Check ID: trustedadvisor_premium_support_plan_subscribed
Provider: AWS
Service: trustedadvisor
Severity: LOW
Categories: resilience
Resource type: Other

​
What this check verifies

AWS account is subscribed to an AWS Premium Support plan (e.g., Business or Enterprise)

​
Risk

Without Premium Support, critical incidents face slower response, reducing availability and delaying containment of security events. Limited Trusted Advisor coverage lets misconfigurations persist, risking data exposure and privilege misuse. Lack of expert guidance increases change risk during production impacts.

​
Recommendation

Adopt Business or higher for production and mission-critical accounts.
  • Integrate Support into IR with defined contacts/severity
  • Enforce least privilege for case access
  • Use Trusted Advisor for proactive hardening
  • If opting out, ensure an equivalent 24/7 support and escalation path

​
Remediation

Dashboard steps
  1. Sign in to the AWS Management Console as the account root user
  2. Open https://console.aws.amazon.com/support/home#/plans
  3. Click “Change plan”
  4. Select “Business Support” (or higher) and click “Continue”
  5. Review and confirm the upgrade

​
References

​
Where this check fires

This check runs on every scheduled scan against your AWS account. Findings appear at Cloud Security → Findings filterable by Check ID = trustedadvisor_premium_support_plan_subscribed. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.
← Back to AWS checks