cloud-report
Version:
Collects and analyzes cloud resources
79 lines (78 loc) • 3.96 kB
JavaScript
;
Object.defineProperty(exports, "__esModule", { value: true });
const types_1 = require("../../../types");
const utils_1 = require("../../../utils");
const base_1 = require("../../base");
class EC2InstanceSystemChecksAlarmsAnalyzer extends base_1.BaseAnalyzer {
analyze(params, fullReport) {
const allAlarms = params.alarms;
if (!allAlarms || !fullReport["aws.ec2"] || !fullReport["aws.ec2"].instances) {
return undefined;
}
const allInstances = fullReport["aws.ec2"].instances;
const ec2_instance_system_checks_alarms = {
type: types_1.CheckAnalysisType.OperationalExcellence,
};
ec2_instance_system_checks_alarms.what = "Are alarms are enabled for EC2 instance System checks?";
ec2_instance_system_checks_alarms.why = `It is important to set alarms for EC2 systems checks as
otherwise suddenly your applications might be down.`;
ec2_instance_system_checks_alarms.recommendation = `Recommended to set alarm for EC2
system checks to take appropriative action.`;
ec2_instance_system_checks_alarms.benchmark = ['all'];
const allRegionsAnalysis = {};
for (const region in allInstances) {
const regionInstances = allInstances[region];
const regionAlarms = allAlarms[region] || [];
const alarmsMapByInstance = this.mapAlarmsByInstance(regionAlarms);
allRegionsAnalysis[region] = [];
for (const instance of regionInstances) {
if (instance.State.Name !== "running") {
continue;
}
const alarmAnalysis = {};
const instanceAlarms = alarmsMapByInstance[instance.InstanceId];
alarmAnalysis.resource = { instance, alarms: instanceAlarms };
alarmAnalysis.resourceSummary = {
name: "Instance",
value: `${utils_1.ResourceUtil.getNameByTags(instance)} | ${instance.InstanceId}`,
};
if (this.isSystemChecksAlarmPresent(instanceAlarms)) {
alarmAnalysis.severity = types_1.SeverityStatus.Good;
alarmAnalysis.message = "StatusCheckFailed alarm is enabled";
}
else {
alarmAnalysis.severity = types_1.SeverityStatus.Failure;
alarmAnalysis.message = "StatusCheckFailed alarm is not enabled";
alarmAnalysis.action = "Set StatusCheckFailed alarm";
}
allRegionsAnalysis[region].push(alarmAnalysis);
}
}
ec2_instance_system_checks_alarms.regions = allRegionsAnalysis;
return { ec2_instance_system_checks_alarms };
}
mapAlarmsByInstance(alarms) {
return alarms.reduce((alarmsMap, alarm) => {
if (alarm.Namespace === "AWS/EC2" && alarm.Dimensions) {
const instanceDimension = alarm.Dimensions.find((dimension) => {
return dimension.Name === "InstanceId";
});
if (instanceDimension && instanceDimension.Value) {
alarmsMap[instanceDimension.Value] = alarmsMap[instanceDimension.Value] || [];
alarmsMap[instanceDimension.Value].push(alarm);
}
}
return alarmsMap;
}, {});
}
isSystemChecksAlarmPresent(alarms) {
return alarms && alarms.some((alarm) => {
return alarm.ActionsEnabled &&
alarm.AlarmActions &&
alarm.AlarmActions.length &&
(alarm.MetricName === "StatusCheckFailed_System" ||
alarm.MetricName === "StatusCheckFailed");
});
}
}
exports.EC2InstanceSystemChecksAlarmsAnalyzer = EC2InstanceSystemChecksAlarmsAnalyzer;