Enable ELB Application and Classic Load Balancer Logging Rule

Rule Description: ELB Application and Classic Load Balancer Logging for NIST 800-53 Revision 5

Troubleshooting Steps:

2. 1.
   Verify that the Elastic Load Balancer (ELB) is created and associated with the appropriate resources.
4. 2.
   Check if the logging feature is enabled for the ELB. If not, configure it with the necessary settings.
6. 3.
   Ensure that the IAM role associated with the ELB has appropriate permissions to write logs to the desired log storage location.

Necessary Code:

Step-by-step Guide:

Enable Logging using AWS Management Console:

2. 1.
   Open the AWS Management Console and navigate to the EC2 service.
4. 2.
   In the navigation pane, click on "Load Balancers" to list all the available load balancers.
6. 3.
   Select the appropriate ELB Application or Classic Load Balancer for which you want to enable logging.
8. 4.
   Under the "Attributes" tab, click on "Edit" in the "Access logs" section.
10. 5.
    Enable the "Enable access logs" checkbox and specify the desired log storage location (e.g., S3 bucket) and prefix.
12. 6.
    Choose the desired log file format and click on "Save" to enable logging.

Enable Logging using CLI Commands:

2. 1.
   Open the AWS CLI or a terminal with AWS CLI configured.
4. 2.
   Use the following command to enable logging for an ELB Application Load Balancer:

aws elbv2 modify-load-balancer-attributes --load-balancer-arn <ELB_ARN> --attributes "Key=access_logs.s3.enabled,Value=true" "Key=access_logs.s3.bucket,Value=<BUCKET_NAME>" "Key=access_logs.s3.prefix,Value=<PREFIX>"

2. 1.
   Use the following command to enable logging for a Classic Load Balancer:

aws elb modify-load-balancer-attributes --load-balancer-name <ELB_NAME> --load-balancer-attributes "[]{\"Key\":\"accessLog\", \"Value\":\"Enabled\"}"

<ELB_ARN>

<BUCKET_NAME>

<PREFIX>

<ELB_NAME>