AWS Elastic Load Balancer v2 (ELBv2) listener that allow connection requests over HTTP misconfigurat

AWS Elastic Load Balancer v2 (ELBv2) listener that allow connection requests over HTTP misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_2
Category - Subcategory	Public Exposure - Load Balancing
Provider	AWS
Severity	MEDIUM
Framework	CloudFormation, Serverless, Terraform, Terraform Plan
Mapped CSPM/KSPM Rule	b50c6eb5-eb27-4a28-978d-11984bf326c5

Impact

This rule identifies Elastic Load Balancers v2 (ELBv2) listener that are configured to accept connection requests over HTTP instead of HTTPS. As a best practice, use the HTTPS protocol to encrypt the communication between the application clients and the application load balancer.

How to Fix

Resource: AWS::ElasticLoadBalancingV2::Listener

• Arguments: Properties.Protocol / Properties.DefaultActions [source,go]

---

Resources: ListenerHTTPS: Type: AWS::ElasticLoadBalancingV2::Listener Properties: ...

Option 1:

• Protocol: HTTPS # Or TCP / TLS / UDP / TCP_UDP

Option 2:

• DefaultActions:
• • Type: redirect
• RedirectConfig:
• Protocol: HTTPS ...

---