AWS ELB

Attach an SSL/TLS certificate to an HTTPS listener so your load balancer can terminate encrypted traffic for a new domain.

Retrieve all SSL/TLS certificates attached to a specific listener, including their ARNs and expiry metadata.

Detach an SSL/TLS certificate from an HTTPS listener to revoke access for a domain or clean up after decommissioning.

Provision a new Application, Network, or Gateway Load Balancer in a specified VPC with subnets, security groups, and scheme settings.

Delete a load balancer and release its resources, typically after decommissioning a service or cleaning up a temporary environment.

Retrieve configuration details and current state for a specific load balancer, including its DNS name, scheme, availability zones, and security groups.

Retrieve configuration and metadata for a target group, including its protocol, port, health-check settings, and attached load balancers.

Create a new target group with specified protocol, port, VPC, and health-check parameters to back a load balancer listener rule.

Delete an unused target group and free its configuration once the associated service or deployment is decommissioned.

Register one or more EC2 instances, IP addresses, or Lambda functions with a target group so the load balancer can route traffic to them.

Remove specific targets from a target group so the load balancer stops routing new requests to them, enabling graceful draining before shutdown.

Check the health status of all registered targets in a target group, returning state, reason codes, and availability zone per target.

Add an HTTPS or HTTP listener to a load balancer with a default action, port, protocol, and optional SSL certificate.

Remove a listener from a load balancer when a port or protocol is being retired or replaced.

Update load balancer attributes such as access logging, deletion protection, idle timeout, and cross-zone load balancing without recreating the resource.

Fires when a registered target transitions to the unhealthy state, scoped to a specific target group and availability zone.

Fires when the number of healthy targets in a group drops below a configured minimum threshold, signalling degraded capacity.

Fires when a load balancer transitions between states — provisioning, active, failed, or active-impaired — capturing every lifecycle change.

Fires when a new listener is added to a load balancer, capturing its port, protocol, and default action for auditing.

Fires when a listener is removed from a load balancer, enabling cleanup of dependent resources and audit trail updates.

Fires when the HTTPCode_ELB_5XX_Count metric crosses a CloudWatch alarm threshold, indicating the load balancer itself is returning server errors.

Fires when a new EC2 instance, IP, or Lambda function is registered with a target group, enabling post-registration validation workflows.