have the cloudwatch agent installed and configured to send 'disk_used_percent' metrics
+    new aws.cloudwatch.MetricAlarm(
+        `${instanceId}-diskUsedPercent`,
+        {
+            name: `${instanceId}_DiskUsedPercent`,
+            alarmDescription: "Notify on Slack when the disk utilization is > 85% 3 consecutive times over 15 minutes.",
+            tags: {
+                Controls: "SOC2/CC7.2",  // FIXME
+            },
+
+            namespace: "CWAgent",
+            dimensions: {
+                InstanceId: instanceId,
+            },
+            metricName: "disk_used_percent",
+            statistic: "Average",
+            comparisonOperator: "GreaterThanThreshold",
+            threshold: 85,
+            period: 300,
+            evaluationPeriods: 3,
+            datapointsToAlarm: 3,
+            alarmActions: [
+                notifications_snsTopic.arn,
+            ],
+        },
+    );
+
 });