Amazon's load balancers have a network security policy which swallows ICMP packets for both
traceroute. It is listed as security group
amazon-elb/amazon-elb-sg. Personally I find these tools pretty helpful in diagnosing problems, so I'd like to be able to use them on my service. I'd rather the load balancer either responds to these requests or forwards them.
Is there any way to change the security group settings on an ELB? Or any other way to verify IP connectivity to the ELB?
To be clear, I see no way in the AWS console to either set the SG on a newly created ELB, nor to change the SG on an existing ELB.