Route53 health check should use HTTPS with SNI for HTTPS endpoints

What it checks

Route53 health check should use HTTPS with SNI for HTTPS endpoints

Where it applies

Terraform: aws_route53_health_check

CloudFormation: AWS::Route53::HealthCheck

How to fix it

1. Set enable_sni = true on HTTPS health checks. This is required for virtual-hosted HTTPS endpoints (most modern web servers).

Frameworks

• SOC 2 CC7.2

These mappings are advisory, not an attestation of compliance.

Vendor documentation

All rules