Query: ELB application load balancers should have at least one outbound rule

Description

Ensure application load balancers have at least one outbound rule in all the attached security groups. A security group without any outbound rule rejects all outgoing traffic. This means that all outgoing traffic originating from your cloud assets (instances, containers, etc.) will be dropped when it reaches the ELB layer.

Query

Tables used in this query:

• aws_ec2_application_load_balancer
• aws_vpc_security_group_rule

Controls using this query:

• ELB application load balancers should have at least one outbound rule

SQL