This rule ensures that Auto Scaling groups with a load balancer implement health checks for better performance and reliability.
Rule | Auto Scaling groups with a load balancer should use health checks |
Framework | NIST 800-53 Revision 5 |
Severity | ✔ Critical |
Rule Description:
Auto Scaling groups with a load balancer should use health checks to ensure the availability and proper functioning of instances. This rule is aligned with NIST 800-53 Revision 5, which emphasizes the importance of monitoring and maintaining the health of systems in order to minimize disruptions and ensure continuous service delivery.
Troubleshooting Steps:
If instances in your Auto Scaling group are not passing health checks, follow these troubleshooting steps:
Verify Load Balancer Configuration:
Check Instance Health:
Analyze Health Check Settings:
Review Security Group Settings:
Check Application/Server Logs:
Monitor Network Traffic:
Necessary Codes:
Ensure you have the necessary codes in place to configure health checks for your Auto Scaling group with load balancer. Here is an example in AWS CLI:
aws autoscaling update-auto-scaling-group --auto-scaling-group-name <auto-scaling-group-name> --health-check-type ELB --health-check-grace-period <health-check-grace-period>
Replace
<auto-scaling-group-name>
with the name of your Auto Scaling group and <health-check-grace-period>
with the desired health check grace period in seconds.Remediation Steps:
To configure health checks for your Auto Scaling group with a load balancer, follow these step-by-step instructions:
Identify the Auto Scaling group:
Open the AWS Management Console:
Navigate to the Auto Scaling group:
Edit Auto Scaling group settings:
Configure health checks:
Save the changes:
Verify health check configuration:
By following these steps and implementing health checks for your Auto Scaling group with a load balancer, you can adhere to the NIST 800-53 Revision 5 requirement and ensure the availability and reliability of your infrastructure.