Description:

AWS Elastic Beanstalk is an easy-to-use service for deploying and scaling web applications and services. You can simply upload your code and Elastic Beanstalk automatically handles the deployment, from capacity provisioning, load balancing, auto-scaling to application health monitoring. At the same time, you retain full control over the AWS resources powering your application and can access the underlying resources at any time.

Rational:

AWS Elastic Beanstalk enhanced health reporting gathers additional information about resources in your environment. Elastic Beanstalk uses changes in instance health to evaluate environmental health but does not immediately change environment health status. When an instance fails health checks at least three times in any one-minute period, Elastic Beanstalk may downgrade the health of the environment.

Impact:

Elastic Beanstalk analyzes the information gathered to provide a better picture of overall environmental health and aid in the identification of issues that can cause your application to become unavailable.

Default Value:

By default AWS elastic Beanstalk health report will be selected to Enhanced.

Audit:

  1. Sign in to AWS console

  2. Navigate to Elastic Beanstalk console, and in the Regions list, select your AWS Region.

  3. Click on Environments in the left navigation pane, and then choose the name of your environment you want from the list.

  4. Choose Configuration In the navigation pane

  5. In the Monitoring configuration category, if you see System: Basic then follow implementation steps

Remediation:

Pre Requisites

  • Make sure you are in a correct region

Implementation Steps

  1. Sign in to AWS console

  2. Navigate to Elastic Beanstalk console, and in the Regions list, select your AWS Region.

  3. Click on Environments in the left navigation pane, and then choose the name of your environment you want from the list.

    Note: If you have many environments, use the search bar to filter the environment list.

  4. choose Configuration In the navigation pane

  5. In the Monitoring configuration category, Click Edit.

  6. Under Health reporting, for System, select Enhanced.

  7. Click on Apply.

CLI Remediation:

aws elasticbeanstalk update-environment  --region Region-Name  --environment-name your_environmentName  --option-settings Namespace=aws:elasticbeanstalk:healthreporting:system,OptionName=SystemType,Value=enhanced

  1. Replace Region-Name with your region(like us-east-1, us-east-2) in line 2.

  2. Replace your_environment with your environment name you want to enable enhanced health report in line 3

Backout Plan:

If you want to roll back to basic reporting again do follow the same steps in the implementation section and in step 6 select the Basic option.

References: