All checks
Medium
Classic Load Balancer should span multiple Availability Zones
Ensures Classic Load Balancers span multiple Availability Zones for increased fault tolerance. The threshold is two zones, the default AWS sets for this control.
- service
- ELB
- severity
- Medium
- scope
- evaluated in every region
How to fix it
- Interrupts service: Register instances in the new zone before adding its subnet: zones get equal shares of requests, and without cross-zone load balancing (ELB.9) that share has nowhere to go.
In the console
EC2 → Load balancers → the load balancer → Network mapping → Edit subnets
- Network mapping
- One subnet in each of at least two Availability Zones, in zones where instances are registered
With the AWS CLI
aws elb attach-load-balancer-to-subnets --load-balancer-name <load-balancer-name> --subnets <subnet-id> --region <region>With Terraform
resource "aws_elb" "this" {
subnets = var.subnet_ids
listener {
lb_port = 80
lb_protocol = "http"
instance_port = 80
instance_protocol = "http"
}
}
See which of your accounts this check is failing on.
Book a live scan