Rule: ELB Application and Classic Load Balancer Logging Enabled

Rule Description: ELB Application and Classic Load Balancer Logging for NIST 800-53 Revision 5

Troubleshooting Steps:

2. 1.

   Verify ELB Logging Configuration:

   • Check if the logging feature is enabled for your ELB Application and CLB.
   • Ensure that the logging settings are properly configured and matching the compliance requirements.
4. 2.

   Check Log Bucket Permissions:

   • Verify that the destination bucket where the logs are stored has the necessary permissions.
   • Ensure that the bucket is not publicly accessible and has proper ACLs and policies set.
6. 3.

   Review Log Retention Settings:

   • Confirm that the log retention period is appropriately configured.
   • Ensure that logs are retained for the required duration as per compliance requirements.

Necessary Codes:

Step-by-Step Guide for Remediation:

2. 1.

   Enable Logging for ELB Application:

   • Open the AWS Management Console.
   • Go to the EC2 service and select "Load Balancers" from the sidebar.
   • Choose the ELB Application Load Balancer that needs logging enabled.
   • Click on the "Listeners" tab.
   • Select the listener for which you want to enable logging.
   • Scroll down to the "Access logs" section and click on "View/edit access logs".
   • Enable access logs by selecting the checkbox and specify the S3 bucket and log prefix where logs will be stored.
   • Choose the desired log format and click on "Save".
4. 2.

   Enable Logging for Classic Load Balancer (CLB):

   • Open the AWS Management Console.
   • Go to the EC2 service and select "Load Balancers" from the sidebar.
   • Choose the Classic Load Balancer that needs logging enabled.
   • In the "Description" tab, click on the "Edit" button next to "Access logs".
   • Enable access logs by selecting the checkbox and specify the S3 bucket and log prefix where logs will be stored.
   • Choose the desired log format and click on "Save".
6. 3.

   Verify and Review Logging Configuration:

   • Check the ELB Application and CLB configuration to ensure that logging is enabled.
   • Verify that the logs are being sent to the specified S3 bucket.
   • Validate the log retention settings and confirm that logs are retained for the required duration.