LoadBalancers Object
Relationships
graph LR
LoadBalancers -->|"account"| Accounts
LoadBalancers -->|"network_boundary"| NetworkBoundaries
LoadBalancers -->|"attached_rule_sets"| FirewallRuleSets
Properties
Truto's stable unified identifier for this object. Opaque; use provider_id to address the object in the provider's own console or API.
The firewall rule sets (security groups) on the load balancer. Empty for load balancers that take none (gateway, and network load balancers created without).
The target's id.
When Truto actually read this object from the provider, in UTC ISO 8601 with the offset present — not the request time, and not a provider timestamp.
When the object was created at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.
The DNS name clients connect to.
Whether the load balancer has public addresses (on AWS: Scheme internet-facing). The provider flag, not proven reachability.
ipv4, dualstack or dualstack-without-public-ipv4, verbatim.
Every listener on the load balancer. Null when the listeners could not be read - see unreadable_fields; an empty array means none.
The default certificate(s) the listener serves (on AWS: ACM certificates). A certificate the provider keeps outside its certificate manager (on AWS: an IAM server certificate) is not a certificates object: it is left out here, flagged in unreadable_fields and kept in remote_data. Additional SNI certificates are not listed.
1 property
The target's id.
Types of the default actions, verbatim (forward, redirect, fixed-response, authenticate-oidc, authenticate-cognito).
The listener's provider id (ARN).
The lowest TLS version the policy accepts, as major.minor (1.0, 1.1, 1.2, 1.3).
Mutual TLS mode, verbatim (off, passthrough, verify). Null when not reported.
The port clients connect to.
The client-side protocol, verbatim (HTTP, HTTPS, TCP, TLS, UDP, TCP_UDP, GENEVE, QUIC, TCP_QUIC).
For an HTTP listener, whether its default action redirects to HTTPS. Null for other protocols.
The TLS security policy name, verbatim (on AWS: SslPolicy, e.g. ELBSecurityPolicy-TLS13-1-2-2021-06). Null for listeners that do not terminate TLS.
The TLS protocol versions the policy accepts, verbatim (TLSv1, TLSv1.1, TLSv1.2, TLSv1.3), read from the policy itself.
What the load balancer balances, normalised. application: HTTP and HTTPS requests, layer 7 (AWS Application Load Balancer, Azure Application Gateway, GCP Application Load Balancer). network: TCP, UDP and TLS connections, layer 4 (AWS Network Load Balancer, Azure Load Balancer, GCP Network Load Balancer). gateway: transparent traffic to inline network appliances (AWS and Azure Gateway Load Balancer). provider_load_balancer_type has the value verbatim.
applicationnetworkgatewayunknown
The load balancer name, verbatim.
The provider's own type string, unmodified — for example 'AWS::S3::Bucket', 'aws_iam_role', 'Microsoft.Sql/servers'. Used for display and drill-down.
The network the load balancer runs in.
The target's id.
Which cloud this object was read from.
awsazuregcp
The provider's own identifier, passed through verbatim — a full ARN, resource id, or self-link. Never truncated, prefixed, or normalized.
The provider's own type, verbatim (on AWS ELBv2: application, network or gateway).
The provider's own state string, verbatim (on AWS: active, provisioning, active_impaired, failed).
Where the object is located. 'global' denotes genuinely global resources (e.g. IAM, GCP VPC networks) rather than a guessed region. A substituted region (when none is derivable) is flagged in unreadable_fields.
Raw data returned from the remote API call.
State, normalised. creating: being set up (on AWS: provisioning). degraded: serving but impaired (on AWS: active_impaired). provider_state has the provider's value verbatim.
creatingactivedegradedfailedunknown
Subnets the load balancer has nodes in.
Key-value pairs exactly as the customer set them: no case folding, key/value normalization, or merging of separate provider concepts. An empty object means no tags; tags that could not be read appear in unreadable_fields instead.
Fields on this object that could not be read, and why. An empty array means everything was read. Use this to tell a real value from a missing one.
Explanation of the reason, where one adds anything.
The property on this resource that could not be read.
Why the field could not be read. available_on_get: Not read on list to keep the list fast; call GET for this resource's id to get it.
not_supported_by_providernot_configuredpermission_deniednot_collectedcollection_errorpartially_collectedavailable_on_get
When the object was last modified at the provider, in UTC ISO 8601. Null when the provider does not record one - see unreadable_fields.