Checks whether all running listeners of an SLB instance have access control enabled.
Scenarios
Access control on SLB listeners limits network exposure and strengthens cloud environment security.
Risk level
Default risk level: Medium.
You can change the risk level as needed.
Detection logic
-
An SLB instance is considered compliant if access control is enabled for all its running listeners.
-
An SLB instance is non-compliant if any running listener lacks access control. Remediation.
-
SLB instances without configured listeners are marked as not applicable.
Rule details
|
Parameter |
Description |
|
Rule name |
Access control is enabled for all running listeners of an SLB instance |
|
Rule ID |
slb-all-listener-enabled-acl |
|
Tags |
SLB, Listener |
|
Auto-remediation |
Not supported |
|
Rule trigger mechanism |
Configuration changes and periodic execution |
|
Trigger frequency |
24 hours |
|
Supported resource types |
Server Load Balancer |
|
Rule input parameters |
None |
Remediation
Enable access control for all listeners on your running SLB instances. Configure listener-level rules in Access control.