ALB mTLS only on selected endpoints

0

Is it currently possible to enable mTLS on Aplication Load Balancer only for selected endpoints and not everything under used domain?

New ALB mTLS feature: https://aws.amazon.com/blogs/aws/mutual-authentication-for-application-load-balancer-to-reliably-verify-certificate-based-client-identities/

Adrian
gefragt vor 2 Monaten151 Aufrufe
1 Antwort
0

Enabling mTLS selectively for specific endpoints would rely on configuring listener rules that direct traffic based on the request path or host header to different target groups. While the ALB's mTLS feature is designed to authenticate client certificates at the listener level, the specificity of applying mTLS to certain endpoints may need to be managed through application logic or additional proxy layers within your architecture that can inspect and enforce authentication at a more granular level.

For ref: https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/configure-mutual-tls-authentication-for-applications-running-on-amazon-eks.html

If this has answered your question or was helpful, accepting the answer would be greatly appreciated. Thank you!

profile picture
EXPERTE
beantwortet vor 2 Monaten
profile picture
EXPERTE
überprüft vor 2 Monaten

Du bist nicht angemeldet. Anmelden um eine Antwort zu veröffentlichen.

Eine gute Antwort beantwortet die Frage klar, gibt konstruktives Feedback und fördert die berufliche Weiterentwicklung des Fragenstellers.

Richtlinien für die Beantwortung von Fragen