Ensure access logging is enabled for AWS ELB

MEDIUM

Description

AWS ELB has access logging disabled which may lead to unmonitored logins and activities.

Remediation

In AWS Console -

  1. Sign in to the AWS Console and open the Load Balancer Console.
  2. Choose the load balancer to edit and in the Actions drop down select Edit load balancer attributes.
  3. Under Attributes, select Configure access logs.
  4. Check the Enable access logs box and provide an interval and S3 location.
  5. Select Save.

In Terraform -

  1. In the aws_elb resource, set the access_logs.enabled field to true.
  2. Provide an interval and bucket (S3 location).

References:
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elb#access_logs

Policy Details

Rule Reference ID: AC_AWS_0123
CSP: AWS
Remediation Available: Yes
Resource: aws_elb
Resource Category: Virtual Network

Frameworks