Evaluates whether health checks are configured for all listeners and forwarding rules of each Application Load Balancer (ALB) instance. The resource is compliant if health checks are enabled.
Scenarios
ALB uses health checks to verify backend server availability. This improves overall service availability by routing traffic away from unhealthy Elastic Compute Service (ECS) instances.
Risk level
Default risk level: high.
You can change the risk level based on your business requirements when you configure this rule.
Compliance evaluation logic
- If the health check feature is configured for all listeners and forwarding rules of each ALB instance, the evaluation result is Compliant.
- If the health check feature is not configured for all listeners and forwarding rules of an ALB instance, the evaluation result is Incompliant. To remediate an incompliant configuration, see Incompliance remediation.
Rule details
| Item | Description |
| Rule name | alb-all-listener-health-check-enabled |
| Rule identifier | alb-all-listener-health-check-enabled |
| Tag | ALB and LoadBalancer |
| Automatic remediation | Not supported |
| Trigger type | Periodic execution |
| Evaluation frequency | Interval of 24 hours |
| Supported resource type | ALB instances |
| Input parameter | None |
Incompliance remediation
Configure the health check feature for all listeners and forwarding rules of an ALB instance. For more information, see Configure and manage health checks.