AWS Load Balancer is not using TLS 1.2 misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_103
Category - Subcategory	Public Exposure - Encryption And Protocols
Provider	AWS
Severity	HIGH
Framework	CloudFormation, Serverless, Terraform, Terraform Plan

Impact

This rule ensures that the Load Balancer Listener is using at least TLS v1.2. TLS (Transport Layer Security) is a protocol that ensures privacy between communicating applications and their users on the Internet. When a server and client communicate, TLS ensures that no third party can eavesdrop or tamper with any message. This check validates that ElasticLoadBalancing V2 Listener is using at least TLS v1.2 to maintain strong security standards.

How to Fix

[source,go]

{ "Resources": { "ExampleALBListener": { "Type": "AWS::ElasticLoadBalancingV2::Listener", "Properties": { "Protocol": "HTTPS", "SslPolicy": "ELBSecurityPolicy-TLS-1-2-2017-01", ... } } } }

Resources: ExampleALBListener: Type: AWS::ElasticLoadBalancingV2::Listener Properties: Protocol: HTTPS SslPolicy: ELBSecurityPolicy-TLS-1-2-2017-01 ...