Why did my CloudWatch alarm send me a notification after a single breached data point?

Your CloudWatch alarm might be configured to treat a missing data point the same way as a breaching data point.

When this happens, your alarm counts any missing data points following a breaching data point as additional breaches. This causes your alarm to notify you after only one data point breaches the defined threshold.

Edit your alarm to do one or more of the following:

• If you don't want to be notified after a single breach, change how missing data points are evaluated.
• Use longer evaluation periods.
• Increase the number of evaluation periods before the alarm is triggered.