Ensure Application and Classic Load Balancers logging is enabled

[anayeaye]

What

Ensure Application and Classic Load Balancers logging is enabled.

https://docs.aws.amazon.com/securityhub/latest/userguide/elb-controls.html#elb-5

In VEDA MCP Prod the bucket veda-prod-logs has been created to share across all instance load balancers. A unique prefix should be used for each airflow, grafana, and keycloak.

Confirm log retention period (6 months) and encryption.

Parent issue

https://github.com/NASA-IMPACT/veda-architecture/issues/693

AC

• Optional logging can be enabled for web server load balancer to a configured S3 bucket and prefix