Links

AWS ElasticLoadBalancing

Best practices and references below are based on published guidance from the cloud service provider and may reference native capabilities the cloud service provider offers. If you are not using the native security capabilities, the same security requirement can be met using other security capabilities your organization utilizes

Load Balancing

Design Guidance:

AWS::ElasticLoadBalancing::LoadBalancer

Type
Terraform
Policies
Terraform
Policies-Attributes
Terraform
Policies-Instance Ports
Terraform
Policies-Load Balancer Ports
Terraform
Policies-Policy Name
Terraform
Policies-Policy Type
Terraform
Scheme
Terraform

AWS::ElasticLoadBalancing::LoadBalancer

Listeners
Terraform
Listeners-Instance Port
Terraform
Listeners-Load Balancer Port
Terraform
Listeners-Policy Names
Terraform

Logging

Design Guidance:

AWS::ElasticLoadBalancing::LoadBalancer

Access Logging Policy
Terraform
Access Logging Policy-Emit Interval
Terraform
Access Logging Policy-Enabled
Terraform
Access Logging Policy-S3bucket Name
Terraform
Access Logging Policy-S3bucket Prefix
Terraform

Session Binding

Design Guidance:

AWS::ElasticLoadBalancing::LoadBalancer

App Cookie Stickiness Policy
Terraform
App Cookie Stickiness Policy-Cookie Name
Terraform
App Cookie Stickiness Policy-Policy Name
Terraform
Lbcookie Stickiness Policy
Terraform
Lbcookie Stickiness Policy-Cookie Expiration Period
Terraform
Lbcookie Stickiness Policy-Policy Name
Terraform

Design for High Availability

Design Guidance:

AWS::ElasticLoadBalancing::LoadBalancer

Availability Zones
Terraform
Health Check-Healthy Threshold
Terraform
Health Check-Interval
Terraform
Health Check-Target
Terraform
Health Check-Timeout
Terraform
Health Check-Unhealthy Threshold
Terraform

Configure Connection Draining

Design Guidance:

AWS::ElasticLoadBalancing::LoadBalancer

Connection Draining Policy-Enabled
Terraform
Connection Draining Policy-Timeout
Terraform

Session Limits

Design Guidance:

AWS::ElasticLoadBalancing::LoadBalancer

Connection Settings-Idle Timeout
Terraform

Asset Inventory

Design Guidance:

AWS::ElasticLoadBalancing::LoadBalancer

Instances
Terraform
Load Balancer Name
Terraform
Tags
Terraform

Firewalls

Design Guidance:

AWS::ElasticLoadBalancing::LoadBalancer

Security Groups
Terraform

Subnet Isolation

Design Guidance:

AWS::ElasticLoadBalancing::LoadBalancer

Subnets
Terraform

TLS

Design Guidance:

AWS::ElasticLoadBalancing::LoadBalancer

Listeners-Instance Protocol
Terraform
Listeners-Protocol
Terraform

Destination Authentication

Design Guidance:

AWS::ElasticLoadBalancing::LoadBalancer

Listeners-SSLcertificate Id
Terraform