AWS elasticloadbalancing documentation change

Service: elasticloadbalancing · 2025-08-16 · Documentation medium

File: elasticloadbalancing/latest/network/load-balancer-security-groups.md

Summary

Added CloudFormation examples for managing Network Load Balancer security groups and security settings enforcement.

Security assessment

The changes provide implementation examples for security group management but do not address a specific security vulnerability. They improve documentation for existing security features (security group configuration) rather than responding to a security incident.

Diff

diff --git a/elasticloadbalancing/latest/network/load-balancer-security-groups.md b/elasticloadbalancing/latest/network/load-balancer-security-groups.md
index e0b153ca8..10528db98 100644
--- a//elasticloadbalancing/latest/network/load-balancer-security-groups.md
+++ b//elasticloadbalancing/latest/network/load-balancer-security-groups.md
@@ -108,0 +109,22 @@ Use the [set-security-groups](https://docs.aws.amazon.com/cli/latest/reference/e
+CloudFormation
+    
+
+###### To update the security groups
+
+Update the [AWS::ElasticLoadBalancingV2::LoadBalancer](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticloadbalancingv2-loadbalancer.html) resource.
+    
+    
+    Resources:
+      myLoadBalancer:
+        Type: 'AWS::ElasticLoadBalancingV2::LoadBalancer'
+        Properties:
+          Name: my-nlb
+          Type: network
+          Scheme: internal
+          Subnets: 
+            - !Ref subnet-AZ1
+            - !Ref subnet-AZ2
+          SecurityGroups: 
+            - !Ref mySecurityGroup
+            - !Ref myNewSecurityGroup
+
@@ -144,0 +167,22 @@ Use the [set-security-groups](https://docs.aws.amazon.com/cli/latest/reference/e
+CloudFormation
+    
+
+###### To update the security settings
+
+Update the [AWS::ElasticLoadBalancingV2::LoadBalancer](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-elasticloadbalancingv2-loadbalancer.html) resource.
+    
+    
+    Resources:
+      myLoadBalancer:
+        Type: 'AWS::ElasticLoadBalancingV2::LoadBalancer'
+        Properties:
+          Name: my-nlb
+          Type: network
+          Scheme: internal
+          EnforceSecurityGroupInboundRulesOnPrivateLinkTraffic: off
+          Subnets: 
+            - !Ref subnet-AZ1
+            - !Ref subnet-AZ2
+          SecurityGroups: 
+            - !Ref mySecurityGroup
+