By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Remove "server awselb/2.0" header from application responses

1

During a pentest of one of our apps running behind an AWS API GW the report showed that the API GW returns a "server awselb/2.0" header, which is identified as a risk by the pentesters. To my knowledge there is no way to remove/suppress such a header, but perhaps I am missing something? Is this something anybody else has ever faced?

Topics
ServerlessFront-End Web & MobileNetworking & Content Delivery
Tags
Amazon API Gateway
Language
English
niccogiulianelli
asked 2 years ago4836 views
2 Answers
0

I am facing the same issue

AWS-User-1125538
answered 2 years ago
0

Facing the same issue. Is there any WAF that can be used to avoid this issue?

Neron
answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content