All checks
Medium
Application, Gateway, and Network Load Balancers should have deletion protection enabled
Confirms that deletion protection is enabled on Application, Gateway and Network Load Balancers, so the load balancer cannot be deleted, by mistake or otherwise, until protection is turned off. It does not stop the load balancer's listeners, target groups or security group rules being changed.
- service
- ELB
- severity
- Medium
- scope
- evaluated in every region
How to fix it
- Can break clients: Anything that deletes this load balancer, such as a pipeline that recreates it or terraform destroy, fails until protection is turned off first.
In the console
EC2 → Load balancers → the load balancer → Attributes → Protection
- Deletion protection
- On
With the AWS CLI
aws elbv2 modify-load-balancer-attributes --load-balancer-arn <load-balancer-arn> --attributes Key=deletion_protection.enabled,Value=true --region <region>With Terraform
resource "aws_lb" "this" {
subnets = var.subnet_ids
enable_deletion_protection = true
}See which of your accounts this check is failing on.
Book a live scan