View a markdown version of this page

elbv2-predefined-security-policy-ssl-check - AWS Config

elbv2-predefined-security-policy-ssl-check

Checks if listeners for Application Load Balancers (ALBs) or Network Load Balancers (NLBs) use certain security policies. The rule is NON_COMPLIANT if an HTTPS listener for an ALB or a TLS listener for a NLB does not use the security policies you specify.

Identifier: ELBV2_PREDEFINED_SECURITY_POLICY_SSL_CHECK

Resource Types: AWS::ElasticLoadBalancingV2::Listener

Trigger type: Configuration changes

AWS Region: All supported AWS regions except Asia Pacific (Thailand), Middle East (UAE), Asia Pacific (Hyderabad), Asia Pacific (Melbourne), Israel (Tel Aviv), Canada West (Calgary), Europe (Spain), Europe (Zurich) Region

Parameters:

sslPolicies
Type: CSV

Comma-separated list of SSL security policies for the rule to check. For example, "ELBSecurityPolicy-TLS13-1-2-2021-06".

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.