Security Wine (бывший - DevSecOps Wine)

Как на Elastic Beanstalk задать самые строгие правила по шифрованию TLS:



https://aws.amazon.com/blogs/security/how-to-control-tls-ciphers-in-your-aws-elastic-beanstalk-application-by-using-aws-cloudformation/



SSL security policy для ELB:



https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-security-policy-table.html

- Namespace:  aws:elb:policies:TLSHighPolicy

  OptionName: SSLReferencePolicy

  Value:      ELBSecurityPolicy-TLS-1-2-2017-01

SSL security policy для ALB:



https://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-https-listener.html

- Namespace:  aws:elbv2:listener:443

  OptionName: SSLPolicy

  Value:      ELBSecurityPolicy-FS-1-2-Res-2019-08

#Beanstalk #CloudFormation #security