AWS controltower documentation change
Summary
Updated terminology from 'Elastic Load Balancing (ELB)' to 'ELB (ELB)' and simplified references to ELB resources throughout the document. Minor phrasing adjustments in control descriptions and fix recommendations.
Security assessment
The changes are primarily terminology updates (abbreviation standardization) and do not alter the security requirements or recommendations. All security controls (deletion protection, logging, multi-AZ, connection draining, TLS policies) remain functionally unchanged. No evidence of addressing a specific vulnerability or weakness.
Diff
diff --git a/controltower/latest/controlreference/elb-rules.md b/controltower/latest/controlreference/elb-rules.md index a8ea354d5..dbac2fb9e 100644 --- a//controltower/latest/controlreference/elb-rules.md +++ b//controltower/latest/controlreference/elb-rules.md @@ -1544 +1544 @@ FAIL Example - Use this template to verify that the control prevents non-complia -Checks whether Elastic Load Balancing (ELB) has deletion protection activated. +Checks whether ELB (ELB) has deletion protection activated. @@ -1640 +1640 @@ Application Load Balancer configured with deletion protection active. The exampl - # Checks whether Elastic Load Balancing (ELB) has deletion protection activated. + # Checks whether ELB (ELB) has deletion protection activated. @@ -1846 +1846 @@ FAIL Example - Use this template to verify that the control prevents non-complia -This control checks whether your Elastic Load Balancing (ELB) application and network load balancers have logging activated. +This control checks whether your ELB (ELB) application and network load balancers have logging activated. @@ -1872 +1872 @@ This control checks whether your Elastic Load Balancing (ELB) application and ne -Elastic Load Balancing provides access logs that capture detailed information about requests sent to your load balancer. Each log contains information such as the time the request was received, the client's IP address, latencies, request paths, and server responses. You can use these access logs to analyze traffic patterns and to troubleshoot issues. +ELB provides access logs that capture detailed information about requests sent to your load balancer. Each log contains information such as the time the request was received, the client's IP address, latencies, request paths, and server responses. You can use these access logs to analyze traffic patterns and to troubleshoot issues. @@ -2018 +2018 @@ Network Load Balancer configured with access logging activated. The example is s - # This control checks whether your Elastic Load Balancing (ELB) application and network load balancers have logging activated. + # This control checks whether your ELB (ELB) application and network load balancers have logging activated. @@ -2402 +2402 @@ FAIL Example - Use this template to verify that the control prevents non-complia -This control checks whether an Elastic Load Balancing (ELB) classic load balancer has been configured with multiple Availability Zones. +This control checks whether an ELB (ELB) classic load balancer has been configured with multiple Availability Zones. @@ -2633 +2633 @@ Classic Load Balancer configured with two subnets. The example is shown in JSON - # This control checks whether an Elastic Load Balancing (ELB) Classic Load Balancer has been configured with multiple Availability Zones. + # This control checks whether an ELB (ELB) Classic Load Balancer has been configured with multiple Availability Zones. @@ -2647 +2647 @@ Classic Load Balancer configured with two subnets. The example is shown in JSON - # And: The input document does not contain any Elastic Load Balancing load balancer resources + # And: The input document does not contain any ELB load balancer resources @@ -2651 +2651 @@ Classic Load Balancer configured with two subnets. The example is shown in JSON - # And: The input document contains an Elastic Load Balancing load balancer resource + # And: The input document contains an ELB load balancer resource @@ -2656,2 +2656,2 @@ Classic Load Balancer configured with two subnets. The example is shown in JSON - # And: The input document contains an Elastic Load Balancing load balancer resource - # And: 'AvailabilityZones' been specified on the Elastic Load Balancing load balancer resource + # And: The input document contains an ELB load balancer resource + # And: 'AvailabilityZones' been specified on the ELB load balancer resource @@ -2663,2 +2663,2 @@ Classic Load Balancer configured with two subnets. The example is shown in JSON - # And: The input document contains an Elastic Load Balancing load balancer resource - # And: 'Subnets' been specified on the Elastic Load Balancing load balancer resource + # And: The input document contains an ELB load balancer resource + # And: 'Subnets' been specified on the ELB load balancer resource @@ -2669,2 +2669,2 @@ Classic Load Balancer configured with two subnets. The example is shown in JSON - # And: The input document contains an Elastic Load Balancing load balancer resource - # And: 'AvailabilityZones' been specified on the Elastic Load Balancing load balancer resource + # And: The input document contains an ELB load balancer resource + # And: 'AvailabilityZones' been specified on the ELB load balancer resource @@ -2675,2 +2675,2 @@ Classic Load Balancer configured with two subnets. The example is shown in JSON - # And: The input document contains an Elastic Load Balancing load balancer resource - # And: 'Subnets' been specified on the Elastic Load Balancing load balancer resource + # And: The input document contains an ELB load balancer resource + # And: 'Subnets' been specified on the ELB load balancer resource @@ -2986 +2986 @@ Classic Load Balancer configured with an HTTPS listener and AWS Certificate Mana - # And: The input document does not contain any Elastic Load Balancing load balancer resources + # And: The input document does not contain any ELB load balancer resources @@ -2990 +2990 @@ Classic Load Balancer configured with an HTTPS listener and AWS Certificate Mana - # And: The input document contains an Elastic Load Balancing load balancer resource + # And: The input document contains an ELB load balancer resource @@ -2995 +2995 @@ Classic Load Balancer configured with an HTTPS listener and AWS Certificate Mana - # And: The input document contains an Elastic Load Balancing load balancer resource + # And: The input document contains an ELB load balancer resource @@ -3001 +3001 @@ Classic Load Balancer configured with an HTTPS listener and AWS Certificate Mana - # And: The input document contains an Elastic Load Balancing load balancer resource + # And: The input document contains an ELB load balancer resource @@ -3598 +3598 @@ This control checks whether Classic Load Balancers have logging enabled. -Elastic Load Balancing provides access logs that capture detailed information about requests sent to your load balancer. Each log contains information such as the time the request was received, the client's IP address, latencies, request paths, and server responses. You can use these access logs to analyze traffic patterns and to troubleshoot issues. +ELB provides access logs that capture detailed information about requests sent to your load balancer. Each log contains information such as the time the request was received, the client's IP address, latencies, request paths, and server responses. You can use these access logs to analyze traffic patterns and to troubleshoot issues. @@ -3685 +3685 @@ Classic Load Balancer configured with an HTTPS listener and access logging. The - # And: The input document does not contain any Elastic Load Balancing load balancer resources + # And: The input document does not contain any ELB load balancer resources @@ -3689 +3689 @@ Classic Load Balancer configured with an HTTPS listener and access logging. The - # And: The input document contains an Elastic Load Balancing load balancer resource + # And: The input document contains an ELB load balancer resource @@ -3694 +3694 @@ Classic Load Balancer configured with an HTTPS listener and access logging. The - # And: The input document contains an Elastic Load Balancing load balancer resource + # And: The input document contains an ELB load balancer resource @@ -3701 +3701 @@ Classic Load Balancer configured with an HTTPS listener and access logging. The - # And: The input document contains an Elastic Load Balancing load balancer resource + # And: The input document contains an ELB load balancer resource @@ -4026 +4026 @@ FAIL Example - Use this template to verify that the control prevents non-complia -This control checks whether Elastic Load Balancing (ELB) Classic Load Balancers have connection draining configured. +This control checks whether ELB (ELB) Classic Load Balancers have connection draining configured. @@ -4052 +4052 @@ This control checks whether Elastic Load Balancing (ELB) Classic Load Balancers -Activating connection draining on Classic Load Balancers ensures that the load balancer stops sending requests to instances that are de-registering or unhealthy. It keeps the existing connections open. This configuration is particularly useful for instances in Auto Scaling groups, to ensure that connections aren't severed abruptly. +Activating connection draining on Classic Load Balancers ensures that the load balancer stops sending requests to instances that are de-registering or unhealthy. It keeps the existing connections open. This configuration is particularly useful for instances in Amazon EC2 Auto Scaling groups, to ensure that connections aren't severed abruptly. @@ -4056 +4056 @@ Activating connection draining on Classic Load Balancers ensures that the load b -Configure a `ConnectionDrainingPolicy` on Elastic Load Balancing Classic Load Balancers. +Configure a `ConnectionDrainingPolicy` on ELB Classic Load Balancers. @@ -4154 +4154 @@ Classic Load Balancer configured with connection draining active. The example is - # This control checks whether Elastic Load Balancing (ELB) Classic Load Balancers have connection draining configured. + # This control checks whether ELB (ELB) Classic Load Balancers have connection draining configured. @@ -4168 +4168 @@ Classic Load Balancer configured with connection draining active. The example is - # And: The input document does not contain any Elastic Load Balancing load balancer resources + # And: The input document does not contain any ELB