How can I remove "aswelb/2.0" in the HTTP Response Header?

2

Enter image description here

How can I remove that "awselb/2.0" in the HTTP Response Server Header?

질문됨 일 년 전13015회 조회
3개 답변
2

Note AWS team this is being reported by Penetration Testing firms as an information disclosure vulnerability. Request that action is taken to address..

Dave
답변함 8달 전
0

Unfortunately, there is no option to remove the header at this time. If you deploy 3rd Party Solution like F5 WAF, you can cloak server information.

profile pictureAWS
답변함 일 년 전
  • Can we hide or change that awselb/2.0 to other name.

0

It's not customizable at the moment. A workaround would be to front the ALB with CloudFront and use edge functions to override the Server header with none, as briefly illustrated here: https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/lambda-examples.html#lambda-examples-overriding-response-header

AWS
weidi
답변함 일 년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인

관련 콘텐츠