Datadog: Application Load Balancers should be configured to drop HTTP headers

• https://docs.datadoghq.com/security/default_rules/aws-elbv2-load-balancer-application-load-balancers-should-be-configured-to-drop-http-headers/

Solution:

• Terraform aws_lb: drop_invalid_header_fields

• AWS Config: alb-http-drop-invalid-header-enabled

See also

• AWS ALB, Target Group, SNI
• Terraform LB: aws_lb: drop_invalid_header_fields
• Datadog security: Cloud SIEM, Cloud Security Management (CSM)