Checks/Aws/Test-Elbv2DesyncMitigationMode.ps1
|
function Test-Elbv2DesyncMitigationMode { <# .SYNOPSIS Application Load Balancer has desync mitigation mode set to strictest or defensive, or drops invalid header fields .DESCRIPTION **Application Load Balancer** settings are reviewed for **HTTP desync protections**. It evaluates `routing.http.desync_mitigation_mode` for `strictest` or `defensive`; when neither is configured, it checks `routing.http.drop_invalid_header_fields.enabled` is `true` as a compensating control. .PARAMETER Check CIEMCheck object containing check metadata. #> [CmdletBinding()] [OutputType([PSCustomObject[]])] param( [Parameter(Mandatory)] [CIEMCheck]$Check ) $ErrorActionPreference = 'Stop' # TODO: Implement check logic based on Prowler check: elbv2_desync_mitigation_mode [CIEMScanResult]::Create($Check, 'MANUAL', 'This check requires manual implementation. See Prowler check elbv2_desync_mitigation_mode for reference.', 'N/A', 'elbv2 Resources') } |