AWS Certified Advanced Networking - Specialty Exam Guide

Security controls on the ELB

Since the load balancer is used as a unified entry point into our application, AWS has made certain that the security on the load balancer can be implemented to control the incoming traffic and its behavior. To control port-based security, we will be using the VPC security groups. When defining access to the load balancer, we are required to use a security group when creating a load balancer. This makes sure that we only open the ports that we require. We should also make sure that we implement the security groups according to the best practices outlined in Chapter 3, VPC Network Security.

On top of port-based security, the ELB itself has the ability to control the encryption protocols and cipher mechanisms being ...