AWS_ELB_71

Make sure that ALB is protected by a WAF

Ensure that all your public AWS ALB are integrated with the Web Application Firewall (AWS WAF) service to protect against application-layer attacks

Go to the AWS WAF service page and select the Web ACLs.
Create a new Web ACL or select an existing one
Select the Associated AWS resources tab
Click on Add AWS resources
Under Resource Type, Select the resource type and then select the resource you want to associate with this web ACL. Note this rule requires the following permission: waf – regional : ListResourcesForWebACL Reference : https://docs.aws.amazon.com/waf/latest/developerguide/getting-started.html