...
Only create AWS ALBs for low-risk data web applications .
How to verify that data is a low risk - How to perform data classification
Moderate risk and high risk data classification services cannot use AWS ALB, and must load balance through ITS F5/BigIP/LTM load balancing.
Low risk data do not need a Security Design Review ("SDR"):
Verify approval from YaleSites, and/or Yale School of Medicine ("YSM") med.yale.edu domain names, for the domain name and website content
For Yalesites approval - *.yale.edu - email webmaster@yale.edu
For med.yale.edu domain names, email the YSM, ysm.editor@yale.edu
Enter useful tag information for accounting purposes
...