Skip to main content

Elastic Load BalancerV2 Does Not Have Logging Enabled

Overview​

Check whether Elastic Load Balancers (ELBs) have logging functionality enabled. Without logging, it becomes impossible to monitor service utilization and perform threat analysis. It is advisable to activate ELB logging, establish a log lifecycle, and delineate specific use cases.

Vendor​

AWS

Cloud Service​

ELBv2

References​

https://docs.aws.amazon.com/securityhub/latest/userguide/elb-controls.html#elb-5, https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_DescribeLoadBalancers.html

Severity​

3

Item Types​

AWS::ElasticLoadBalancingV2::LoadBalancer