Check ID: trustedadvisor_errors_and_warnings
Provider: AWS
Service: trustedadvisor
Severity: MEDIUM
Resource type: Other

What this check verifies

AWS Trusted Advisor check statuses are assessed to identify items in warning or error. The finding reflects the state reported by Trusted Advisor across categories such as Security, Fault Tolerance, Service Limits, and Cost, indicating where configurations or quotas require attention.

Risk

Unaddressed warnings/errors can leave misconfigurations that impact CIA:
  • Confidentiality: public access or weak auth exposes data
  • Integrity: overly permissive settings allow unwanted changes
  • Availability: limit exhaustion or poor resilience triggers outages They can also increase unnecessary cost.

Recommendation

Adopt a continuous process to remediate Trusted Advisor findings:
  • Prioritize error then warning
  • Assign ownership and SLAs
  • Integrate alerts with workflows
  • Enforce least privilege, segmentation, encryption, MFA, and tested backups
  • Reassess regularly to confirm fixes and prevent regression

Remediation

Dashboard steps
  1. Sign in to the AWS Console and open Trusted Advisor
  2. Go to Checks and filter Status to Warning and Error
  3. Open each failing check and click View details/Recommended actions
  4. Apply the listed fix to the affected resources
  5. Click Refresh on the check and repeat until all checks show OK

References

Where this check fires

This check runs on every scheduled scan against your AWS account. Findings appear at Cloud Security → Findings filterable by Check ID = trustedadvisor_errors_and_warnings. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.
← Back to AWS checks