resource "aws_lb" "global-ds-dev-gw-EXT" {
  #checkov:skip=CKV2_AWS_28: Ensure public facing ALB are protected by WAF
  desync_mitigation_mode                      = "defensive"
  drop_invalid_header_fields                  = false
  enable_cross_zone_load_balancing            = true
  enable_deletion_protection                  = true
  enable_http2                                = true
  enable_tls_version_and_cipher_suite_headers = false
  enable_waf_fail_open                        = false
  enable_xff_client_port                      = false
  idle_timeout                                = 60
  internal                                    = false
  ip_address_type                             = "ipv4"
  load_balancer_type                          = "application"
  name                                        = "global-ds-dev-gw-EXT"
  preserve_host_header                        = false
  security_groups = [
    "sg-033891663b44a868c",
  ]
  subnets = [
    "subnet-0c13faff97d006092",
    "subnet-0f3569bda722376b9",
  ]
  tags                       = {}
  tags_all                   = {}
  xff_header_processing_mode = "append"

  access_logs {
    bucket  = "sme-core-cloud-compliance-centralized-lb-euc1-logs"
    enabled = true
    prefix  = "sme-global-data-systems-dev"
  }

  
}