ELB Listeners Have Specified Security Policies Added

Rule Name

elb-predefined-security-policy-https-check

Identifier

elb-predefined-security-policy-https-check

Description

If a specified security policy is not configured for the HTTPS listener of a dedicated load balancer, this dedicated load balancer is noncompliant.

Tag

elb

Trigger Type

Configuration change

Filter Type

elb.loadbalancers

Configure Rule Parameters

predefinedPolicyName: indicates the specified security policy. The default value is tls-1-0.

Example values: tls-1-0, tls-1-1, tls-1-2, tls-1-0-inherit, tls-1-2-strict, tls-1-0-with-1-3, tls-1-2-fs-with-1-3, tls-1-2-fs, and hybrid-policy-1-0. For more information, see TLS Security Policy.