AWS_ELB_66

ELB is created with Access logs enabled

Description

Ensure that your AWS Elastic Load Balancers use access logging to analyze traffic patterns and identify and troubleshoot security issues.

Remediation

To enable access logs for your load balancer using the console

1. Open the Amazon EC2 console at https://console.aws.amazon.com/ec2/.

2. On the navigation panel, under LOAD BALANCING, choose Load Balancers.

3. Select your load balancer.

4. On the Description tab, choose Configure Access Logs.

5. On the Configure Access Logs page, do the following:

  • Choose Enable access logs.
  • Leave Interval as the default, 60 minutes.
  • For S3 location, type the name of your S3 bucket, including the prefix (for example, my-loadbalancer-logs/my-app). You can specify the name of an existing bucket or a name for a new bucket.
  • (Optional) If the bucket does not exist, choose Create this location for me. You must specify a name that is unique across all existing bucket names in Amazon S3 and follows the DNS naming conventions. For more information, see Rules for bucket naming in the Amazon Simple Storage Service Developer Guide.
  • Choose Save.

Service

ELB

Severity

Medium

Compliance

Mapping

We are now live on AWS Marketplace.
The integrated view of your cloud infrastructure is now easier than ever!