Organizational view (console) - Amazon Health
Enabling organizational view (console)Viewing organizational view events (console)Viewing affected accounts and resources (console)Disabling organizational view (console)
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

Organizational view (console)

You can use the Amazon Health console to get a centralized view for health events in your Amazon organization.

Organizational view is available in the Amazon Health console for all Amazon Web Services Support plans at no additional cost.

Note

If you want to allow users access to this feature in the management account, they must have permissions such as the AWSHealthFullAccess policy. For more information, see Amazon Health identity-based policy examples.

Enabling organizational view (console)

You can enable organizational view from the Amazon Health console. You must sign in to the management account of your Amazon organization.

To view the Amazon Health Dashboard for your organization

  1. Open your Amazon Health Dashboard at https://health.aws.amazon.com/health/home.

  2. In the navigation pane, under Your organization health, choose Configurations.

  3. On the Enable organizational view page, choose Enable organizational view.

  4. (Optional) If you want to make changes to your Amazon organizations, such as creating organizational units (OUs), choose Manage Amazon Organizations.

    For more information, see Getting started with Amazon Organizations in the Amazon Organizations User Guide.

Notes

  • Enabling this feature is an asynchronous process and takes time to complete. Depending on the number of accounts in your organization, it can take several minutes to load the accounts. You can leave and check the Amazon Health console later.

  • If you have a Business, Enterprise On-Ramp, or Enterprise Support plan, you can call the DescribeHealthServiceStatusForOrganization API operation to check the status of the process.

  • When you enable this feature, the AWSServiceRoleForHealth_Organizations service-linked role with the Health_OrganizationsServiceRolePolicy Amazon managed policy is applied to the management account in the organization. For more information, see Using service-linked roles for Amazon Health.

Viewing organizational view events (console)

After you enable organizational view, Amazon Health displays health events for all accounts in your organization.

When an account joins your organization, Amazon Health automatically adds the account to organizational view. When an account leaves your organization, new events from that account are no longer logged to organizational view. However, existing events remain and you can still query them up to the 90-day limit.

Amazon Web Services revokes the account's administrative access from the service and deactivates any policies that were managed by the administrator account. The protections that were provided by these policies are stopped across the organization.

  • Before closing your account, back up and then delete your policy data and other account resources. You will no longer have access to them after you close the account.

    • The account resources are subject to the policies of Amazon Web Services operating partners: Sinnet in the China (Beijing) Region and NWCD in the China (Ningxia) Region. Account closure procedures in China might take longer than in other Amazon Web Services Regions.

  • For more information, see Closing an account.

Note

When you enable this feature, the Amazon Health console can display public events from the Amazon Health Dashboard – Service health for the last 7 days. These public events aren't specific to accounts in your organization. Events from the Amazon Health Dashboard – Service health provide public information about the regional availability of Amazon services.

You can view organizational view events in the following pages:.

Topics

Open and recent issues

You can use the Open and recent issues tab to view events that might affect your Amazon infrastructure, such as changes to Amazon Web Services and resources that affect your organization.

To view organizational view events

  1. Open your Amazon Health Dashboard at https://health.aws.amazon.com/health/home.

  2. In the navigation pane, under Your organization health, choose Open and recent issues to view recently reported events.

  3. Choose an event. On the Details tab, you can review the following information about the event:

    • Event name

    • Status

    • Region / Availability Zone

    • Affected accounts

    • Start time

    • End time

    • Category

    • Description

Scheduled changes

Use the Scheduled changes tab to view upcoming events that might affect your organization. These events can include scheduled maintenance activities for services.

Other notifications

Use the Notifications tab to view all other notifications and ongoing events from the past seven days that might affect your organization. This can include events, such as certificate rotations, billing notifications, and security vulnerabilities.

Event log

You can also use the Event log tab to view Amazon Health events for organizational view. The column layout and behavior are similar to the Open and recent issues tab, except that the Event log tab includes additional columns and filter options, such as the Event category, Status, and Start time.

To view organizational view events in the Event log tab

  1. Open your Amazon Health Dashboard at https://health.aws.amazon.com/health/home.

  2. In the navigation pane, under Your organization health, choose Event log.

  3. Under Event log, choose the event name. You can review the following information about the event:

    • Event name

    • Status

    • Region / Availability Zone

    • Affected accounts

    • Start time

    • End time

    • Category

    • Description

Viewing affected accounts and resources (console)

Under Your organization health, you can view the accounts in your organization that are affected by the event and any related resources. For example, if there's an upcoming event for Amazon Elastic Compute Cloud (Amazon EC2) instance maintenance, accounts in your organization that have Amazon EC2 instances can appear in the Details tab. You can identify the specific resources and then contact the account owner.

To view affected accounts and resources

  1. Open your Amazon Health Dashboard at https://health.aws.amazon.com/health/home.

  2. In the navigation pane, under Your organization health, choose one of the tabs.

  3. Choose an event that has a value for Affected accounts.

  4. Choose the Affected accounts tab.

  5. Choose Show account details to view the following information for the accounts:

    • Account ID

    • Account name

    • Primary email

    • Organizational unit (OU)

  6. Expand the account to view the affected resources.

  7. If there are more than 10 resources, choose View all resources to view them.

  8. To filter by account ID for this specific event, do the following:

    1. On the Affected accounts tab, choose Add filter, choose Account ID, and then enter the account ID. You can only enter one account ID at a time.

    2. Choose Apply. The account that you entered appears in the list.

Disabling organizational view (console)

If you don't want to aggregate events for your organization, you can turn off this feature from the management account.

Amazon Health stops aggregating events for all other accounts in your organization. You can continue to view previous events from your organization until they're deleted.

To disable organizational view

  1. Open your Amazon Health Dashboard at https://health.aws.amazon.com/health/home.

  2. In the navigation pane, under Your organization health, choose Configurations.

  3. On the Enable organizational view page, choose Disable organizational view.

After you turn off this feature, Amazon Health no longer aggregates events from your organization. However, the service-linked role remains in the management account until you delete it through the Amazon Identity and Access Management (IAM) console, IAM API, or Amazon Command Line Interface (Amazon CLI). For more information, see Deleting a service-linked role in the IAM User Guide.