Rule: ELB Application and Classic Load Balancer Logging Should Be Enabled

Rule Description:

Troubleshooting Steps (if any):

2. 1.
   Verify that you have the necessary permissions to enable logging for the ELB application and classic load balancer.
4. 2.
   Check if the ELB application and classic load balancer are properly configured and functioning.

Necessary Codes (if any):

Step-by-Step Guide for Remediation:

Enabling Logging for ELB Application Load Balancer:

2. 1.
   Open the AWS Management Console and navigate to the EC2 (Elastic Compute Cloud) service.
4. 2.
   Select the desired region where the ELB application load balancer is deployed.
6. 3.
   Click on the "Load Balancers" link in the left-hand menu.
8. 4.
   Identify the ELB application load balancer for which you want to enable logging.
10. 5.
    Select the load balancer and click on the "Listeners" tab.
12. 6.
    Navigate to the listener configuration where you want to enable logging.
14. 7.
    Click on the "View/edit logs" button next to the selected listener.
16. 8.
    In the "Log configuration" section, choose "Enable Access Logs".
18. 9.
    Specify the S3 bucket (existing or create a new one) where you want to store the access logs.
20. 10.
    Define the log file prefix if required.
22. 11.
    Choose the desired logging settings such as the interval, if the logging should roll over, and the format of the log entries.
24. 12.
    Click on "Save" to enable the logging for the ELB application load balancer.

Enabling Logging for Classic Load Balancer:

2. 1.
   Open the AWS Management Console and navigate to the EC2 (Elastic Compute Cloud) service.
4. 2.
   Select the desired region where the classic load balancer is deployed.
6. 3.
   Click on the "Load Balancers" link in the left-hand menu.
8. 4.
   Identify the classic load balancer for which you want to enable logging.
10. 5.
    Select the load balancer and click on the "Attributes" tab.
12. 6.
    Scroll down to the "Access Logs" section and click on the "Edit" button.
14. 7.
    Enable the logging by choosing "Enabled" from the dropdown menu.
16. 8.
    Specify the S3 bucket (existing or create a new one) where you want to store the access logs.
18. 9.
    Define the log file prefix if required.
20. 10.
    Choose the desired logging settings such as the interval, if the logging should roll over, and the format of the log entries.
22. 11.
    Click on "Save" to enable the logging for the classic load balancer.

Conclusion: