Control: 9 Classic Load Balancers should have cross-zone load balancing enabled
Description
This control checks if cross-zone load balancing is enabled for the Classic Load Balancers (CLBs). The control fails if cross-zone load balancing is not enabled for a CLB.
A load balancer node distributes traffic only across the registered targets in its Availability Zone. When cross-zone load balancing is disabled, each load balancer node distributes traffic only across the registered targets in its Availability Zone. If the number of registered targets is not same across the Availability Zones, traffic wont be distributed evenly and the instances in one zone may end up over utilized compared to the instances in another zone. With cross-zone load balancing enabled, each load balancer node for your Classic Load Balancer distributes requests evenly across the registered instances in all enabled Availability Zones. For details see Cross-zone load balancing in the Elastic Load Balancing User Guide.
Remediation
To enable cross-zone load balancing in a Classic Load Balancer, see Enable cross-zone load balancing in the Elastic Load Balancing User Guide.
Usage
Run the control in your terminal:
powerpipe control run aws_compliance.control.foundational_security_elb_9Snapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run aws_compliance.control.foundational_security_elb_9 --shareSQL
This control uses a named query:
elb_classic_lb_cross_zone_load_balancing_enabled