Classic ELB listener should not use HTTP — require HTTPS

What it checks

Classic ELB: at least one listener uses the HTTP protocol.

Where it applies

Terraform: aws_elb

CloudFormation: AWS::ElasticLoadBalancing::LoadBalancer

How to fix it

1. Change lb_protocol from "HTTP" to "HTTPS" and add ssl_certificate_id. Alternatively, migrate from Classic ELB to ALB.

Frameworks

• AWS FSBP ELB.3
• SOC 2 CC6.7
• PCI-DSS v4.0.1/4.2.1
• HIPAA 164.312(e)(1)

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules