All checks
Medium
ELB target groups should use encrypted transport protocols
Flags Elastic Load Balancing target groups whose protocol is not HTTPS, TLS or QUIC, which leaves traffic between the load balancer and its targets unencrypted even when clients connect to the load balancer over TLS.
- service
- ELB
- severity
- Medium
- scope
- evaluated in every region
How to fix it
In the console
EC2 → Target groups → Create target group
With the AWS CLI
aws elbv2 create-target-group --name <target-group-name> --protocol HTTPS --port 443 --vpc-id <vpc-id> --target-type instance --region <region>With Terraform
resource "aws_lb_target_group" "this" {
protocol = "HTTPS"
port = 443
vpc_id = var.vpc_id
}See which of your accounts this check is failing on.
Book a demo