Network misconfigurations

ELBv2 listeners not using TLS Protocol

Risk Level

Informational (4)

Platform(s)

Description

ELBv2 listeners are not configured to use TLS. The TLS protocol encrypts communication between the load balancer and the target (EC2 instance, container, Lambda function, etc.). Connections that don't use TLS can be intercepted by malicious actors.
  • Recommended Mitigation

    Ensure that your ELBv2 listeners are configured to use TLS.