Is access_logs enforced for FedRAMP Moderate Baseline Rev 4?

Yes, Elastic Load Balancing activity is a central point of communication within an environment.

Is enable_deletion_protection enforced for FedRAMP Moderate Baseline Rev 4?

Yes, This rule ensures that Elastic Load Balancing has deletion protection enabled.

Is listeners enforced for FedRAMP Moderate Baseline Rev 4?

Yes, This control checks whether the HTTPS listener for an Application Load Balancer or the TLS listener for a Network Load Balancer is configured to encrypt data in transit by using a recommended security policy. The control fails if the HTTPS or TLS listener for a load balancer isn't configured to use a recommended security policy.

terraform-aws-modules/alb/aws for FedRAMP Moderate Baseline Rev 4

Controls

7 controls from FedRAMP Moderate Baseline Rev 4 apply to this module.

Control	Clause	Change
ELB application and classic load balancer logging should be enabledelb_application_classic_lb_logging_enabled AU-2(a)(d)	AU-2(a)(d)
ELB application load balancer deletion protection should be enabledelb_application_lb_deletion_protection_enabled None	None
ELB application and network load balancers should use recommended security policieselb_application_network_lb_https_tls_listener_recommended_security_policy SC-8(1)	SC-8(1)
ELB application and network load balancers should only use SSL or HTTPS listenerselb_application_network_lb_use_ssl_certificate None	None
ELB application and network load balancer listeners should use secure protocolselb_application_network_listener_uses_secure_protocol AC-17(2)	AC-17(2)
ELB network load balancers should have TLS listener security policy configuredelb_network_lb_tls_listener_security_policy_configured SC-8(1)	SC-8(1)
VPC Security groups should only allow unrestricted incoming traffic for authorized portsvpc_security_group_allows_ingress_authorized_ports SC-7	SC-7