alb-http-drop-invalid-header-enabled - AWS Config

alb-http-drop-invalid-header-enabled

Checks if rule evaluates Application Load Balancers (ALBs) to ensure they are configured to drop http headers. The rule is NON_COMPLIANT if the value of routing.http.drop_invalid_header_fields.enabled is set to false.

Identifier: ALB_HTTP_DROP_INVALID_HEADER_ENABLED

Trigger type: Configuration changes

AWS Region: All supported AWS Regions except Europe (Milan), Africa (Cape Town) Regions

Parameters:

None

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.