turbot/aws_compliance

Control: 10 Classic Load Balancers should span multiple Availability Zones

Description

This control checks whether a Classic Load Balancer has been configured to span multiple Availability Zones. The control fails if the Classic Load Balancer does not span multiple Availability Zones.

A Classic Load Balancer can be set up to distribute incoming requests across Amazon EC2 instances in a single Availability Zone or multiple Availability Zones. A Classic Load Balancer that does not span multiple Availability Zones is unable to redirect traffic to targets in another Availability Zone if the sole configured Availability Zone becomes unavailable.

Remediation

For information on how to add Availability Zones to a Classic Load Balancer, see Add or remove Availability Zones in the User Guide for Classic Load Balancers.

Usage

Run the control in your terminal:

powerpipe control run aws_compliance.control.foundational_security_elb_10

Snapshot and share results via Turbot Pipes:

powerpipe login
powerpipe control run aws_compliance.control.foundational_security_elb_10 --share

SQL

This control uses a named query:

elb_classic_lb_multiple_az_configured

Tags