Application Load Balancers should be configured to use defensive or strictest desync mitigation mode
このページは日本語には対応しておりません。随時翻訳に取り組んでいます。
翻訳に関してご質問やご意見ございましたら、
お気軽にご連絡ください。
Description
This check verifies whether an Application Load Balancer is set to use either the defensive or strictest desync mitigation mode. The verification is considered unsuccessful if the Application Load Balancer is not configured with one of these modes.
HTTP desynchronization issues can result in request smuggling, exposing applications to vulnerabilities such as request queue or cache poisoning. These vulnerabilities can, in turn, lead to credential stuffing or the execution of unauthorized commands. By configuring your Application Load Balancer with either the defensive or strictest desync mitigation mode, you can safeguard your application from security risks associated with HTTP desynchronization.
To change the desync mitigation mode for an Application Load Balancer, refer to the [Desync Mitigation Mode section in the Application Load Balancers User Guide].
