---
- input:
    Resources: {}
  expectations:
    rules:
      ensure_all_elbs_are_secure: SKIP
      ensure_elbs_are_internal: SKIP
- input:
    Resources:
      ServiceLBPublicListener46709EAA:
        Type: "AWS::ElasticLoadBalancingV2::Listener"
        Properties:
          Protocol: HTTPS
          Certificates:
            - CertificateArn: "arn:aws:acm..."
  expectations:
    rules:
      ensure_all_elbs_are_secure: PASS
      ensure_elbs_are_internal: FAIL
- input:
    Resources:
      ServiceLBPublicListener46709EAA:
        Type: "AWS::ElasticLoadBalancingV2::Listener"
  expectations:
    rules:
      ensure_all_elbs_are_secure: FAIL
      ensure_elbs_are_internal: FAIL
- input:
    Resources:
      ServiceLBPublicListener46709EAA:
        Type: "AWS::ElasticLoadBalancingV2::Listener"
        Properties:
          Protocol: HTTPS
          Certificates:
            - CertificateArn: "arn:aws:acm..."
      ServiceLBPublicListener4670GGG:
        Type: "AWS::ElasticLoadBalancingV2::Listener"
  expectations:
    rules:
      ensure_all_elbs_are_secure: FAIL
      ensure_elbs_are_internal: FAIL
- input:
    Resources:
      ServiceLBPublicListener46709EAA:
        Type: "AWS::ElasticLoadBalancingV2::Listener"
        Properties:
          Protocol: HTTPS
          Certificates:
            - CertificateArn: "arn:aws:acm..."
      ServiceLBPublicListener4670GGG:
        Type: "AWS::ElasticLoadBalancingV2::Listener"
        Properties:
          Protocol: HTTPS
          Certificates:
            - CertificateArn: "arn:aws:acm..."
  expectations:
    rules:
      ensure_all_elbs_are_secure: PASS
      ensure_elbs_are_internal: FAIL
- input:
    Resources:
      ServiceLBPublicListener46709EAA:
        Type: "AWS::ElasticLoadBalancingV2::Listener"
        Properties:
          Scheme: 'internal'
          Protocol: HTTPS
          Certificates:
            - CertificateArn: "arn:aws:acm..."
      ServiceLBPublicListener4670GGG:
        Type: "AWS::ElasticLoadBalancingV2::Listener"
        Properties:
          Scheme: 'internal'
          Protocol: HTTPS
          Certificates:
            - CertificateArn: "arn:aws:acm..."
  expectations:
    rules:
      ensure_all_elbs_are_secure: PASS
      ensure_elbs_are_internal: PASS