AWS elasticloadbalancing medium security documentation change
Summary
Added new metrics: AppCookieNonStickinessCount for sticky session issues and ExcessiveLowReputationPackets for malicious traffic detection. Renamed ZonalShiftedHostCount to ActiveZonalShiftHostCount.
Security assessment
The ExcessiveLowReputationPackets metric explicitly tracks packets from known malicious sources exceeding rate limits, providing direct visibility into security threats. This indicates enhanced monitoring for security incidents involving malicious traffic.
Diff
diff --git a/elasticloadbalancing/latest/application/load-balancer-cloudwatch-metrics.md b/elasticloadbalancing/latest/application/load-balancer-cloudwatch-metrics.md index 44d7d9cd5..ef75a131d 100644 --- a//elasticloadbalancing/latest/application/load-balancer-cloudwatch-metrics.md +++ b//elasticloadbalancing/latest/application/load-balancer-cloudwatch-metrics.md @@ -64,0 +65,8 @@ Metric | Description +`AppCookieNonStickinessCount` | The number of requests where the load balancer chose a new target because it couldn't use an existing application-based sticky session. For example, the request was the first request from a new client and no application stickiness cookie was presented, a stickiness cookie was presented but it could not be decrypted, referred to a target that was no longer registered with the target group, or the stickiness cookie was malformed or expired. **Reporting criteria** : Application-based stickiness is enabled on the target group. **Statistics** : The only meaningful statistic is `Sum`. + +###### Dimensions + + * `LoadBalancer` + * `AvailabilityZone`, `LoadBalancer` + + @@ -95,0 +104,8 @@ Metric | Description +`ExcessiveLowReputationPackets` | The number of packets from known malicious sources that exceeded the rate limit. This represents packets that would have been dropped if the load balancer were in active blocking mode. **Reporting criteria** : There is a nonzero value. **Statistics** : The only meaningful statistic is `Sum`. + +###### Dimensions + + * `LoadBalancer` + * `AvailabilityZone`, `LoadBalancer` + + @@ -387 +403 @@ Metric | Description -`ZonalShiftedHostCount` | The number of targets that are considered disabled due to zonal shift. **Reporting criteria** : Reported when there is a value **Statistics** : The most useful statistic is `Sum`. +`ActiveZonalShiftHostCount` | The number of targets that are considered disabled due to zonal shift. **Reporting criteria** : Reported when there is a value **Statistics** : The most useful statistic is `Sum`.