Plugin Title | ELB HTTPS Only |
Cloud | AWS |
Category | ELB |
Description | Ensures ELBs are configured to only accept connections on HTTPS ports. |
More Info | For maximum security, ELBs can be configured to only accept HTTPS connections. Standard HTTP connections will be blocked. This should only be done if the client application is configured to query HTTPS directly and not rely on a redirect from HTTP. |
AWS Link | http://docs.aws.amazon.com/ElasticLoadBalancing/latest/DeveloperGuide/elb-security-policy-options.html |
Recommended Action | Remove non-HTTPS listeners from load balancer. |