AWS Load Balancers do not use strong ciphers misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC2_AWS_74
Category	Networking
Provider	AWS
Severity	LOW
Framework	Terraform, Terraform Plan

Impact

The rule is checking whether AWS Load Balancers are configured to use strong encryption ciphers for secure communication. Using weak or outdated encryption ciphers can expose data to interception or manipulation during transmission, making it easier for attackers to exploit vulnerabilities and compromise sensitive information. By ensuring that only strong ciphers are used, organizations can enhance the security of their network traffic, protect customer data, and comply with industry security standards and regulations.

How to Fix

To ensure that AWS Load Balancers use strong ciphers, configure the ssl_policy argument. Select a pre-defined policy that enforces the use of strong encryption methods. [source,go]

resource "aws_lb" "example" { ...

• ssl_policy = "ELBSecurityPolicy-TLS-1-2-2017-01" ... }

---