π§ AWS ELB Load Balancer Cross-Zone Load Balancing is not enabled - prod.logic.yamlπ’
- Contextual name: π§ prod.logic.yamlπ’
- ID:
/ce/ca/aws/elb/load-balancer-cross-zone/prod.logic.yaml
- Tags:
- π’ Logic test success
- π’ Logic with extracts
- π’ Logic with test data
Usesβ
- π AWS ELB Load Balancer
- π AWS ELB Load Balancer - object.extracts.yaml
- π AWS ELB Load Balancer Target Group - object.extracts.yaml
- π§ͺ test-data.json
Test Results π’β
Generated at: 2025-10-18T12:01:40.979092897Z Open
Result | Id | Condition Index | Condition Text | Runtime Error |
---|---|---|---|---|
π’ | test1 | βοΈ 99 | βοΈ isDisappeared(CA10__disappearanceTime__c) | βοΈ null |
π’ | test2 | βοΈ 199 | βοΈ extract('CA10__type__c') == 'classic' && extract('CA10__crossZoneLoadBalancing__c') == false | βοΈ null |
π’ | test3 | βοΈ 299 | βοΈ extract('CA10__type__c') == 'classic' && extract('CA10__crossZoneLoadBalancing__c') == true | βοΈ null |
π’ | test4 | βοΈ 399 | βοΈ (extract('CA10__type__c') == 'network' || extract('CA10__type__c') == 'gateway') && extract('caSetFrom_additionalAttributes__c').contains('load_balancing.cross_zone.enabled: false') | βοΈ null |
π’ | test5 | βοΈ 499 | βοΈ extract('CA10__type__c') == 'application' && CA10__AWS_EC2_Load_Balancer_Target_Group_Links__r.has(INCOMPLIANT) | βοΈ null |
π’ | test6 | βοΈ 599 | βοΈ extract('CA10__type__c') == 'application' && CA10__AWS_EC2_Load_Balancer_Target_Group_Links__r.has(COMPLIANT) | βοΈ null |
π’ | test7 | βοΈ 699 | βοΈ extract('caSetFrom_additionalAttributes__c').contains('load_balancing.cross_zone.enabled: true') | βοΈ null |
Generation Bundleβ
File | MD5 | |
---|---|---|
Open | /ce/ca/aws/elb/load-balancer-cross-zone/policy.yaml | 4394C90B0B38FFF9BBF151C957630904 |
Open | /ce/ca/aws/elb/load-balancer-cross-zone/prod.logic.yaml | 7E292DBE6E0B64F5059AB332786F14DF |
Open | /ce/ca/aws/elb/load-balancer-cross-zone/test-data.json | 24E3F6B8FC84E764DFD3A3AA352FA216 |
Open | /types/CA10__CaAwsLoadBalancer__c/object.extracts.yaml | 7D6D518BF9242B273982FC96DEB57121 |
Open | /types/CA10__CaAwsLoadBalancerTargetGroup__c/object.extracts.yaml | 8BCADEB8A83A60F6076714BAB02A79AF |
Available Commandsβ
repo-manager policies generate FULL /ce/ca/aws/elb/load-balancer-cross-zone/prod.logic.yaml
repo-manager policies generate DEBUG /ce/ca/aws/elb/load-balancer-cross-zone/prod.logic.yaml
repo-manager policies generate CAPTURE_TEST_DATA /ce/ca/aws/elb/load-balancer-cross-zone/prod.logic.yaml
repo-manager policies generate TESTS /ce/ca/aws/elb/load-balancer-cross-zone/prod.logic.yaml
# Execute tests
repo-manager policies test /ce/ca/aws/elb/load-balancer-cross-zone/prod.logic.yaml
Contentβ
---
inputType: "CA10__CaAwsLoadBalancer__c"
importExtracts:
- file: "/types/CA10__CaAwsLoadBalancer__c/object.extracts.yaml"
# recordTypes:
# - "caAwsLoadBalancerApplication"
# - "caAwsLoadBalancerClassic"
testData:
- file: "test-data.json"
conditions:
- status: "INCOMPLIANT"
currentStateMessage: "Cross-zone load balancing is disabled for this Classic Load Balancer."
