Users may initially request http:// URLs.
TLS must terminate at the Application Load Balancer and all users should reach HTTPS.
Which configuration is most appropriate?
Add a redirect action from the ALB HTTP listener to the HTTPS listener.
Detailed explanation
This does not control direct HTTP requests to an ALB when CloudFront is not the entry point.
This does not control direct HTTP requests to an ALB when CloudFront is not the entry point.
DNS cache duration does not redirect an HTTP request to HTTPS.
DNS cache duration does not redirect an HTTP request to HTTPS.
S3 lifecycle rules do not change ALB listener behavior.
S3 lifecycle rules do not change ALB listener behavior.
The listener redirects clients to an HTTPS URL, where the HTTPS listener terminates TLS.
The listener redirects clients to an HTTPS URL, where the HTTPS listener terminates TLS.
Check official documentation
Compare the following points with the official documentation.
Application Load Balancer redirect actionsの公式説明を確認する。
What to confirm
DNS解決とALB listenerリダイレクトの違いを説明できる。
Key points
- ALB redirect
- HTTP listener
- HTTPS listener
Notes
- Environment: AWS公式SOA-C03試験ガイドとAWS公式ドキュメントの確認
- Confirm current AWS service behavior in the official documentation.
Foundation review
Protocol transition
A redirect changes the client URL; it is different from a DNS response or cache policy.
TLS termination
The HTTPS listener performs the encrypted-session handshake at the load balancer.