Terraform aws lb: drop invalid header fields

drop_invalid_header_fields(tf.io)

drop_invalid_header_fields (Optional) Whether HTTP headers with header fields that are not valid are removed by the load balancer (true) or routed to targets (false). The default is false. Elastic Load Balancing requires that message header names contain only alphanumeric characters and hyphens. Only valid for Load Balancers of type application.

Related

• alb-http-drop-invalid-header-enabled
• Datadog: Application Load Balancers should be configured to drop HTTP headers
• AWS ALB: alb.ingress.kubernetes.io/load-balancer-attributes: routing.http.drop_invalid_header_fields.enabled=true
• FailedBuildModel
• aws_s3_bucket_cors_configuration
• RFC 9110
• aws elbv2 modify-load-balancer-attributes
• ignore invalid headers in Nginx

See also

• Terraform LB: aws_lb (resource): load_balancer_type, drop_invalid_header_fields, aws_lb (data), aws_lb_listener, aws_lb_listener_certificate
• HTTP Headers: Authorization:, X-Frame-Options, Content-Security-Policy, Cache-Control, Terraform: drop_invalid_header_fields
• HTTP headers, Security headers, HTTP Security headers, X-Forwarded-For (XFF), if-none-match