Rule: ELB Application Load Balancer Deletion Protection Enabled
This rule ensures that the deletion protection is enabled for ELB application load balancers.
| Rule | ELB application load balancer deletion protection should be enabled |
| Framework | NIST 800-171 Revision 2 |
| Severity | ✔ High |
Description
The ELB (Elastic Load Balancer) application load balancer deletion protection is a feature that helps prevent accidental deletion of load balancers in your AWS (Amazon Web Services) environment. This is particularly important for organizations that need to comply with the NIST 800-171 Revision 2 security standard.
Enabling deletion protection ensures the resilience and availability of your application load balancers, as it prevents them from being deleted by mistake or malicious intent. By enabling this feature, you add an extra layer of protection to critical components of your infrastructure.
Troubleshooting Steps
If deletion protection is not enabled for your ELB application load balancer and you need to troubleshoot any issues, follow these steps:
- 1.
Verify Deletion Protection State: First, check the current state of deletion protection for your load balancer. You can do this by accessing the AWS Management Console, navigating to the EC2 service, and then selecting the "Load Balancers" section. Locate your load balancer and check if deletion protection is enabled or disabled.
- 2.
Enable Deletion Protection: If deletion protection is not enabled, you can enable it by selecting the load balancer and clicking on the "Actions" button. From the dropdown menu, choose the "Edit deletion protection" option. Enable the deletion protection feature and save the changes.
Necessary Code
No necessary code is required to enable deletion protection for an ELB application load balancer. The process can be easily done through the AWS Management Console.
Step-by-Step Guide for Remediation
Follow these step-by-step instructions to enable deletion protection for an ELB application load balancer:
- 1.
Log in to your AWS Management Console.
- 2.
Navigate to the EC2 service.
- 3.
Click on "Load Balancers" in the left sidebar menu.
- 4.
Locate the specific ELB application load balancer that requires deletion protection and select it.
- 5.
In the top right corner, click on the "Actions" button.
- 6.
From the dropdown menu, choose "Edit deletion protection."
- 7.
In the deletion protection settings, enable the deletion protection option.
- 8.
Click the "Save" button to apply the changes.
- 9.
Verify that deletion protection is now enabled for the load balancer by checking the updated state in the load balancer details page.
By following these steps, you have successfully enabled deletion protection for your ELB application load balancer, ensuring compliance with the NIST 800-171 Revision 2 security standard.