Ensure that your Amazon Auto Scaling Groups (ASGs) have associated Elastic Load Balancers in order to maintain the availability of the compute resources in the event of a failure and provide an evenly distributed application load. There are three types of Elastic Load Balancers that can be used with your Auto Scaling Groups: Classic Load Balancers, Application Load Balancers and Network Load Balancers. With Classic Load Balancers, the EC2 instances are registered with the load balancer. With Application Load Balancers and Network Load Balancers, the instances are registered as targets with a target group.
This rule can help you with the following compliance standards:
This rule resolution is part of the Cloud Conformity Security & Compliance tool for AWS
Integrating Amazon Auto Scaling Groups with Classic, Application or Network Load Balancers helps provide high availability and improve application performance through EC2 instance scaling.
To determine if your Auto Scaling Groups are using Elastic Load Balancers (i.e. Classic, Application or Network Load Balancers) for efficient application scaling and high availability, perform the following actions:
Remediation / Resolution
Case A: To create and attach Classic Load Balancers to existing Amazon Auto Scaling Groups (ASGs), perform the following actions:
Case B: To create Application/Network Load Balancers and associate their Target Group with your existing Amazon Auto Scaling Groups (ASGs), perform the following actions:
- AWS Documentation
- Auto Scaling Groups
- Troubleshooting Amazon EC2 Auto Scaling: Load Balancer Issues
- Attaching a Load Balancer to Your Auto Scaling Group
- Using a Load Balancer with an Auto Scaling Group
- Application Load Balancers
- Network Load Balancers
- CIS Amazon Web Services Foundations
- AWS Command Line Interface (CLI) Documentation
Unlock the Remediation Steps
Free 30-day Trial
Automatically audit your configurations with Conformity
and gain access to our cloud security platform.
You are auditing:
Check for Auto Scaling Groups with integrated Elastic Load Balancers.
Risk level: Medium