Rule: ELB Application Load Balancers should redirect HTTP requests to HTTPS

Rule Description:

Troubleshooting Steps (if applicable):

2. 1.

   Verify the ALB listener configuration: Check if the ALB listener is properly configured to redirect HTTP to HTTPS. Ensure that the listener rule is set up to redirect all HTTP traffic to an HTTPS listener.

4. 2.

   Check SSL/TLS certificate: Make sure that a valid SSL/TLS certificate is attached to the HTTPS listener. Certificates should be up to date and properly configured.

6. 3.

   Verify security group settings: Ensure that the security group associated with the ALB allows incoming HTTPS traffic on the appropriate port (usually port 443).

8. 4.

   Check target group health checks: If the ALB is configured to perform health checks on target groups, ensure that the target instances are passing health checks. If a target instance fails the health check, it may affect the redirection.

10. 5.

    Review ALB access logs: Analyze the ALB access logs to identify any potential errors or issues in the request redirection process. Look for any HTTP requests that are not being properly redirected to HTTPS.

12. 6.

    Verify DNS settings: Double-check the DNS settings to ensure that the domain or subdomain points to the ALB's DNS name correctly. Inconsistencies in DNS configurations can result in failed redirection.

Necessary Codes (if applicable):

2. 1.

   Install and configure AWS CLI: Set up the AWS CLI on your local machine and configure it with your AWS credentials.

4. 2.

   Create or modify an ALB listener: Use the following AWS CLI command to create or modify an ALB listener to redirect HTTP to HTTPS:

aws elbv2 create-listener --load-balancer-arn <ALB_ARN> --protocol HTTP --port 80 --default-actions Type=redirect,RedirectConfig={Protocol=HTTPS, Port=443, Host=#{host}, Path=#{path}, Query=#{query}, StatusCode=HTTP_301}

<ALB_ARN>

Step-by-Step Guide for Remediation:

2. 1.

   Access AWS Management Console: Sign in to the AWS Management Console (console.aws.amazon.com) using your account credentials.

4. 2.

   Go to the EC2 Dashboard: Navigate to the EC2 Dashboard by clicking on the "Services" dropdown in the top navigation bar and selecting "EC2" under "Compute".

6. 3.

   Select Load Balancers: In the left-hand menu, under "LOAD BALANCING", click on "Load Balancers".

8. 4.

   Choose the relevant ALB: Select the Application Load Balancer (ALB) that requires HTTP to HTTPS redirection.

10. 5.

    Modify ALB listener: In the "Listeners" tab, click the "View/edit rules" button next to the HTTP (port 80) listener.

12. 6.

    Configure redirection rule: Add a new rule by clicking the "+" button. Set the conditions to match HTTP traffic and add an action to redirect it to HTTPS.

14. 7.

    Save changes: After configuring the redirection rule, click the "Save" button to apply the changes.

16. 8.

    Test redirection: Access the ALB using HTTP (e.g., http://example.com) and verify if it automatically redirects to HTTPS (e.g., https://example.com).

18. 9.

    Validate SSL/TLS certificate: Ensure that the SSL/TLS certificate attached to the HTTPS listener is valid and trusted.

20. 10.

    Monitor ALB and logs: Regularly monitor the ALB's behavior and review access logs to check for any HTTP requests that are not being redirected to HTTPS. Troubleshoot as necessary.