Skip to main content

Limit Monitoring Probe Load on Targets

CCC.Monitor.CN01 · Observability

Ensure that synthetic and uptime checks cannot consume the capacity of the endpoints they monitor.

Related Capabilities

IDTitleDescription
CCC.Monitor.CP06Synthetic MonitoringThe service may be configured to run scripted sample user interactions against an application on a schedule from provider-operated locations, in order to identify issues before real users are impacted.
CCC.Monitor.CP07Uptime MonitoringThe service may be configured to probe an endpoint from external provider-operated locations on a schedule and record whether it is reachable and responding.

Related Threats

IDTitleDescription
CCC.Monitor.TH03Monitoring Probes Overload the Monitored TargetSynthetic and uptime checks may be configured with excessive frequency, concurrency, or number of provider-operated locations, or their definitions may be modified to point at a different target. The probe traffic then consumes the capacity of the monitored endpoint from trusted provider address ranges that are typically exempt from rate limiting. This impacts the availability of the monitored system.

Assessment Requirements

IDTextApplicability
CCC.Monitor.CN01.AR01When a synthetic or uptime check is configured, its aggregate request rate across all probe locations MUST NOT exceed the rate approved for the target endpoint.tlp-clear, tlp-green, tlp-amber, tlp-red

Guideline Mappings

FrameworkIDRemarks
NIST-CSFPR.IR-01
NIST-CSFDE.CM-01
NIST_800_53SC-5
NIST_800_53SC-7