Back to All Checks
Medium ELB Regional

ELB target groups should use encrypted transport protocols

Description

Flags Elastic Load Balancing target groups whose transport protocol is not encrypted. Pass criteria: HTTPS, TLS, or QUIC. Target types of Lambda or ALB, and target groups using the GENEVE protocol, are out of scope for this control.

Remediation

Change the target group's transport protocol to HTTPS, TLS, or QUIC.

Steps

  1. Open the Amazon EC2 console and choose Target groups.
  2. Re-create the target group with Protocol set to HTTPS, TLS, or QUIC and migrate listeners to the new group.
  3. Delete the unencrypted target group once traffic has been moved.
Start Your Free Security Check