ALB does not redirect HTTP requests into HTTPS ones
Description
Ensure that the behaviour of the Load balancer is redirect any traffic from the encrypted endpoint rather than handling on http or failing to respond.
Fix - Buildtime
Terraform
- Resource: aws_lb, aws_lb_listener
- Argument: redirect of aws_lb_listener
resource "aws_lb" "lb_good" {
}
resource "aws_lb_listener" "listener_good" {
load_balancer_arn = aws_lb.lb_good.arn
port = "80"
protocol = "HTTP"
default_action {
type = "redirect"
redirect {
port = "443"
protocol = "HTTPS"
status_code = "HTTP_301"
}
}
}