Is access_logs enforced for SOC 2?

Yes, Elastic Load Balancing activity is a central point of communication within an environment.

Is drop_invalid_header_fields enforced for SOC 2?

Yes, Ensure that your Elastic Load Balancers (ELB) are configured to drop http headers.

Upstream version 10.5.0

2 controls from SOC 2 requirements

soc2.compliance.tf/terraform-aws-modules/alb/aws

ELB application and classic load balancer logging should be enabled

elb_application_classic_lb_logging_enabled

Framework requirement

ELB application load balancers should be configured to drop HTTP headers

elb_application_lb_drop_http_headers

Framework requirement