ALB mTLS only on selected endpoints

0

Is it currently possible to enable mTLS on Aplication Load Balancer only for selected endpoints and not everything under used domain?

New ALB mTLS feature: https://aws.amazon.com/blogs/aws/mutual-authentication-for-application-load-balancer-to-reliably-verify-certificate-based-client-identities/

Adrian
posta 2 mesi fa151 visualizzazioni
1 Risposta
0

Enabling mTLS selectively for specific endpoints would rely on configuring listener rules that direct traffic based on the request path or host header to different target groups. While the ALB's mTLS feature is designed to authenticate client certificates at the listener level, the specificity of applying mTLS to certain endpoints may need to be managed through application logic or additional proxy layers within your architecture that can inspect and enforce authentication at a more granular level.

For ref: https://docs.aws.amazon.com/prescriptive-guidance/latest/patterns/configure-mutual-tls-authentication-for-applications-running-on-amazon-eks.html

If this has answered your question or was helpful, accepting the answer would be greatly appreciated. Thank you!

profile picture
ESPERTO
con risposta 2 mesi fa
profile picture
ESPERTO
verificato 2 mesi fa

Accesso non effettuato. Accedi per postare una risposta.

Una buona risposta soddisfa chiaramente la domanda, fornisce un feedback costruttivo e incoraggia la crescita professionale del richiedente.

Linee guida per rispondere alle domande