Free plan Signups are open now. The full audytx engine — Terraform and CloudFormation — is live. The Free plan is 100 scans a month and stays free — paid tiers arrive Nov 01, 2026 from $20/month for unlimited repositories. Try it on your own code.

ALB should drop invalid HTTP headers

AWS_ELB_003 LOW Security

What it checks

ALB should drop invalid HTTP headers

Where it applies

Terraform: aws_lb, aws_alb

CloudFormation: AWS::ElasticLoadBalancingV2::LoadBalancer

How to fix it

  1. Set drop_invalid_header_fields = true on the aws_lb resource

Frameworks

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules