Free plan Signups are open now. The full audytx engine — Terraform and CloudFormation — is live. The Free plan is 100 scans a month and stays free — paid tiers arrive Nov 01, 2026 from $20/month for unlimited repositories. Try it on your own code.

Load balancer has no target-group declaration in scanned input

AWS_OPS_049 LOW Cost

What it checks

Load balancer has no target-group declaration in scanned input

Where it applies

Terraform: aws_lb, aws_alb

CloudFormation: AWS::ElasticLoadBalancingV2::LoadBalancer

How to fix it

  1. Verify listeners and rules, including valid ALB fixed-response and redirect functions, weighted forwarding, external or module-owned target groups and deployment transitions. This check considers declarations broadly; it does not verify attachment to this particular load balancer.
  2. If a change is justified, preserve subtype-specific requirements: Application, Network and Gateway load balancers have different listeners and targets. Gateway target groups use GENEVE port 6081 and Gateway listeners omit Application-style port/protocol configuration. Remove a load balancer only after confirming it is unused and coordinating with its owner.

Frameworks

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules