Is access_logs enforced for NIST SP 800-53 Rev 5?

Yes, Elastic Load Balancing activity is a central point of communication within an environment.

Is enable_deletion_protection enforced for NIST SP 800-53 Rev 5?

Yes, This rule ensures that Elastic Load Balancing has deletion protection enabled.

Is listeners enforced for NIST SP 800-53 Rev 5?

Yes, This control checks whether the HTTPS listener for an Application Load Balancer or the TLS listener for a Network Load Balancer is configured to encrypt data in transit by using a recommended security policy. The control fails if the HTTPS or TLS listener for a load balancer isn't configured to use a recommended security policy.

terraform-aws-modules/alb/aws for NIST SP 800-53 Rev 5

Controls

7 controls from NIST SP 800-53 Rev 5 apply to this module.

Control	Clause	Change
ELB application and classic load balancer logging should be enabledelb_application_classic_lb_logging_enabled AC-4(26)	AC-4(26)
ELB application load balancer deletion protection should be enabledelb_application_lb_deletion_protection_enabled None	None
ELB application and network load balancers should use recommended security policieselb_application_network_lb_https_tls_listener_recommended_security_policy SC-8(1)	SC-8(1)
ELB application and network load balancers should only use SSL or HTTPS listenerselb_application_network_lb_use_ssl_certificate None	None
ELB application and network load balancer listeners should use secure protocolselb_application_network_listener_uses_secure_protocol AC-4(22)	AC-4(22)
ELB network load balancers should have TLS listener security policy configuredelb_network_lb_tls_listener_security_policy_configured SC-8(1)	SC-8(1)
VPC Security groups should only allow unrestricted incoming traffic for authorized portsvpc_security_group_allows_ingress_authorized_ports SC-7	SC-7