Load balancer should have access logging enabled

What it checks

Load balancer: access logging is not enabled.

Where it applies

Terraform: aws_lb, aws_alb, aws_elb

CloudFormation: AWS::ElasticLoadBalancing::LoadBalancer, AWS::ElasticLoadBalancingV2::LoadBalancer

How to fix it

1. Create an S3 bucket with the ELB service account bucket policy and set access_logs { enabled = true bucket = ... } on the load balancer.

Frameworks

• AWS FSBP ELB.5
• SOC 2 CC7.2
• HIPAA 164.312(b)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules