AWS ELB Policy uses some unsecure protocols misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_213
Category - Subcategory	Public Exposure - Encryption And Protocols
Provider	AWS
Severity	LOW
Framework	Terraform

Impact

By ensuring that your AWS ELB policy only uses secure protocols, you can help prevent attackers from intercepting and reading sensitive information that is transmitted between your ELB and its clients. This can help protect your network and data from various types of attacks, including man-in-the-middle attacks, eavesdropping, and other types of data interception.

How to Fix

[source,go]

resource "aws_load_balancer_policy" "pass" { load_balancer_name = aws_elb.wu-tang.name policy_name = "wu-tang-ssl" policy_type_name = "SSLNegotiationPolicyType"

policy_attribute { name = "Protocol-TLSv1.2" value = "true" } }