load balancer resources @@ -4172 +4172 @@ Classic Load Balancer configured with connection draining active. The example is - # And: The input document contains an Elastic Load Balancing load balancer resource + # And: The input document contains an ELB load balancer resource @@ -4177 +4177 @@ Classic Load Balancer configured with connection draining active. The example is - # And: The input document contains an Elastic Load Balancing load balancer resource + # And: The input document contains an ELB load balancer resource @@ -4183 +4183 @@ Classic Load Balancer configured with connection draining active. The example is - # And: The input document contains an Elastic Load Balancing load balancer resource + # And: The input document contains an ELB load balancer resource @@ -4208 +4208 @@ Classic Load Balancer configured with connection draining active. The example is - [FIX]: Configure a 'ConnectionDrainingPolicy' on Elastic Load Balancing Classic Load Balancers. + [FIX]: Configure a 'ConnectionDrainingPolicy' on ELB Classic Load Balancers. @@ -4216 +4216 @@ Classic Load Balancer configured with connection draining active. The example is - [FIX]: Configure a 'ConnectionDrainingPolicy' on Elastic Load Balancing Classic Load Balancers. + [FIX]: Configure a 'ConnectionDrainingPolicy' on ELB Classic Load Balancers. @@ -4368 +4368 @@ FAIL Example - Use this template to verify that the control prevents non-complia -This control checks whether Elastic Load Balancing (ELB) Classic Load Balancer HTTPS/SSL listeners use the predefined security policy `ELBSecurityPolicy-TLS-1-2-2017-01`. +This control checks whether ELB (ELB) Classic Load Balancer HTTPS/SSL listeners use the predefined security policy `ELBSecurityPolicy-TLS-1-2-2017-01`. @@ -4400 +4400 @@ Using `ELBSecurityPolicy-TLS-1-2-2017-01` can help you to meet compliance and se - * This control applies only to Elastic Load Balancing Classic Load Balancers configured with HTTPS or SSL listeners. + * This control applies only to ELB Classic Load Balancers configured with HTTPS or SSL listeners. @@ -4500 +4500 @@ Classic Load Balancer configured with an HTTPS listener and SSL negotiation poli - # This control checks whether Elastic Load Balancing (ELB) Classic Load Balancer HTTPS/SSL listeners use the predefined security policy 'ELBSecurityPolicy-TLS-1-2-2017-01'. + # This control checks whether ELB (ELB) Classic Load Balancer HTTPS/SSL listeners use the predefined security policy 'ELBSecurityPolicy-TLS-1-2-2017-01'. @@ -4514 +4514 @@ Classic Load Balancer configured with an HTTPS listener and SSL negotiation poli - # And: The input document does not contain any Elastic Load Balancing LoadBalancer resources + # And: The input document does not contain any ELB LoadBalancer resources @@ -4518,2 +4518,2 @@ Classic Load Balancer configured with an HTTPS listener and SSL negotiation poli - # And: The input document contains an Elastic Load Balancing LoadBalancer resource - # And: There are no HTTPS or SSL 'Listeners' configured on the Elastic Load Balancing LoadBalancer resource + # And: The input document contains an ELB LoadBalancer resource + # And: There are no HTTPS or SSL 'Listeners' configured on the ELB LoadBalancer resource @@ -4523 +4523 @@ Classic Load Balancer configured with an HTTPS listener and SSL negotiation poli - # And: The input document contains an Elastic Load Balancing LoadBalancer resource + # And: The input document contains an ELB LoadBalancer resource @@ -4528 +4528 @@ Classic Load Balancer configured with an HTTPS listener and SSL negotiation poli - # And: The input document contains an Elastic Load Balancing LoadBalancer resource + # And: The input document contains an ELB LoadBalancer resource @@ -4535 +4535 @@ Classic Load Balancer configured with an HTTPS listener and SSL negotiation poli - # And: The input document contains an Elastic Load Balancing LoadBalancer resource + # And: The input document contains an ELB LoadBalancer resource @@ -4543 +4543 @@ Classic Load Balancer configured with an HTTPS listener and SSL negotiation poli - # And: The input document contains an Elastic Load Balancing LoadBalancer resource + # And: The input document contains an ELB LoadBalancer resource @@ -4896 +4896 @@ Classic Load Balancer configured with cross-zone load balancing active. The exam - # And: The input document does not contain any Elastic Load Balancing LoadBalancer resources + # And: The input document does not contain any ELB LoadBalancer resources @@ -4900 +4900 @@ Classic Load Balancer configured with cross-zone load balancing active. The exam - # And: The input document contains an Elastic Load Balancing LoadBalancer resource + # And: The input document contains an ELB LoadBalancer resource @@ -4905 +4905 @@ Classic Load Balancer configured with cross-zone load balancing active. The exam - # And: The input document contains an Elastic Load Balancing LoadBalancer resource + # And: The input document contains an ELB LoadBalancer resource @@ -4910 +4910 @@ Classic Load Balancer configured with cross-zone load balancing active. The exam - # And: The input document contains an Elastic Load Balancing LoadBalancer resource + # And: The input document contains an ELB LoadBalancer resource