Loading controls...
Benchmark: ELB
Description
This benchmark provides a set of controls that detect Terraform AWS ELB resources deviating from security best practices.
Usage
Browse dashboards and select ELB:
steampipe dashboard
Or run the benchmarks in your terminal:
steampipe check terraform_aws_compliance.benchmark.elb
Snapshot and share results via Steampipe Cloud:
steampipe loginsteampipe check --share terraform_aws_compliance.benchmark.elb
Controls
- Classic Load Balancers should have connection draining enabled
- ELB application and classic load balancer logging should be enabled
- ELB application load balancer deletion protection should be enabled
- ELB application load balancers should be drop HTTP headers
- ELB application load balancers should have Web Application Firewall (WAF) enabled
- ELB classic load balancers should have cross-zone load balancing enabled
- ELB classic load balancers should use SSL certificates
- ELB classic load balancers should only use SSL or HTTPS listeners