Ensure one HTTPS listener is configured for AWS Load Balancer

HIGH

Description

Not configuring AWS Load balancer to have one HTTPS listener could impact the confidentiality of data in transit.

Remediation

In AWS Console -

  1. Sign in to the AWS Console and open the Load Balancer Console.
  2. Choose the load balancer to edit and in the Actions drop down select Edit Listener.
  3. Set the Load Balancer Protocol to HTTPS.
  4. Select Change under the SSL Certificate and either enter the certificate details or choose one from ACM/IAM.
  5. Select Save.

In Terraform -

  1. In the aws_lb_listener resource, set the protocol to https.
  2. Set the certificate_arn to the ARN of the certificate to be used.

References:
https://docs.aws.amazon.com/elasticloadbalancing/latest/userguide/data-protection.html
https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/lb_listener

Policy Details

Rule Reference ID: AC_AWS_0454
CSP: AWS
Remediation Available: Yes
Resource: aws_lb_listener
Resource Category: Virtual Network
Resource Type: Load Balancer

Frameworks