Alb Not Public | Vulnerability Database

Load balancer is exposed to the internet.

There are many scenarios in which you would want to expose a load balancer to the wider internet, but this check exists as a warning to prevent accidental exposure of internal assets. You should ensure that this resource should be exposed publicly.

Impact

Recommended Actions

Follow the appropriate remediation steps below to resolve the issue.

Switch to an internal load balancer or add a tfsec ignore

1
2
3
4
5


Resources:
  GoodExample:
    Type: AWS::ElasticLoadBalancingV2::LoadBalancer
    Properties:
      Scheme: internal

Remediation Links

https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-elasticloadbalancingv2-loadbalancer.html

Switch to an internal load balancer or add a tfsec ignore

1
2
3
4


resource "aws_alb" "good_example" {
  load_balancer_type = "gateway"
  internal           = false
}

1
2
3


resource "aws_alb" "good_example" {
  internal = true
}

Remediation Links

https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/lb