resource "aws_lb" "rough-cuts-d-api-ext-alb" {
  #checkov:skip=CKV2_AWS_28: Ensure public facing ALB are protected by WAF
  desync_mitigation_mode                      = "defensive"
  drop_invalid_header_fields                  = false
  enable_cross_zone_load_balancing            = true
  enable_deletion_protection                  = false
  enable_http2                                = true
  enable_tls_version_and_cipher_suite_headers = false
  enable_waf_fail_open                        = false
  enable_xff_client_port                      = false
  idle_timeout                                = 60
  internal                                    = false
  ip_address_type                             = "ipv4"
  load_balancer_type                          = "application"
  name                                        = "rough-cuts-d-api-ext-alb"
  preserve_host_header                        = false
  security_groups = [
    "sg-0336051009a473849",
  ]
  subnets = [
    "subnet-00ae1172debb20dfc",
    "subnet-068806e66c3ffc7d5",
  ]
  tags = {
    "Business-Unit" = "Switch Board"
    "Environment"   = "UAT"
    "Project-Code"  = "Rough Cuts"
    "Project-Name"  = "Rough Cuts"
  }
  tags_all = {
    "Business-Unit" = "Switch Board"
    "Environment"   = "UAT"
    "Project-Code"  = "Rough Cuts"
    "Project-Name"  = "Rough Cuts"
  }
  xff_header_processing_mode = "append"

  access_logs {
    bucket  = "sme-core-cloud-compliance-centralized-lb-euc1-logs"
    enabled = true
    prefix  = "orch-switchboard-dev"
  }

}