AWS-ELBv2-ELBv2-No-Instances

Severity : High

Description: This control ensures that all ELBs have backend server resources. Those without any are consuming costs without providing any functionality as those ELBs are still charged for each hour or partial hour that a load balancer is running. Removing unused AWS resources like an Application Load Balancer (ALB) or a Network Load Balancer (NLB) will help avoid unexpected charges on AWS bill. Additionally, old ELBs with no target groups present a security concern if new target groups are accidentally attached. It's recommended to delete old ELBs that no longer have backend resources.

Remediation Steps:

Perform following to update IAM policy for IAM user :

  1. Login to the AWS Management Console at https://console.aws.amazon.com.

  2. Navigate to EC2 console.

  3. On the Left Pane, click on Load Balancing, and then select Load Balancers..

  4. Select the load balancer to remove.

  5. In the Action drop down list, Select the Delete.

  6. Confirm deletion by selecting confirm delete.

Important:

Reference:

Blue Hexagon Proprietary