Security is one of the most important aspects of any modern application, especially if that application has a public-facing entry point, such as a public ELB interface. The ELB service itself is very scalable and able to serve quite a substantial amount of traffic. But even the ELB has its own limitations. As we have already discussed in Chapter 3, VPC Network Security, AWS provides guidelines on how to minimize the scope and mitigate a Denial of Service (DoS) attack. The ELB can play a crucial role in this mitigation, and we need to look at the following aspects of security governing the way traffic can be secured on the ELB:
- Security controls on the ELB
- Security of the traffic contents with encryption
- Protection against DoS attacks