Neglected assets

Classic Load Balancer’s Listener with SSL policy and certificate not from AWS Certificate Manager

Risk Level

Informational (4)

Platform(s)

Description

Classic Load Balancer (ELB) provides basic load balancing across multiple Amazon EC2 instances and operates at both the request level and connection level. The Classic Load Balancer {AwsEc2Elb} was found to have a listener with SSL Security Policy and a Certificate that was not issued by AWS Certificate Manager. This could result in an un-secure connection with weak encryption.