Threshold alarms are low severity if not anomalous

documentation/meta/monitoring/runbooks/api_thumbnails_avg_response_time_above_threshold.md

@@ -9,12 +9,14 @@ Alarm link:
 
 ## Severity Guide
 
-Confirm that there is not a total outage of the service. If not, the severity is
-likely low. Check for a recent deployment that may have introduced the problem,
-and rollback to the previous version. If not, check the request count and
-general network activity. If abnormally high, refer to the [traffic analysis run
-book][traffic_runbook] to identify and block any malicious traffic.
-
+If the avg response time is not [anomalously high][anomaly_alarm], the severity
+is likely low. Check for a recent deployment that may have introduced the
+problem, and rollback to the previous version. If not, check the request count
+and general network activity. If abnormally high, refer to the [traffic analysis
+run book][traffic_runbook] to identify and block any malicious traffic.
+
+[anomaly_alarm]:
+  https://us-east-1.console.aws.amazon.com/cloudwatch/home?region=us-east-1#alarmsV2:alarm/API+Thumbnails+Production+Average+Response+Time+anomalously+high
 [traffic_runbook]:
   /meta/monitoring/traffic/runbooks/identifying-and-blocking-traffic-anomalies.md
 

documentation/meta/monitoring/runbooks/api_thumbnails_p99_response_time_above_threshold.md

@@ -9,12 +9,14 @@ Alarm link:
 
 ## Severity Guide
 
-Confirm that there is not a total outage of the service. If not, the severity is
-likely low. Check for a recent deployment that may have introduced the problem,
-and rollback to the previous version. If not, check the request count and
-general network activity. If abnormally high, refer to the [traffic analysis run
-book][traffic_runbook] to identify and block any malicious traffic.
-
+If the P99 response time is not [anomalously high][anomaly_alarm], the severity
+is likely low. Check for a recent deployment that may have introduced the
+problem, and rollback to the previous version. If not, check the request count
+and general network activity. If abnormally high, refer to the [traffic analysis
+run book][traffic_runbook] to identify and block any malicious traffic.
+
+[anomaly_alarm]:
+  https://us-east-1.console.aws.amazon.com/cloudwatch/home?region=us-east-1#alarmsV2:alarm/API+Thumbnails+Production+P99+Response+Time+anomalously+high
 [traffic_runbook]:
   /meta/monitoring/traffic/runbooks/identifying-and-blocking-traffic-anomalies.md