No Unused ELBs Should Be Present

More Info:

You should not have unused Elastic Load Balancers in your AWS account. Unused ELBs should be deleted to help lower the cost of your monthly AWS bill.

Risk Level

Low

Address

Cost Optimisation

Compliance Standards

HITRUST, SOC2, NISTCSF

Triage and Remediation

Remediation

Using Console

Using CLI

To remediate the misconfiguration of having unused ELBs in AWS, you can follow the below steps using AWS CLI:

List all the ELBs in the AWS account using the following command:

aws elb describe-load-balancers

Identify the ELBs that are not being used and note down their names.
Delete the unused ELBs using the following command:

aws elb delete-load-balancer --load-balancer-name <ELB-Name>

Repeat step 3 for all the unused ELBs that you identified in step 2.
Verify that all the unused ELBs have been deleted using the following command:

aws elb describe-load-balancers

This should remediate the misconfiguration of having unused ELBs in AWS.

Using Python

To remediate the misconfiguration “No Unused ELBs Should Be Present” in AWS using Python, you can follow the below steps:

Import the required AWS SDK modules using the boto3 library in Python.
Use the describe_load_balancers() method to list all the load balancers available in your AWS account.
Use the describe_instance_health() method to check the instances associated with each load balancer and their health status.
Identify the unused load balancers by checking if there are any instances associated with them.
Use the delete_load_balancer() method to delete the unused load balancers.

Here’s the sample Python code to remediate the misconfiguration “No Unused ELBs Should Be Present” in AWS:

import boto3

# Create an EC2 client
elb_client = boto3.client('elbv2')

# Get all the load balancers in the account
response = elb_client.describe_load_balancers()

# Loop through each load balancer and check if there are any instances associated with it
for lb in response['LoadBalancers']:
    lb_arn = lb['LoadBalancerArn']
    instances = elb_client.describe_target_health(TargetGroupArn=lb_arn)

    # If there are no instances associated with the load balancer, delete it
    if len(instances['TargetHealthDescriptions']) == 0:
        elb_client.delete_load_balancer(LoadBalancerArn=lb_arn)

Note: Before running the script, make sure that you have configured the AWS credentials in your environment.

Additional Reading:

https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-cloudwatch-metrics.html

AWS Introduction

AWS Pricing

AWS Threats

AWS Misconfigurations

No Unused ELBs Should Be Present

More Info:

Risk Level

Address

Compliance Standards

Triage and Remediation

Remediation

Additional Reading:

AWS Introduction

AWS Pricing

AWS Threats

AWS Misconfigurations

​More Info:

​Risk Level

​Address

​Compliance Standards

​Triage and Remediation

​Remediation

​Additional Reading:

More Info:

Risk Level

Address

Compliance Standards

Triage and Remediation

Remediation

Additional Reading: