Rule: ELB Application Load Balancers Redirect HTTP Requests to HTTPS
This rule ensures that ELB Application Load Balancers redirect HTTP requests to HTTPS for enhanced security.
| Rule | ELB application load balancers should redirect HTTP requests to HTTPS |
| Framework | FedRAMP Low Revision 4 |
| Severity | ✔ Medium |
Rule Description
The rule requires Elastic Load Balancer (ELB) application load balancers to redirect HTTP requests to HTTPS for FedRAMP Low Revision 4 compliance. This ensures the security of data transmitted over the network by enforcing the use of secure connections.
Troubleshooting Steps (if applicable)
No specific troubleshooting steps are required for this rule.
Necessary Codes (if applicable)
No specific codes are required for this rule.
Remediation Guide
To comply with the rule and redirect HTTP requests to HTTPS on your ELB application load balancers for FedRAMP Low Revision 4, follow the step-by-step guide below:
- 1.
Open the Amazon EC2 Console: Access the AWS Management Console and navigate to the EC2 service.
- 2.
Go to "Load Balancers": From the navigation pane, click on "Load Balancers" under the "LOAD BALANCING" section.
- 3.
Select the Load Balancer: Locate and select the ELB application load balancer that needs to be configured to redirect HTTP to HTTPS.
- 4.
Go to "Listeners": Under the "DESCRIPTION" tab, click on the "Listeners" tab to view the current listener configuration.
- 5.
Edit the Listener: Select the listener (usually assigned to port 80) that handles HTTP traffic and click on the "Edit" button.
- 6.
Change the Protocol: In the "Edit Listener" window, change the protocol from HTTP to HTTPS. Ensure that the correct SSL certificate is selected for the HTTPS protocol.
- 7.
Enable Redirects: Enable the "Redirect HTTP to HTTPS" option. This ensures that any HTTP requests received by the load balancer will be automatically redirected to HTTPS.
- 8.
Configure Health Checks (optional): If needed, you can also configure the health checks to use HTTPS for checking the health of the backend instances.
- 9.
Review and Save Changes: Review the changes in the "Edit Listener" window and click on the "Save" button to apply the configuration.
- 10.
Verify the Configuration: Test your load balancer by accessing the application using HTTP. The load balancer should automatically redirect the request to the HTTPS version of the application.
By following these steps, you will successfully configure your ELB application load balancer to redirect HTTP requests to HTTPS, ensuring compliance with the FedRAMP Low Revision 4 requirements.