A recreation department booking website must present only HTTPS to…

Question

A recreation department booking website must present only HTTPS to citizens and redirect any HTTP requests to HTTPS. Which design best implements that control on AWS?

Accepted Answer

Use AWS Certificate Manager certificates on an Application Load Balancer or Amazon CloudFront and configure HTTP-to-HTTPS redirect listener rules — Citizens booking ball fields deserve a locked HTTPS door, not a swinging HTTP screen door. ACM hands you a trusted cert on ALB or CloudFront, and a listener rule politely redirects HTTP to HTTPS.

Answer

Terminate TLS with a self-signed certificate stored in an S3 public bucket and ignore HTTP listeners

Answer

Disable encryption and advertise HTTP-only bookmarks for lower latency

Answer

Place plaintext HTTP behind a security group that allows only UDP 53 from the internet

A recreation department booking website must present only HTTPS to citizens and redirect any HTTP requests to HTTPS. Which design best implements that control on AWS?

Short Explanation

Full Explanation