Sudden EventBridge rule triggers from aws.health

Question

I've had a EventBridge rule setup to trigger and send a notification any time there's a health event related to our account.  This has worked great and typically only get the occasional AWS notice.

However as of a couple hours ago, I've started getting constant triggers from aws.health any time I visit a console page.

The trigger itself is from CloudTrail and the name is "DescribeEventAggregates".  This event has not been seen in CloudTrail before, until now.

Accepted Answer

I've just experienced the same thing, so I have updated my rule to be more granular. This resolved the issue.

```json
{
  "source": ["aws.health"],
  "detail-type": ["AWS Health Event", "AWS Health Abuse Event"]
}
```

Answer

Please refer to health event earlier today. https://health.aws.amazon.com/health/status

[RESOLVED] Duplicate Health notifications
Apr 05 2:06 PM PDT Beginning at 10:04 AM PDT, some customers began receiving notifications from the AWS Health Service and Amazon GuardDuty. These notifications may have been delivered via email or EventBridge Events. The root cause of this issue was a recent change to how EventBridge processes events. The team was able to confirm the root cause and began working on mitigating the issue by rolling back this recent change. At 1:53 PM PDT, we had fully mitigated the issue. During this time, all AWS Services were operating normally, though some customers may have been receiving notifications from previously communicated events. The issue has been resolved.
Apr 05 1:46 PM PDT We have identified the root cause as a recent change to how EventBridge processes Events. We are rolling back this recent change, which will mitigate the impact of receiving duplication notifications. We will continue to provide updates as our recovery progresses. Our current expectation is full recovery within an hour.
Apr 05 1:05 PM PDT We continue to investigate duplicate notifications that are being delivered by the AWS Health Service. During this time, customers may be receiving notifications via email, or Cloudwatch Events for previously communicated issues. Customers will not see additional events listed in their AWS Health Dashboard. Additionally, we'd like to clarify that there is currently no active impact to any of the AWS Services; all services are operating normally. We are working to mitigate the issue and identify the root cause of the duplicate notifications. We will provide an update within the next 30 minutes.
Apr 05 12:39 PM PDT We are investigating duplicate notifications being delivered from the AWS Health Service.

Sudden EventBridge rule triggers from aws.health

Relevant content