Rule: ELB Application Load Balancers Redirect HTTP to HTTPS

Rule Description

Troubleshooting Steps

2. 1.
   Verify that the ELB application load balancer is correctly configured to handle both HTTP and HTTPS traffic.
4. 2.
   Check if the ELB listener rules are properly set up to redirect HTTP to HTTPS.
6. 3.
   Ensure that the SSL/TLS certificate is correctly installed and associated with the ELB.

Necessary Code

aws elbv2 create-rule \
    --listener-arn <listener_arn> \
    --priority 1 \
    --conditions Field=host-header,Values=mydomain.com \
    --actions Type=redirect,RedirectConfig="{Protocol=HTTPS,Port=443,Host=#{host},Path=/${path},Query=#{query},StatusCode=HTTP_301}"

<listener_arn>

--conditions

--actions

Step-by-Step Guide for Remediation

2. 1.
   Log in to the AWS Management Console.
4. 2.
   Go to the EC2 service.
6. 3.
   Select the "Load Balancers" option from the left sidebar.
8. 4.
   Choose the desired ELB application load balancer from the list.
10. 5.
    Click on the "Listeners" tab.
12. 6.
    Identify the HTTP listener and click on the pencil (edit) icon next to it.
14. 7.
    In the "Listener Rules" section, click on "Add rule."
16. 8.
    Configure the rule as follows:

    • Set the "Priority" to 1 (or any desired value).
    • In the "Conditions" section, select "Host header" and enter the domain name or host header for your application.
    • In the "Actions" section, select "Redirect to" and choose "HTTPS" from the "Protocol" dropdown.
    • Optionally, you can specify the desired HTTP status code and customize the redirect path and query.
18. 9.
    Click "Save" to apply the redirect rule.
20. 10.
    Test the redirection by accessing your application using HTTP and verify that it automatically redirects to HTTPS.