Question 1

Is access_logs enforced for AWS Well-Architected Framework v10?

Accepted Answer

Yes, Elastic Load Balancing activity is a central point of communication within an environment.

Question 2

Is desync_mitigation_mode enforced for AWS Well-Architected Framework v10?

Accepted Answer

Yes, This control checks whether an Application Load Balancer is configured with defensive or strictest desync mitigation mode. The control fails if an Application Load Balancer is not configured with defensive or strictest desync mitigation mode.

Question 3

Is drop_invalid_header_fields enforced for AWS Well-Architected Framework v10?

Accepted Answer

Yes, Ensure that your Elastic Load Balancers (ELB) are configured to drop http headers.

Question 4

Is internal enforced for AWS Well-Architected Framework v10?

Accepted Answer

Yes, An internet facing load balancer has a publicly resolvable DNS name, so it can route requests from clients over the internet to the EC2 instances that are registered with the load balancer.

Question 5

Is listeners enforced for AWS Well-Architected Framework v10?

Accepted Answer

Yes, This control checks whether the HTTPS listener for an Application Load Balancer or the TLS listener for a Network Load Balancer is configured to encrypt data in transit by using a recommended security policy. The control fails if the HTTPS or TLS listener for a load balancer isn't configured to use a recommended security policy.

AWS Application and Network Load Balancer (ALB & NLB) Terraform module

Terraform Module Source