remediationMessage: "Enable cross-zone load balancing in the Load Balancer's attributes."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__type__c"
right:
TEXT: "classic"
- IS_EQUAL:
left:
EXTRACT: "CA10__crossZoneLoadBalancing__c"
right:
BOOLEAN: false
- status: "COMPLIANT"
currentStateMessage: "Cross-zone load balancing is enabled for this Classic Load Balancer."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__type__c"
right:
TEXT: "classic"
- IS_EQUAL:
left:
EXTRACT: "CA10__crossZoneLoadBalancing__c"
right:
BOOLEAN: true
- status: "INCOMPLIANT"
currentStateMessage: "Cross-zone load balancing is disabled for this Load Balancer."
remediationMessage: "Enable the 'load_balancing.cross_zone.enabled' attribute for the Load Balancer."
check:
AND:
args:
- OR:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__type__c"
right:
TEXT: "network"
- IS_EQUAL:
left:
EXTRACT: "CA10__type__c"
right:
TEXT: "gateway"
- CONTAINS:
arg:
EXTRACT: "caSetFrom_additionalAttributes__c"
search:
TEXT: "load_balancing.cross_zone.enabled: false"
- status: "INCOMPLIANT"
currentStateMessage: "Cross-zone load balancing is disabled on at least one\
\ of the target groups associated with this Application Load Balancer."
remediationMessage: "Enable the 'load_balancing.cross_zone.enabled' attribute\
\ for all associated target groups."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__type__c"
right:
TEXT: "application"
- RELATED_LIST_HAS:
status: "INCOMPLIANT"
relationshipName: "CA10__AWS_EC2_Load_Balancer_Target_Group_Links__r"
- status: "COMPLIANT"
currentStateMessage: "Cross-zone load balancing is enabled for this Load Balancer."
check:
AND:
args:
- IS_EQUAL:
left:
EXTRACT: "CA10__type__c"
right:
TEXT: "application"
- RELATED_LIST_HAS:
status: "COMPLIANT"
relationshipName: "CA10__AWS_EC2_Load_Balancer_Target_Group_Links__r"
- status: "COMPLIANT"
currentStateMessage: "Cross-zone load balancing is enabled for this Load Balancer."
check:
CONTAINS:
arg:
EXTRACT: "caSetFrom_additionalAttributes__c"
search:
TEXT: "load_balancing.cross_zone.enabled: true"
otherwise:
status: "UNDETERMINED"
currentStateMessage: "Unexpected values in the fields."
relatedLists:
- relationshipName: "CA10__AWS_EC2_Load_Balancer_Target_Group_Links__r"
importExtracts:
- file: /types/CA10__CaAwsLoadBalancerTargetGroup__c/object.extracts.yaml
conditions:
- status: "INCOMPLIANT"
currentStateMessage: "The 'load_balancing.cross_zone.enabled' attribute is set to 'false' on this target group."
remediationMessage: "Enable cross-zone load balancing for this target group."
check:
CONTAINS:
arg:
EXTRACT: "CA10__targetGroup__r.caSetFrom_attributes__c"
search:
TEXT: "load_balancing.cross_zone.enabled: false"
- status: "COMPLIANT"
currentStateMessage: "The 'load_balancing.cross_zone.enabled' attribute is set to 'true'."
check:
CONTAINS_ANY:
arg:
EXTRACT: "CA10__targetGroup__r.caSetFrom_attributes__c"
search:
SET:
itemType: TEXT
items:
- "load_balancing.cross_zone.enabled: true"
- "load_balancing.cross_zone.enabled: use_load_balancer_configuration"
otherwise:
status: "UNDETERMINED"
currentStateMessage: "The 'load_balancing.cross_zone.enabled' attribute does not exist."