AWS Application and Network Load Balancer (ALB & NLB) Terraform module
Upstream version 10.5.0
5 controls from NYDFS Cybersecurity Regulation requirements
Terraform Module Source
nydfs23.compliance.tf/terraform-aws-modules/alb/awsELB application and classic load balancer logging should be enabled
elb_application_classic_lb_logging_enabled
Framework requirement
ELB application load balancer deletion protection should be enabled
elb_application_lb_deletion_protection_enabled
Framework requirement
ELB application load balancers should be configured to drop HTTP headers
elb_application_lb_drop_http_headers
Framework requirement
ELB application and network load balancers should only use SSL or HTTPS listeners
elb_application_network_lb_use_ssl_certificate
Framework requirement
VPC Security groups should only allow unrestricted incoming traffic for authorized ports
vpc_security_group_allows_ingress_authorized_ports
Framework requirement