AWS awssupport documentation change
Summary
Updated references from 'Elastic Load Balancing' to 'ELB' acronym and standardized terminology for load balancer deletion protection checks
Security assessment
The changes are purely terminological (using ELB acronym instead of full service name) and do not introduce new security guidance or address vulnerabilities. While deletion protection and access logging relate to operational best practices, the modifications only update phrasing rather than adding/removing security controls.
Diff
diff --git a/awssupport/latest/user/operational-excellence-checks.md b/awssupport/latest/user/operational-excellence-checks.md index b8a6448ff..923f10a4d 100644 --- a//awssupport/latest/user/operational-excellence-checks.md +++ b//awssupport/latest/user/operational-excellence-checks.md @@ -5 +5 @@ -Amazon API Gateway Not Logging Execution LogsAmazon API Gateway REST APIs Without X-Ray Tracing EnabledAmazon CloudFront Access Log ConfiguredAmazon CloudWatch Alarm Action is DisabledAmazon EC2 Instance Not Managed by AWS Systems ManagerAmazon ECR Repository With Tag Immutability DisabledAmazon ECS clusters with Container Insights disabledAmazon ECS task logging not enabledAmazon OpenSearch Service logging CloudWatch not configuredAmazon RDS DB instances in the clusters with heterogeneous parameter groupsAmazon RDS Enhanced Monitoring is turned offAmazon RDS Performance Insights is turned offAmazon RDS track_counts parameter is turned offAmazon Redshift cluster audit logging Amazon S3 Access Logs EnabledAmazon S3 does not have Event Notifications enabledAmazon SNS Topics Not Logging Message Delivery StatusAmazon VPC Without Flow LogsApplication Load Balancers and Classic Load Balancers Without Access Logs EnabledCloudFormation Stack NotificationAWS CloudTrail data events logging for objects in an S3 bucketAWS CodeBuild Project LoggingAWS CodeDeploy Auto Rollback and Monitor EnabledAWS CodeDeploy Lambda is using all-at-once deployment configurationAWS Elastic Beanstalk Enhanced Health Reporting is not ConfiguredAWS Elastic Beanstalk with Managed Platform Updates DisabledAWS Fargate platform version is not latestAWS Systems Manager State Manager Association in Non-compliant StatusCloudTrail trails are not configured with Amazon CloudWatch LogsElastic Load Balancing Deletion Protection Not Enabled for Load BalancersRDS DB Cluster Deletion Protection Check RDS DB Instance Automatic Minor Version Upgrade Check +Amazon API Gateway Not Logging Execution LogsAmazon API Gateway REST APIs Without X-Ray Tracing EnabledAmazon CloudFront Access Log ConfiguredAmazon CloudWatch Alarm Action is DisabledAmazon EC2 Instance Not Managed by AWS Systems ManagerAmazon ECR Repository With Tag Immutability DisabledAmazon ECS clusters with Container Insights disabledAmazon ECS task logging not enabledAmazon OpenSearch Service logging CloudWatch not configuredAmazon RDS DB instances in the clusters with heterogeneous parameter groupsAmazon RDS Enhanced Monitoring is turned offAmazon RDS Performance Insights is turned offAmazon RDS track_counts parameter is turned offAmazon Redshift cluster audit logging Amazon S3 Access Logs EnabledAmazon S3 does not have Event Notifications enabledAmazon SNS Topics Not Logging Message Delivery StatusAmazon VPC Without Flow LogsApplication Load Balancers and Classic Load Balancers Without Access Logs EnabledCloudFormation Stack NotificationAWS CloudTrail data events logging for objects in an S3 bucketAWS CodeBuild Project LoggingAWS CodeDeploy Auto Rollback and Monitor EnabledAWS CodeDeploy Lambda is using all-at-once deployment configurationAWS Elastic Beanstalk Enhanced Health Reporting is not ConfiguredAWS Elastic Beanstalk with Managed Platform Updates DisabledAWS Fargate platform version is not latestAWS Systems Manager State Manager Association in Non-compliant StatusCloudTrail trails are not configured with Amazon CloudWatch LogsELB Deletion Protection Not Enabled for Load BalancersRDS DB Cluster Deletion Protection Check RDS DB Instance Automatic Minor Version Upgrade Check @@ -71 +71 @@ You can use the following checks for the operational excellence category. - * [Elastic Load Balancing Deletion Protection Not Enabled for Load Balancers](./operational-excellence-checks.html#elb-deletion-protection-enabled) + * [ELB Deletion Protection Not Enabled for Load Balancers](./operational-excellence-checks.html#elb-deletion-protection-enabled) @@ -1220 +1220 @@ Checks if Application Load Balancers and Classic Load Balancers have access logg -Elastic Load Balancing provides access logs that capture detailed information about requests sent to your load balancer. Each log contains information such as the time the request was received, the client's IP address, latencies, request paths, and server responses. You can use these access logs to analyze traffic patterns and troubleshoot issues. +ELB provides access logs that capture detailed information about requests sent to your load balancer. Each log contains information such as the time the request was received, the client's IP address, latencies, request paths, and server responses. You can use these access logs to analyze traffic patterns and troubleshoot issues. @@ -1222 +1222 @@ Elastic Load Balancing provides access logs that capture detailed information ab -Access logs are an optional feature of Elastic Load Balancing that is disabled by default. After you enable access logs for your load balancer, Elastic Load Balancing captures the logs and stores them in the Amazon S3 bucket that you specify. +Access logs are an optional feature of Elastic Load Balancing that is disabled by default. After you enable access logs for your load balancer, ELB captures the logs and stores them in the Amazon S3 bucket that you specify. @@ -1880 +1880 @@ For more information, see [Creating CloudWatch alarms for CloudTrail events: exa -## Elastic Load Balancing Deletion Protection Not Enabled for Load Balancers +## ELB Deletion Protection Not Enabled for Load Balancers @@ -1887 +1887 @@ Checks if deletion protection is turned on for your load balancers. -Elastic Load Balancing supports deletion protection for your Application Load Balancers, Network Load Balancers, and Gateway Load Balancers. Turn on deletion protection to prevent your load balancer from accidental deletion. Deletion protection is turned off by default when you create a load balancer. If your load balancers are part of a production environment, then consider turning on deletion protection. +ELB supports deletion protection for your Application Load Balancers, Network Load Balancers, and Gateway Load Balancers. Turn on deletion protection to prevent your load balancer from accidental deletion. Deletion protection is turned off by default when you create a load balancer. If your load balancers are part of a production environment, then consider turning on deletion protection. @@ -1889 +1889 @@ Elastic Load Balancing supports deletion protection for your Application Load Ba -Access logs are an optional feature of Elastic Load Balancing that is disabled by default. After you enable access logs for your load balancer, Elastic Load Balancing captures the logs and stores them in the Amazon S3 bucket that you specify. +Access logs are an optional feature of Elastic Load Balancing that is disabled by default. After you enable access logs for your load balancer, ELB captures the logs and stores them in the Amazon S3 bucket that you specify.