Controls
5 controls from HIPAA Omnibus Rule 2013 apply to this module.
| Control | Clause | Change |
|---|---|---|
| ELB application and classic load balancer logging should be enabledelb_application_classic_lb_logging_enabled 164.308(a)(1)(ii)(D) | 164.308(a)(1)(ii)(D) | |
| ELB application load balancer deletion protection should be enabledelb_application_lb_deletion_protection_enabled 164.308(a)(1)(ii)(B) | 164.308(a)(1)(ii)(B) | |
| ELB application load balancers should be configured to drop HTTP headerselb_application_lb_drop_http_headers None | None | |
| ELB application and network load balancers should only use SSL or HTTPS listenerselb_application_network_lb_use_ssl_certificate 164.312(e)(2)(ii) | 164.312(e)(2)(ii) | |
| ELB application and network load balancer listeners should use secure protocolselb_application_network_listener_uses_secure_protocol 164.308(a)(1)(ii)(B) | 164.308(a)(1)(ii)(B) |