Terraform

Terraform

Made by DeepSource

Load balancer is exposed to the internet TF-AWS005

Security
Critical

Warns against to prevent accidental exposure of internal assets.

There are many scenarios in which you would want to expose a load balancer to the wider internet, but this check exists as a warning to prevent accidental exposure of internal assets. You should ensure that this resource should be exposed publicly.

Examples

Bad practice

resource "aws_alb" "my-resource" {
    internal = false
}

Recommended

resource "aws_alb" "my-resource" {
    internal = true
}

References