i have a alert rule
A query collect many AWS instances
for example
When instance A raises an alarm, if the alarm is not resolved,
the alarm does not occur even if instance B, which is collected from query A, passes the policy.
I am not totally clear on the problem you describe, but it would seem you need to have two queries (A and B), with each being reduced to a single value (call it expression C and D).
Then, alert on the condition when section C is True (i.e. 1) and expression D is True. This looks like $C == 1 || $D == 1