---
title: Application Load Balancers should use HTTPS
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > Application Load Balancers should use
  HTTPS
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# Application Load Balancers should use HTTPS
 
## Description{% #description %}

Use HTTPS to protect traffic between clients and your Application Load Balancer (ALB) from interception and man-in-the-middle attacks. This check evaluates every listener on the ALB independently. Each listener must use the HTTPS protocol, or be an HTTP listener whose default action redirects to HTTPS. An HTTP listener that forwards traffic, returns a fixed response, or redirects without switching to HTTPS fails the check, even when another listener on the same ALB uses HTTPS. ALBs without listeners are skipped. Load balancers whose type is missing or empty fail. Network and Gateway Load Balancers are not evaluated.

## Remediation{% #remediation %}

1. If the ALB has no HTTPS listener, follow [Create an HTTPS listener for your Application Load Balancer](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-https-listener.html).
1. For every HTTP listener whose default action does not redirect to HTTPS, including forward and fixed-response actions, change the default action to a [redirect action](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/rule-action-types.html#redirect-actions) with the protocol set to HTTPS.
1. Remove any HTTP listener that is no longer needed by following [Delete a listener for your Application Load Balancer](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/delete-listener.html).