elb-logging-enabled

Checks if the Application Load Balancer and the Classic Load Balancer have logging enabled. The rule is NON_COMPLIANT if the access_logs.s3.enabled is false or access_logs.S3.bucket is not equal to the s3BucketName that you provided.

Note

The rule does not apply to Network Load Balancers or Gateway Load Balancers.

Identifier: ELB_LOGGING_ENABLED

Resource Types: AWS::ElasticLoadBalancing::LoadBalancer, AWS::ElasticLoadBalancingV2::LoadBalancer

Trigger type: Configuration changes

AWS Region: All supported AWS regions except Asia Pacific (Hyderabad), Europe (Spain) Region

Parameters:

s3BucketNames (Optional)

Type: CSV

Comma-separated list of Amazon S3 bucket names for Amazon ELB to deliver the log files.

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.