Medium
ELB
Regional
Application and Network Load Balancer target groups should use encrypted health check protocols
Description
Flags ALB and NLB target groups whose health check protocol is not HTTPS. Health-check traffic sent over HTTP exposes endpoint paths and response bodies to anyone with network visibility between the load balancer and the target.
Remediation
Change the health check protocol on every applicable target group to HTTPS.
Steps
- Open the Amazon EC2 console and choose Target groups.
- Select the affected group and choose Edit on the Health checks tab.
- Set Health check protocol to HTTPS.
- Save the changes.