More Info:

Load balancers should have request logging enabled. Logging requests to ELB endpoints is a helpful way of detecting and investigating potential attacks.

Risk Level

Informational

Address

Security, Operational Maturity

Compliance Standards

HIPAA, GDPR, SOC2, NIST, ISO27001, HITRUST, NISTCSF, PCIDSS, FedRAMP

Triage and Remediation

Remediation

To remediate the misconfiguration of ELB not having logging enabled in AWS, you can follow the below steps using the AWS Console:

  1. Login to your AWS Management Console and navigate to the EC2 Dashboard.

  2. From the EC2 Dashboard, click on the Load Balancers link located on the left side of the page.

  3. Select the Load Balancer that you want to enable logging for.

  4. Click on the Edit Attributes button located at the bottom of the page.

  5. In the Edit Attributes window, scroll down to the Access Logs section.

  6. Select the Enable Access Logs checkbox.

  7. In the S3 Bucket field, enter the name of the S3 bucket where you want to store the access logs.

  8. In the S3 Prefix field, enter a prefix for the access logs.

  9. Click on the Save button to save the changes.

After following these steps, the ELB access logs will be enabled and will start logging to the specified S3 bucket. You can then use these logs for troubleshooting and analysis purposes.

Additional Reading: