Organizational view (console) - AWS Health
Enabling organizational view (console)Viewing organizational view events (console)Viewing affected accounts and resources (console)Disabling organizational view (console)

Organizational view (console)

You can use the AWS Health console to get a centralized view for health events in your AWS organization.

Organizational view is available in the AWS Health console for all AWS Support plans at no additional cost.

Note

If you want to allow users access to this feature in the management account, they must have permissions such as the AWSHealthFullAccess policy. For more information, see AWS Health identity-based policy examples.

Enabling organizational view (console)

You can enable organizational view from the AWS Health console. You must sign in to the management account of your AWS organization.

To view the AWS Health Dashboard for your organization

  1. Open your AWS Health Dashboard at https://health.aws.amazon.com/health/home.

  2. In the navigation pane, under Your organization health, choose Configurations.

  3. On the Enable organizational view page, choose Enable organizational view.

    Screenshot of how to enable organizational view in the AWS Health console.

  4. (Optional) If you want to make changes to your AWS organizations, such as creating organizational units (OUs), choose Manage AWS Organizations.

    For more information, see Getting started with AWS Organizations in the AWS Organizations User Guide.

Notes

  • Enabling this feature is an asynchronous process and takes time to complete. Depending on the number of accounts in your organization, it can take several minutes to load the accounts. You can leave and check the AWS Health console later.

  • If you have a Business, Enterprise On-Ramp, or Enterprise Support plan, you can call the DescribeHealthServiceStatusForOrganization API operation to check the status of the process.

  • When you enable this feature, the AWSServiceRoleForHealth_Organizations service-linked role with the Health_OrganizationsServiceRolePolicy AWS managed policy is applied to the management account in the organization. For more information, see Using service-linked roles for AWS Health.

Viewing organizational view events (console)

After you enable organizational view, AWS Health displays health events for all accounts in your organization.

When an account joins your organization, AWS Health automatically adds the account to organizational view. When an account leaves your organization, new events from that account are no longer logged to organizational view. However, existing events remain and you can still query them up to the 90-day limit.

AWS retains the policy data for the account for 90 days from the effective date of the administrator account closure. At the end of the 90 day period, AWS permanently deletes all policy data for the account.

  • To retain findings for more than 90 days, you can archive the policies. You can also use a custom action with an EventBridge rule to store the findings in an S3 bucket.

  • As long as AWS retains the policy data, when you reopen the closed account, AWS reassigns the account as the service administrator and recovers the service policy data for the account.

  • For more information, see Closing an account.

Important

For customers in the AWS GovCloud (US) Regions:

  • Before closing your account, back up and then delete your policy data and other account resources. You will no longer have access to them after you close the account.

Note

When you enable this feature, the AWS Health console can display public events from the AWS Health Dashboard – Service health for the last 7 days. These public events aren't specific to accounts in your organization. Events from the AWS Health Dashboard – Service health provide public information about the regional availability of AWS services.

You can view organizational view events in the following pages:.

Topics

Open and recent issues

You can use the Open and recent issues tab to view events that might affect your AWS infrastructure, such as changes to AWS services and resources that affect your organization.

To view organizational view events

  1. Open your AWS Health Dashboard at https://health.aws.amazon.com/health/home.

  2. In the navigation pane, under Your organization health, choose Open and recent issues to view recently reported events.

  3. Choose an event. On the Details tab, you can review the following information about the event:

    • Event name

    • Status

    • Region / Availability Zone

    • Affected accounts

    • Start time

    • End time

    • Category

    • Description

Example : Open issues for organizational view

The following Amazon Relational Database Service (Amazon RDS) event appears in the Open and recent issues tab for organizational view and affects one account in the organization.

Screenshot of organizational view events in the AWS Health console.

Scheduled changes

Use the Scheduled changes tab to view upcoming events that might affect your organization. These events can include scheduled maintenance activities for services.

Other notifications

Use the Notifications tab to view all other notifications and ongoing events from the past seven days that might affect your organization. This can include events, such as certificate rotations, billing notifications, and security vulnerabilities.

Event log

You can also use the Event log tab to view AWS Health events for organizational view. The column layout and behavior are similar to the Open and recent issues tab, except that the Event log tab includes additional columns and filter options, such as the Event category, Status, and Start time.

To view organizational view events in the Event log tab

  1. Open your AWS Health Dashboard at https://health.aws.amazon.com/health/home.

  2. In the navigation pane, under Your organization health, choose Event log.

  3. Under Event log, choose the event name. You can review the following information about the event:

    • Event name

    • Status

    • Region / Availability Zone

    • Affected accounts

    • Start time

    • End time

    • Category

    • Description

Example : Event log tab for organizational view

The following example Amazon DynamoDB (DynamoDB) event appears in the Event log tab and affects two accounts in the organization.

Screenshot of organizational view events in the Event log tab of the AWS Health console.

Viewing affected accounts and resources (console)

Under Your organization health, you can view the accounts in your organization that are affected by the event and any related resources. For example, if there's an upcoming event for Amazon Elastic Compute Cloud (Amazon EC2) instance maintenance, accounts in your organization that have Amazon EC2 instances can appear in the Details tab. You can identify the specific resources and then contact the account owner.

To view affected accounts and resources

  1. Open your AWS Health Dashboard at https://health.aws.amazon.com/health/home.

  2. In the navigation pane, under Your organization health, choose one of the tabs.

  3. Choose an event that has a value for Affected accounts.

  4. Choose the Affected accounts tab.

  5. Choose Show account details to view the following information for the accounts:

    • Account ID

    • Account name

    • Primary email

    • Organizational unit (OU)

    Screenshot of how to show account details for an event in organizational view.

  6. Expand the account to view the affected resources.

    Screenshot of how to show affected resources for an account in organizational view.

  7. If there are more than 10 resources, choose View all resources to view them.

  8. To filter by account ID for this specific event, do the following:

    1. On the Affected accounts tab, choose Add filter, choose Account ID, and then enter the account ID. You can only enter one account ID at a time.

    2. Choose Apply. The account that you entered appears in the list.

Disabling organizational view (console)

If you don't want to aggregate events for your organization, you can turn off this feature from the management account.

AWS Health stops aggregating events for all other accounts in your organization. You can continue to view previous events from your organization until they're deleted.

To disable organizational view

  1. Open your AWS Health Dashboard at https://health.aws.amazon.com/health/home.

  2. In the navigation pane, under Your organization health, choose Configurations.

  3. On the Enable organizational view page, choose Disable organizational view.

    Screenshot of how to disable organizational view in the AWS Health console.

After you turn off this feature, AWS Health no longer aggregates events from your organization. However, the service-linked role remains in the management account until you delete it through the AWS Identity and Access Management (IAM) console, IAM API, or AWS Command Line Interface (AWS CLI). For more information, see Deleting a service-linked role in the IAM User Guide.