How do I monitor AWS VPN tunnels using Amazon CloudWatch alarms?

Short description

Monitor the status of an AWS VPN through its metric data, which is automatically sent to CloudWatch. The VPN tunnel state is reported as a Boolean value in the CloudWatch metric TunnelState. A value of 0 indicates that the tunnel is down and 1 indicates that the tunnel is up. Set up a CloudWatch alarm based on this CloudWatch metric to notify you when one or both VPN tunnels are down.

Resolution

1. Set up your AWS VPN and confirm that both tunnels are available. Then, configure a CloudWatch alarm to monitor the connection.
2. Set up a topic for your alarm in Amazon Simple Notification Service (Amazon SNS). If you don't have an existing topic, then create an Amazon SNS topic. Then, subscribe to the topic.
3. Create a CloudWatch alarm to monitor the VPN tunnel state.
4. (Optional) Test your alarm by making the tunnels of your AWS VPN unavailable to invoke a notification from your SNS topic.

Related information

Monitoring VPN tunnels using Amazon CloudWatch

How do I check the current status of my VPN tunnel?