Brett
Brett

Reputation: 6030

Configure custom SSLPolicy for v2 load balancer with cloudformation

how would one configure a custom SSL Policy for a V2 application load balancer via cloudformation?

This post describes a policy configured via CLI: AWS Cloudformation: Loadbalancer Custom SSL Negotiation Policy but wondering how to customize this on a listener.

SslPolicy in the docs is a type String - is this a reference to a security policy resource object? Or a string of ciphers to enable? I don't want to use a predefined policy.

Thanks.

Upvotes: 3

Views: 1359

Answers (1)

Michael - sqlbot
Michael - sqlbot

Reputation: 179404

The policy on ALB is a string because only the pre-defined, named policies are supported.

Application Load Balancers do not support custom security policies.

https://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-https-listener.html#describe-ssl-policies

The available canned policies for ALB are also documented at the link, above.

Upvotes: 3

Related Questions