How can I remove "aswelb/2.0" in the HTTP Response Header?

2

Enter image description here

How can I remove that "awselb/2.0" in the HTTP Response Server Header?

preguntada hace un año13018 visualizaciones
3 Respuestas
2

Note AWS team this is being reported by Penetration Testing firms as an information disclosure vulnerability. Request that action is taken to address..

Dave
respondido hace 8 meses
0

Unfortunately, there is no option to remove the header at this time. If you deploy 3rd Party Solution like F5 WAF, you can cloak server information.

profile pictureAWS
respondido hace un año
  • Can we hide or change that awselb/2.0 to other name.

0

It's not customizable at the moment. A workaround would be to front the ALB with CloudFront and use edge functions to override the Server header with none, as briefly illustrated here: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/lambda-examples.html#lambda-examples-overriding-response-header

AWS
weidi
respondido hace un año

No has iniciado sesión. Iniciar sesión para publicar una respuesta.

Una buena respuesta responde claramente a la pregunta, proporciona comentarios constructivos y fomenta el crecimiento profesional en la persona que hace la pregunta.

Pautas para responder preguntas