Aqua CSPM

AutoScaling ELB Same Availability Zone

Quick Info

Plugin TitleAutoScaling ELB Same Availability Zone
CloudAWS
CategoryAutoScaling
DescriptionEnsures all autoscaling groups with attached ELBs are operating in the same availability zone.
More InfoTo work properly and prevent orphaned instances, ELBs must be created in the same availability zones as the backend instances in the autoscaling group.
AWS Linkhttps://docs.aws.amazon.com/autoscaling/ec2/userguide/as-add-availability-zone.html
Recommended ActionUpdate the ELB to use the same availability zones as the autoscaling group.

Detailed Remediation Steps

  1. Log in to the AWS Management Console.
  2. Select the “Services” option and search for EC2.
  3. In the EC2 Management console, scroll down and click on the “Auto Scaling groups” at the bottom.
  4. On the “Auto Scaling groups” page, select the auto scaling group which needs to be verified whether attached ELBs are operating in the same availability zone or not.
  5. On the “Auto Scaling groups” page, scroll down and check the “Network” tab for “Availability Zones” for Auto Sacling Group.
  6. Scroll down the page and click on the “Load balancer” attached to the Auto Scaling group, to check the Availability Zone of the Load balancer as well.
  7. On the “Load balancer” page, check under the description for the Availability Zone and if the Availability Zone of the Auto Scaling group is not the same as Load balancer, please make the changes accordingly.
  8. Repeat steps number 2 - 7 to check other groups in the account.
  9. Navigate to the EC2 console using the link https://console.aws.amazon.com/ec2/ .
  10. Scroll down the EC2 console page, select the Load balancer which needs to have the same Availability Zone as the Auto Scaling group.
  11. Click on the “Instance” tab and click on the “Edit Availability Zones” button.
  12. Select the “Availability Zone” from the Add and Remove Subnets which is the same as Auto Scaling group and click on the Save button to make the changes.
  13. Repeat steps number 9 - 12 to update the ELB to use the same availability zones as the Auto Scaling group.