All checks
Medium
Application, Gateway, and Network Load Balancers should have deletion protection enabled
Confirms that deletion protection is enabled on Application, Gateway and Network Load Balancers, so the load balancer cannot be deleted, by mistake or otherwise, until protection is turned off. It does not stop the load balancer's listeners, target groups or security group rules being changed.
- service
- ELB
- severity
- Medium
- scope
- evaluated in every region
How to fix it
In the console
EC2 → Load balancers → the load balancer → Attributes → Protection
With the AWS CLI
aws elbv2 modify-load-balancer-attributes --load-balancer-arn <load-balancer-arn> --attributes Key=deletion_protection.enabled,Value=true --region <region>With Terraform
resource "aws_lb" "this" {
subnets = var.subnet_ids
enable_deletion_protection = true
}See which of your accounts this check is failing on.
Book a demo