Control: 6 Application Load Balancer deletion protection should be enabled
Description
This control checks whether an Application Load Balancer has deletion protection enabled. The control fails if deletion protection is not configured.
Enable deletion protection to protect your Application Load Balancer from deletion.
Remediation
To prevent your load balancer from being deleted accidentally, you can enable deletion protection. By default, deletion protection is disabled for your load balancer.
If you enable deletion protection for your load balancer, you must disable delete protection before you can delete the load balancer.
To enable deletion protection from the console
- Open the Amazon EC2 console.
- On the navigation pane, under
LOAD BALANCING
, chooseLoad Balancers
. - Choose the load balancer.
- On the
Description
tab, chooseEdit attributes
. - On the
Edit load balancer attributes
page, selectEnable for Delete Protection
, and then chooseSave
. - Choose
Save
.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_elb_6
Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_elb_6 --share
SQL
This control uses a named query:
elb_application_lb_deletion_protection_enabled