ALB HTTP listener should redirect to HTTPS

What it checks

ALB HTTP listener should redirect to HTTPS

Where it applies

Terraform: aws_lb_listener, aws_alb_listener

CloudFormation: AWS::ElasticLoadBalancingV2::Listener

How to fix it

1. Replace the HTTP listener default_action with a redirect action to HTTPS port 443 with HTTP_301 status code.

Frameworks

• AWS FSBP ELB.1
• SOC 2 CC6.7

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules