Unable to exclude and refresh in Trusted Advisor

Question

The option to Exclude and Refresh TA checks is grayed out for all checks/resources. I'm logged in as a user with full admin privileges on the account. Any help with this would be appreciated as there are some checks that I would like to exclude. Thanks.

Accepted Answer

Hi,

There are 2 main reasons for this behavior:

**1) List is not fully retrieved**  
Sometimes it takes 30-60 seconds until the list is fully retrieved. In that case you have to wait until the button becomes active

**2) Checks sourced from Security Hub**  
If the source of a check is Security Hub then you cannot exclude the resource in Trusted Advisor but need to do this in the Security Hub Console (see: https://docs.aws.amazon.com/awssupport/latest/user/security-hub-controls-with-trusted-advisor.html#security-controls-trusted-advisor-console). If a check is sourced from Security Hub it has a field called **Source** in the Description which points you to the Security Hub Control that you need to check (e.g. IAM.6).   
If you exclude the resources there Trusted Advisor will reflect it on the next refresh.

Answer

When a user logs in to Trusted Advisor, it automatically starts refresh of all checks. Till the refresh completes, the button 'exclude and refresh' won't be enabled. Also, not all checks can be refreshed, and all refreshable checks have different refresh interval.

Unable to exclude and refresh in Trusted Advisor

Relevant content