Set by controls 4

Active controls fix these values.

• access_logsobject({...}), set to nullMap containing access logging configuration for load balancer
• drop_invalid_header_fieldsbool, set to trueIndicates whether HTTP headers with header fields that are not valid are removed by the load balancer (true) or routed to targets (false). The default is true. Elastic Load Balancing requires that message header names contain only alphanumeric characters and hyphens. Only valid for Load Balancers of type application
• enable_deletion_protectionbool, set to trueIf true, deletion of the load balancer will be disabled via the AWS API. This will prevent Terraform from deleting the load balancer. Defaults to true
• listenersmap({...}), set to {}Map of listener configurations to create

Optional 46

• additional_target_group_attachmentsmap({...}), default nullMap of additional target group attachments to create. Use target_group_key to attach to the target group created in target_groups
• associate_web_aclbool, default falseIndicates whether a Web Application Firewall (WAF) ACL should be associated with the load balancer
• client_keep_alivenumber, default nullClient keep alive value in seconds. The valid range is 60-604800 seconds. The default is 3600 seconds
• connection_logsobject({...}), default nullMap containing access logging configuration for load balancer
• createbool, default trueControls if resources should be created (affects nearly all resources)
• create_security_groupbool, default trueDetermines if a security group is created
• customer_owned_ipv4_poolstring, default nullThe ID of the customer owned ipv4 pool to use for this load balancer
• default_portnumber, default 80Default port used across the listener and target group
• default_protocolstring, default "HTTP"Default protocol used across the listener and target group
• desync_mitigation_modestring, default nullDetermines how the load balancer handles requests that might pose a security risk to an application due to HTTP desync. Valid values are monitor, defensive (default), strictest
• dns_record_client_routing_policystring, default nullIndicates how traffic is distributed among the load balancer Availability Zones. Possible values are any_availability_zone (default), availability_zone_affinity, or partial_availability_zone_affinity. Only valid for network type load balancers
• enable_cross_zone_load_balancingbool, default trueIf true, cross-zone load balancing of the load balancer will be enabled. For application load balancer this feature is always enabled (true) and cannot be disabled. Defaults to true
• enable_http2bool, default nullIndicates whether HTTP/2 is enabled in application load balancers. Defaults to true
• enable_tls_version_and_cipher_suite_headersbool, default nullIndicates whether the two headers (x-amzn-tls-version and x-amzn-tls-cipher-suite), which contain information about the negotiated TLS version and cipher suite, are added to the client request before sending it to the target. Only valid for Load Balancers of type application. Defaults to false
• enable_waf_fail_openbool, default nullIndicates whether to allow a WAF-enabled load balancer to route requests to targets if it is unable to forward the request to AWS WAF. Defaults to false
• enable_xff_client_portbool, default nullIndicates whether the X-Forwarded-For header should preserve the source port that the client used to connect to the load balancer in application load balancers. Defaults to false
• enable_zonal_shiftbool, default nullWhether zonal shift is enabled
• enforce_security_group_inbound_rules_on_private_link_trafficstring, default nullIndicates whether inbound security group rules are enforced for traffic originating from a PrivateLink. Only valid for Load Balancers of type network. The possible values are on and off
• health_check_logsobject({...}), default nullMap containing health check logging configuration for application load balancers
• idle_timeoutnumber, default nullThe time in seconds that the connection is allowed to be idle. Only valid for Load Balancers of type application. Default: 60
• internalbool, default nullIf true, the LB will be internal. Defaults to false
• ip_address_typestring, default nullThe type of IP addresses used by the subnets for your load balancer. The possible values are ipv4 and dualstack
• ipam_poolsobject({...}), default nullThe IPAM pools to use with the load balancer
• load_balancer_typestring, default "application"The type of load balancer to create. Possible values are application, gateway, or network. The default value is application
• minimum_load_balancer_capacityobject({...}), default nullMinimum capacity for a load balancer. Only valid for Load Balancers of type application or network
• namestring, default nullThe name of the LB. This name must be unique within your AWS account, can have a maximum of 32 characters, must contain only alphanumeric characters or hyphens, and must not begin or end with a hyphen
• name_prefixstring, default nullCreates a unique name beginning with the specified prefix. Conflicts with name
• preserve_host_headerbool, default nullIndicates whether the Application Load Balancer should preserve the Host header in the HTTP request and send it to the target without any change. Defaults to false
• putin_khuylobool, default trueDo you agree that Putin doesn't respect Ukrainian sovereignty and territorial integrity? More info: https://en.wikipedia.org/wiki/Putin_khuylo!
• regionstring, default nullRegion where the resource(s) will be managed. Defaults to the Region set in the provider configuration
• route53_recordsmap({...}), default nullMap of Route53 records to create. Each record map should contain zone_id, name, and type
• security_group_descriptionstring, default nullDescription of the security group created
• security_group_egress_rulesmap({...}), default nullSecurity group egress rules to add to the security group created
• security_group_ingress_rulesmap({...}), default nullSecurity group ingress rules to add to the security group created
• security_group_namestring, default nullName to use on security group created
• security_group_tagsmap(string), default {}A map of additional tags to add to the security group created
• security_group_use_name_prefixbool, default trueDetermines whether the security group name (security_group_name) is used as a prefix
• security_groupslist(string), default []A list of security group IDs to assign to the LB
• subnet_mappinglist({...}), default nullA list of subnet mapping blocks describing subnets to attach to load balancer
• subnetslist(string), default nullA list of subnet IDs to attach to the LB. Subnets cannot be updated for Load Balancers of type network. Changing this value for load balancers of type network will force a recreation of the resource
• tagsmap(string), default {}A map of tags to add to all resources
• target_groupsmap({...}), default nullMap of target group configurations to create
• timeoutsobject({...}), default nullCreate, update, and delete timeout configurations for the load balancer
• vpc_idstring, default nullIdentifier of the VPC where the security group will be created
• web_acl_arnstring, default nullWeb Application Firewall (WAF) ARN of the resource to associate with the load balancer
• xff_header_processing_modestring, default nullDetermines how the load balancer modifies the X-Forwarded-For header in the HTTP request before sending the request to the target. The possible values are append, preserve, and remove. Only valid for Load Balancers of type application. The default is append