Deletion protection disabled for load balancer misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_113
Category - Subcategory	Public Exposure - Load Balancing
Provider	AWS
Severity	MEDIUM
Framework	Terraform, Terraform Plan

Impact

This rule identifies Elastic Load Balancers v2 (ELBv2) which are configured with deletion protection feature disabled. Enabling delete protection for these ELBs prevents irreversible data loss resulting from accidental or malicious operations. For more details refer: https://docs.aws.amazon.com/elasticloadbalancing/latest/application/application-load-balancers.html#deletion-protection

How to Fix

Resource: aws_lb

• Arguments: enable_deletion_protection [source,go]

---

resource "aws_lb" "test_success" { ...

• enable_deletion_protection = true }

---