Classic Load Balancer's Listener with SSL policy and certificate not from AWS Certificate Manager

Neglected assets

Classic Load Balancer’s Listener with SSL policy and certificate not from AWS Certificate Manager

Risk Level

Informational (4)

Platform(s)

Compliance Frameworks

AWS Foundational Security Best Practices Controls

Description

Classic Load Balancer (ELB) provides basic load balancing across multiple Amazon EC2 instances and operates at both the request level and connection level. The Classic Load Balancer {AwsEc2Elb} was found to have a listener with SSL Security Policy and a Certificate that was not issued by AWS Certificate Manager. This could result in an un-secure connection with weak encryption.

Recommended Mitigation

It is recommended to replace the AWS Certificate of the Classic Load Balancer's Listener with a Certificate issued by the AWS Certificate Manager. For more information follow the instructions at: https://docs.aws.amazon.com/config/latest/developerguide/elb-acm-certificate-required.html

Classic Load Balancer’s Listener with SSL policy and certificate not from AWS Certificate Manager

Description

Need help?