Managed instance groups should have autohealing enabled with a health check
Managed Instance Groups (MIGs) should have autohealing enabled with a valid health check configured. Autohealing automatically recreates unhealthy instances based on application-level health checks, ensuring continuous availability.
Without autohealing, MIGs cannot detect application-level failures such as crashes, freezes, or memory issues. Instances experiencing problems remain undetected and unreplaced, leading to service degradation, extended downtime, and requiring manual intervention to detect and replace failed instances.
What this control checks
Managed instance groups need autohealing enabled with a health check
Audit evidence
Evidence that deployed resources meet this control: Prowler check compute_instance_group_autohealing_enabled (prowler gcp --checks compute_instance_group_autohealing_enabled).
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
gcp_compute_instance_group_autohealing_enabled - Prowler Check:
compute_instance_group_autohealing_enabled
Last reviewed: 2026-10-09