Skip to main content

🛡️ AWS ELB Load Balancer auto-provisioning status🟢

Stats​

not available

Logic​

Description​

Open File

Description​

Identify AWS ELB Load Balancers that appear to be associated with AWS-managed automated provisioning or management workflows.

This policy checks for AWS-managed tag signals that can help identify an ELB load balancer as associated with AWS CloudFormation, AWS Load Balancer Controller, AWS Service Catalog, or AWS Elastic Beanstalk.

Rationale​

AWS-managed provisioning tags can provide evidence that an ELB load balancer was created by, attached to, or managed through an AWS service workflow. This allows to distinguish load balancers with supported AWS-managed provisioning indicators from load balancers that are not identified by this tag-based method.

Audit​

This policy classifies an AWS ELB Load Balancer as identified by automated provisioning evidence when the load balancer has one of the following supported tag signals:

  • One of the AWS CloudFormation stack-level tags:
    • aws:cloudformation:logical-id
    • aws:cloudformation:stack-id
    • aws:cloudformation:stack-name
  • All AWS Load Balancer Controller ingress resource tags:

... see more

Remediation​

Open File

Remediation​

Review the ELB load balancer and confirm whether it is associated with an expected automated provisioning or service-managed workflow.

Use the load balancer tags, CloudFormation stack relationship, AWS Load Balancer Controller configuration, Service Catalog provisioned product, Elastic Beanstalk environment, and recent creation events to understand how the load balancer was created or is managed.

policy.yaml​

Open File