Question

A SysOps administrator is investigating why a production Auto Scaling group scaled out unexpectedly three days ago. The administrator wants to review the exact sequence of CloudWatch alarm state changes (OK, ALARM, INSUFFICIENT_DATA) that occurred and the timestamps of those transitions. Which action allows the administrator to retrieve this information most directly?

Accepted Answer

Use the CloudWatch alarm history, which retains state transition records for 14 days, to view the timeline of state changes.

Answer

Query CloudTrail management event history, which retains records for 90 days, to find the alarm state changes.

Answer

Enable detailed monitoring on the Auto Scaling group so that alarm state transitions are recorded going forward.

Answer

Restore the metric data from an Amazon S3 export because CloudWatch metrics are deleted after 24 hours.