Options to enable HSTS in AWS Application load balancer

amazon-web-services amazon-elb hsts
Prasanna B R picture Prasanna B R · Aug 18, 2018 · Viewed 8k times · Source

Do we have any options in AWS application load balancer to enable HSTS headers? Find few forum topics, that AWS ALB load balancers doesn't have this as a native option.

We are using AWS ALB SSL terminating load balancer. We configured the load balancer to redirect the unsecured traffic to the secured HTTPS protocol. Now, the requirement is to force the browser to use HTTPS protocol using HSTS header. Any option available in AWS ALB to enable the same?

Answer

Related questions

How to implement HTTP Strict Transport Security (HSTS) on AWS Elastic Load Balancer?

I would like to implement HSTS to my application. I have an ELB terminating SSL and forwarding the traffic to my application, which is an apache server used as reverse proxy. I know that in order to implement HSTS, I …

Read More
Enabling HSTS in AWS ELB application load balacer

We like to enable HSTS to our IIS deployed web application. We have SSL terminating ELB Application load balancer. We have enabled the URL rewrite module in IIS and configured the x-Forward-Proto tag to decide and enable HSTS header in …

Read More
Assigning Static IP Address to AWS Load Balancer

How can I assign a static IP address to a ELB. Seems like I cannot. Some articles online asks to create a Route 53 record but this requires changing CNAME of domain which also redirect email traffic. I just want to …

Read More