resource "aws_lb" "grpsnvd3-app01" {
  # checkov:skip=CKV2_AWS_28:Ensure public facing ALB are protected by WAF
  desync_mitigation_mode                      = "defensive"
  drop_invalid_header_fields                  = true
  enable_cross_zone_load_balancing            = true
  enable_deletion_protection                  = true
  enable_http2                                = true
  enable_tls_version_and_cipher_suite_headers = false
  enable_waf_fail_open                        = true
  enable_xff_client_port                      = false
  idle_timeout                                = 60
  internal                                    = false
  ip_address_type                             = "ipv4"
  load_balancer_type                          = "application"
  name                                        = "grpsnvd3-app01"
  preserve_host_header                        = false
  security_groups = [
    "sg-0591ab1175cc996fa",
  ]
  tags                       = {}
  tags_all                   = {}
  xff_header_processing_mode = "append"

  access_logs {
    bucket  = "sme-labelcopy-schedule-dev-elb-use1-logs"
    enabled = true
    prefix  = "grpsnvd3-app01"
  }

  subnet_mapping {
    subnet_id = "subnet-05f8aa51d67767afe"
  }
  subnet_mapping {
    subnet_id = "subnet-0ab02d79b53b91d29"
  }
}