Severitymedium
Servicetrustedadvisor
AWS Trusted Advisor check statuses are assessed to identify items in warning or error. The finding reflects the state reported by Trusted Advisor across categories such as Security, Fault Tolerance, Service Limits, and Cost, indicating where configurations or quotas require attention.
Risk
Unaddressed warnings/errors can leave misconfigurations that impact CIA:
- Confidentiality: public access or weak auth exposes data
- Integrity: overly permissive settings allow unwanted changes
- Availability: limit exhaustion or poor resilience triggers outages They can also increase unnecessary cost.
Run this check with Prowler CLI
prowler aws --checks trustedadvisor_errors_and_warnings
Recommendation
Adopt a continuous process to remediate Trusted Advisor findings:
- Prioritize
errorthenwarning - Assign ownership and SLAs
- Integrate alerts with workflows
- Enforce least privilege, segmentation, encryption, MFA, and tested backups
- Reassess regularly to confirm fixes and prevent regression
Remediation
Other
- Sign in to the AWS Console and open Trusted Advisor
- Go to Checks and filter Status to Warning and Error
- Open each failing check and click View details/Recommended actions
- Apply the listed fix to the affected resources
- Click Refresh on the check and repeat until all checks show OK
Source Code
Resource Type
Other