Cloud Defense Logo

Products

Solutions

Company

Book A Live Demo

Rule: Application Load Balancer Redirects HTTP to HTTPS

This rule ensures Application Load Balancer redirects all HTTP requests to HTTPS.

RuleApplication Load Balancer should be configured to redirect all HTTP requests to HTTPS
FrameworkAWS Foundational Security Best Practices
Severity
Medium

Rule Description:

The Application Load Balancer (ALB) should be configured to redirect all HTTP requests to HTTPS. This rule ensures that all communication between clients and your application is encrypted, enhancing the security of your AWS environment.

Troubleshooting Steps:

  1. 1.
    Ensure that HTTPS listeners are configured correctly on the ALB.
  2. 2.
    Verify that SSL/TLS certificates are properly installed and associated with the HTTPS listeners.
  3. 3.
    Check the ALB's rule configuration to ensure that the HTTP to HTTPS redirect rule is configured correctly.
  4. 4.
    Verify that the ALB's security groups are allowing traffic on the appropriate ports (80 for HTTP and 443 for HTTPS).
  5. 5.
    Check if any custom error pages or redirects within the application are interfering with the ALB's redirect rule.

Necessary Codes:

No specific code is required for this rule, as it involves configuration settings in the AWS Management Console or CLI.

Step-by-Step Guide for Remediation:

  1. 1.
    Log in to the AWS Management Console.
  2. 2.
    Navigate to the EC2 service.
  3. 3.
    Select the Application Load Balancer that needs to be configured.
  4. 4.
    Click on the "Listeners" tab.
  5. 5.
    If there is no HTTPS listener present, click "Edit" and add a new listener with port 443 and an appropriate SSL/TLS certificate.
  6. 6.
    If there is an existing HTTPS listener, ensure that the correct SSL/TLS certificate is associated with it.
  7. 7.
    Click on the "Rules" tab.
  8. 8.
    Edit the existing rule or create a new one.
  9. 9.
    Configure the rule to redirect any HTTP request to HTTPS.
  10. 10.
    Save the changes and wait for them to take effect.
  11. 11.
    Test the ALB by attempting to access the application over HTTP. It should automatically redirect to the HTTPS version.
  12. 12.
    Monitor any logs or error messages for potential issues.

By following these steps, you can ensure that your Application Load Balancer redirects all HTTP requests to HTTPS, improving the overall security of your AWS environment.

Is your System Free of Underlying Vulnerabilities?
Find Out Now