Status: IN
CloudWatch alarms act only on sustained state changes, not momentary spikes — the threshold must be breached for the configured number of evaluation periods before an action triggers.
Source: entries/2026/03/08/ec2-monitoring.md
JSON