const alb = new awsx.lb.ApplicationLoadBalancer(
  `${appName}-lb`,
  {
    loadBalancer: new aws.lb.LoadBalancer(`${appName}-alb`, {
      accessLogs: {
        bucket: logBucketId,
        enabled: true,
        prefix: appName,
      },
      dropInvalidHeaderFields: true,
      internal: false,
      securityGroups: [albSecurityGroup.id],
      subnets: publicSubnetIds,
    }),
    securityGroups: [],
    vpc: vpc.vpc,
  },
  {
    dependsOn: albSecurityGroup,
  },
);