Datadog: Application Load Balancers should be configured to drop HTTP headers

• https://docs.datadoghq.com/security/default_rules/aws-elbv2-load-balancer-application-load-balancers-should-be-configured-to-drop-http-headers/

Solution:

• Terraform aws_lb: drop_invalid_header_fields

• AWS Config: alb-http-drop-invalid-header-enabled

See also

• AWS ALB, Target Group, listener, SNI, Troubleshoot your Application Load Balancers, aws_lb, aws_lb_listener (data), Resource map, security policies, aws_lb_listener_certificate
• Terraform LB: aws_lb (resource): load_balancer_type, drop_invalid_header_fields, aws_lb (data), aws_lb_listener, aws_lb_listener_certificate
• Datadog security: Cloud SIEM, Cloud Security Management (CSM)