Check ID:
Provider: AWS
Service:
Severity: MEDIUM
Resource type:
trustedadvisor_errors_and_warningsProvider: AWS
Service:
trustedadvisorSeverity: MEDIUM
Resource type:
OtherWhat this check verifies
AWS Trusted Advisor check statuses are assessed to identify items inwarning or error. The finding reflects the state reported by Trusted Advisor across categories such as Security, Fault Tolerance, Service Limits, and Cost, indicating where configurations or quotas require attention.
Risk
Unaddressed warnings/errors can leave misconfigurations that impact CIA:- Confidentiality: public access or weak auth exposes data
- Integrity: overly permissive settings allow unwanted changes
- Availability: limit exhaustion or poor resilience triggers outages They can also increase unnecessary cost.
Recommendation
Adopt a continuous process to remediate Trusted Advisor findings:- Prioritize
errorthenwarning - Assign ownership and SLAs
- Integrate alerts with workflows
- Enforce least privilege, segmentation, encryption, MFA, and tested backups
- Reassess regularly to confirm fixes and prevent regression
Remediation
Dashboard steps- Sign in to the AWS Console and open Trusted Advisor
- Go to Checks and filter Status to Warning and Error
- Open each failing check and click View details/Recommended actions
- Apply the listed fix to the affected resources
- Click Refresh on the check and repeat until all checks show OK
References
- https://aws.amazon.com/premiumsupport/technology/trusted-advisor/best-practice-checklist/
- https://www.trendmicro.com/trendaivisiononecloudriskmanagement/knowledge-base/aws/TrustedAdvisor/checks.html
Where this check fires
This check runs on every scheduled scan against your AWS account. Findings appear at Cloud Security → Findings filterable byCheck ID = trustedadvisor_errors_and_warnings. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.
← Back to AWS checks