Medium
ELB
Regional
Application, Gateway, and Network Load Balancers should have deletion protection enabled
NIST
Description
This check ensures that deletion protection is enabled on Application Load Balancers. Deletion protection safeguards against accidental or unauthorized deletion, which can lead to application downtime.
Remediation
To enable deletion protection for Application Load Balancers, follow these steps:
Steps
- Open the Amazon EC2 console at https://console.aws.amazon.com/ec2/.
- On the navigation pane, under LOAD BALANCING, choose Load Balancers.
- Select the Application Load Balancer.
- Choose the Description tab, and find the Attributes section.
- If 'deletion_protection.enabled' is set to false, choose Edit attributes.
- Set 'deletion_protection.enabled' to true to enable deletion protection.
Compliance
NIST