Policy Packs

guardrails-samples

This measure helps in protecting data in transit by enforcing stronger encryption standards, thereby reducing the risk of data breaches and ensuring compliance.

Enforce TLS 1.2 SSL Policy for AWS EC2 Classic Load Balancer Listeners

main

aws_ec2_classic_load_balancer_listener_ssl_policy

Determine the action to take when an AWS EC2 classic load balancer listener is not using an allowed SSL policy.&#92;n&#92;nIf a classic load balancer listener is not using an allowed SSL policy and this policy is set to `Enforce: Set to SSL Policy &gt; Default`, the classic load balancer listener will be updated to use the SSL policy selected in the `AWS &gt; EC2 &gt; Classic Load Balancer Listener &gt; SSL Policy &gt; Allowed` policy.&#92;n

classicLoadBalancerListenerSslPolicy

AWS > EC2 > Classic Load Balancer Listener > SSL Policy

aws_ec2_classic_load_balancer_listener_ssl_policy_default

Define the default AWS SSL policy the AWS EC2 classic load balancer listener should use if it&#39;s not currently using an allowed SSL policy.&#92;n&#92;nThe SSL policy selected in this policy should also be allowed in the `AWS &gt; EC2 &gt; Classic Load Balancer Listener &gt; SSL Policy &gt; Allowed` policy, else the control will move into an `invalid` state while trying to enforce this policy.&#92;n

classicLoadBalancerListenerSslPolicyDefault

AWS > EC2 > Classic Load Balancer Listener > SSL Policy > Default

turbot_policy_setting.aws_ec2_classic_load_balancer_listener_ssl_policy

turbot_policy_setting.aws_ec2_classic_load_balancer_listener_ssl_policy_default

Policy	Setting	Note
AWS > EC2 > Classic Load Balancer Listener > SSL Policy	Check: Set in SSL Policy > Allowed
AWS > EC2 > Classic Load Balancer Listener > SSL Policy > Default	ELBSecurityPolicy-TLS-1-2-2017-01

Policy Settings