Medium
ELB
Regional
Application Load Balancer and Network Load Balancer listeners should use secure protocols to encrypt data in transit
FSBP
Description
This control checks whether the listener for an Application Load Balancer or Network Load Balancer is configured to use a secure protocol for encryption of data in transit. The control fails if an Application Load Balancer listener isn't configured to use the HTTPS protocol or a Network Load Balancer listener isn't configured to use the TLS protocol.
Remediation
To configure secure protocols for your load balancer listeners, you need to update the listener protocol settings.
Steps
- Navigate to the Amazon EC2 console
- Go to 'Load Balancers' and select your load balancer
- Select the listener you want to configure
- Choose 'Edit' and go to 'Protocol' settings
- For Application Load Balancer: Change protocol to 'HTTPS'
- For Network Load Balancer: Change protocol to 'TLS'
- Configure SSL/TLS certificate if needed
- Save the changes to apply the secure protocol
Compliance
FSBP