π§ AWS ELB Load Balancer Cross-Zone Load Balancing is not enabled - prod.logic.yamlπ’
- Contextual name: π§ prod.logic.yamlπ’
- ID:
/ce/ca/aws/elb/load-balancer-cross-zone/prod.logic.yaml - Tags:
- π’ Logic test success
- π’ Logic with extracts
- π’ Logic with test data
Usesβ
- π AWS ELB Load Balancer
- π AWS ELB Load Balancer - object.extracts.yaml
- π AWS ELB Load Balancer Target Group - object.extracts.yaml
- π§ͺ test-data.json
Test Results π’β
Generated at: 2026-02-10T22:32:53.568297408Z Open
| Result | Id | Condition Index | Condition Text | Runtime Error |
|---|---|---|---|---|
| π’ | test1 | βοΈ 99 | βοΈ isDisappeared(CA10__disappearanceTime__c) | βοΈ null |
| π’ | test2 | βοΈ 199 | βοΈ extract('CA10__type__c') == 'classic' && extract('CA10__crossZoneLoadBalancing__c') == false | βοΈ null |
| π’ | test3 | βοΈ 299 | βοΈ extract('CA10__type__c') == 'classic' && extract('CA10__crossZoneLoadBalancing__c') == true | βοΈ null |
| π’ | test4 | βοΈ 399 | βοΈ (extract('CA10__type__c') == 'network' || extract('CA10__type__c') == 'gateway') && extract('caSetFrom_additionalAttributes__c').contains('load_balancing.cross_zone.enabled: false') | βοΈ null |
| π’ | test5 | βοΈ 499 | βοΈ extract('CA10__type__c') == 'application' && CA10__AWS_EC2_Load_Balancer_Target_Group_Links__r.has(INCOMPLIANT) | βοΈ null |
| π’ | test6 | βοΈ 599 | βοΈ extract('CA10__type__c') == 'application' && CA10__AWS_EC2_Load_Balancer_Target_Group_Links__r.has(COMPLIANT) | βοΈ null |
| π’ | test7 | βοΈ 699 | βοΈ extract('caSetFrom_additionalAttributes__c').contains('load_balancing.cross_zone.enabled: true') | βοΈ null |
Generation Bundleβ
| File | MD5 | |
|---|---|---|
| Open | /ce/ca/aws/elb/load-balancer-cross-zone/policy.yaml | 4394C90B0B38FFF9BBF151C957630904 |
| Open | /ce/ca/aws/elb/load-balancer-cross-zone/prod.logic.yaml | D25B3BD10CD679F59F9866C1311826C8 |
| Open | /ce/ca/aws/elb/load-balancer-cross-zone/test-data.json | 24E3F6B8FC84E764DFD3A3AA352FA216 |
| Open | /types/CA10__CaAwsLoadBalancer__c/object.extracts.yaml | 9895F1EB30DFD8DDB6D571F452C5A7DE |
| Open | /types/CA10__CaAwsLoadBalancerTargetGroup__c/object.extracts.yaml | 8BCADEB8A83A60F6076714BAB02A79AF |
Available Commandsβ
repo-manager policies generate FULL /ce/ca/aws/elb/load-balancer-cross-zone/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/elb/load-balancer-cross-zone/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/elb/load-balancer-cross-zone/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/elb/load-balancer-cross-zone/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/elb/load-balancer-cross-zone/prod.logic.yaml
Contentβ
---
inputType: "CA10__CaAwsLoadBalancer__c"
importExtracts:
- file: "/types/CA10__CaAwsLoadBalancer__c/object.extracts.yaml"
# recordTypes:
# - "caAwsLoadBalancerApplication"
# - "caAwsLoadBalancerClassic"
testData:
- file: "test-data.json"
conditions:
- status: "INCOMPLIANT"
currentStateMessage: "Cross-zone load balancing is disabled for this Classic load balancer."
remediationMessage: "Enable cross-zone load balancing in the load balancer attributes."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__type__c"
right:
TEXT: "classic"
- IS_EQUAL:
left:
EXTRACT: "CA10__crossZoneLoadBalancing__c"
right:
BOOLEAN: false
- status: "COMPLIANT"
currentStateMessage: "Cross-zone load balancing is enabled for this Classic load balancer."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__type__c"
right:
TEXT: "classic"
- IS_EQUAL:
left:
EXTRACT: "CA10__crossZoneLoadBalancing__c"
right:
BOOLEAN: true
- status: "INCOMPLIANT"
currentStateMessage: "Cross-zone load balancing is disabled for this load balancer."
remediationMessage: "Enable the 'load_balancing.cross_zone.enabled' attribute for the load balancer."
check:
AND:
args:
- OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__type__c"
right:
TEXT: "network"
- IS_EQUAL:
left:
EXTRACT: "CA10__type__c"
right:
TEXT: "gateway"
- CONTAINS:
arg:
EXTRACT: "caSetFrom_additionalAttributes__c"
search:
TEXT: "load_balancing.cross_zone.enabled: false"
- status: "INCOMPLIANT"
currentStateMessage: "Cross-zone load balancing is disabled on at least one target group associated with this application load balancer."
remediationMessage: "Enable the 'load_balancing.cross_zone.enabled' attribute for all associated target groups."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__type__c"
right:
TEXT: "application"
- RELATED_LIST_HAS:
status: "INCOMPLIANT"
relationshipName: "CA10__AWS_EC2_Load_Balancer_Target_Group_Links__r"
- status: "COMPLIANT"
currentStateMessage: "Cross-zone load balancing is enabled for this load balancer."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__type__c"
right:
TEXT: "application"
- RELATED_LIST_HAS:
status: "COMPLIANT"
relationshipName: "CA10__AWS_EC2_Load_Balancer_Target_Group_Links__r"
- status: "COMPLIANT"
currentStateMessage: "Cross-zone load balancing is enabled for this load balancer."
check:
CONTAINS:
arg:
EXTRACT: "caSetFrom_additionalAttributes__c"
search:
TEXT: "load_balancing.cross_zone.enabled: true"
otherwise:
status: "UNDETERMINED"
currentStateMessage: "Unexpected values in the fields."
relatedLists:
- relationshipName: "CA10__AWS_EC2_Load_Balancer_Target_Group_Links__r"
importExtracts:
- file: /types/CA10__CaAwsLoadBalancerTargetGroup__c/object.extracts.yaml
conditions:
- status: "INCOMPLIANT"
currentStateMessage: "The 'load_balancing.cross_zone.enabled' attribute is set to 'false' on this target group."
remediationMessage: "Enable cross-zone load balancing for this target group."
check:
CONTAINS:
arg:
EXTRACT: "CA10__targetGroup__r.caSetFrom_attributes__c"
search:
TEXT: "load_balancing.cross_zone.enabled: false"
- status: "COMPLIANT"
currentStateMessage: "The 'load_balancing.cross_zone.enabled' attribute is set to 'true'."
check:
CONTAINS_ANY:
arg:
EXTRACT: "CA10__targetGroup__r.caSetFrom_attributes__c"
search:
SET:
itemType: TEXT
items:
- "load_balancing.cross_zone.enabled: true"
- "load_balancing.cross_zone.enabled: use_load_balancer_configuration"
otherwise:
status: "UNDETERMINED"
currentStateMessage: "The 'load_balancing.cross_zone.enabled' attribute is not set."