AWS code-library medium security documentation change
Summary
Added PowerShell V5 examples showing SSL policy types including insecure protocols like SSLv2
Security assessment
Example output lists SSLv2 as a supported protocol in SSLNegotiationPolicyType, which is deprecated and insecure. This documentation could mislead users to enable vulnerable protocols
Diff
diff --git a/code-library/latest/ug/elastic-load-balancing_example_elastic-load-balancing_DescribeLoadBalancerPolicyTypes_section.md b/code-library/latest/ug/elastic-load-balancing_example_elastic-load-balancing_DescribeLoadBalancerPolicyTypes_section.md index 9631fb784..d0ca3bbdd 100644 --- a//code-library/latest/ug/elastic-load-balancing_example_elastic-load-balancing_DescribeLoadBalancerPolicyTypes_section.md +++ b//code-library/latest/ug/elastic-load-balancing_example_elastic-load-balancing_DescribeLoadBalancerPolicyTypes_section.md @@ -157,0 +158,51 @@ PowerShell +**Tools for PowerShell V5** + + +**Example 1: This example gets the policy types supported by Elastic Load Balancing.** + + + Get-ELBLoadBalancerPolicyType + + +**Output:** + + + Description PolicyAttributeTypeDescriptions PolicyTypeName + ----------- ------------------------------- -------------- + Stickiness policy with session lifet... {CookieExpirationPeriod} LBCookieStickinessPolicyType + Policy that controls authentication ... {PublicKeyPolicyName} BackendServerAuthenticationPolicyType + Listener policy that defines the cip... {Protocol-SSLv2, Protocol-TLSv1, Pro... SSLNegotiationPolicyType + Policy containing a list of public k... {PublicKey} PublicKeyPolicyType + Stickiness policy with session lifet... {CookieName} AppCookieStickinessPolicyType + Policy that controls whether to incl... {ProxyProtocol} ProxyProtocolPolicyType + +**Example 2: This example describes the specified policy type.** + + + Get-ELBLoadBalancerPolicyType -PolicyTypeName ProxyProtocolPolicyType + + +**Output:** + + + Description PolicyAttributeTypeDescriptions PolicyTypeName + ----------- ------------------------------- -------------- + Policy that controls whether to incl... {ProxyProtocol} ProxyProtocolPolicyType + +**Example 3: This example displays the complete description of the specified policy type.** + + + (Get-ELBLoadBalancerPolicyType -PolicyTypeName).Description + + +**Output:** + + + Policy that controls whether to include the IP address and port of the originating request for TCP messages. + This policy operates on TCP/SSL listeners only + + * For API details, see [DescribeLoadBalancerPolicyTypes](https://docs.aws.amazon.com/powershell/v5/reference) in _AWS Tools for PowerShell Cmdlet Reference (V5)_. + + + +