alb-http-drop-invalid-header-enabled

Checks if rule evaluates AWS Application Load Balancers (ALB) to ensure they are configured to drop http headers. The rule is NON_COMPLIANT if the value of routing.http.drop_invalid_header_fields.enabled is set to false.

Identifier: ALB_HTTP_DROP_INVALID_HEADER_ENABLED

Resource Types: AWS::ElasticLoadBalancingV2::LoadBalancer

Trigger type: Configuration changes

AWS Region: All supported AWS regions except Africa (Cape Town), Asia Pacific (Osaka), Europe (Milan), Israel (Tel Aviv) Region

Parameters:

None

AWS CloudFormation template

To create AWS Config managed rules with AWS CloudFormation templates, see Creating AWS Config Managed Rules With AWS CloudFormation Templates.