Link Search Menu Expand Document

Load balancer is exposed to the internet.

Explanation

There are many scenarios in which you would want to expose a load balancer to the wider internet, but this check exists as a warning to prevent accidental exposure of internal assets. You should ensure that this resource should be exposed publicly.

Insecure Example

The following example will fail the AWS005 check.

resource "aws_alb" "my-resource" {
	internal = false
}

Secure Example

The following example will pass the AWS005 check.

resource "aws_alb" "my-resource" {
	internal = true
}