Ensure Alibaba Cloud API Gateway API Protocol Set To 'HTTPS'
API Gateway supports HTTPS-based encryption of API requests. When you configure an API operation, you can specify that the API operation supports HTTP requests, HTTPS requests, or both.
Risk Level: high
Platform: Alicloud
Spectral Rule ID: TFALCLD004
REMEDIATION
set request_config.protocol to 'HTTPS'
request_config {
- protocol = "HTTP"
+ protocol = "HTTPS"
}
Read more:
Updated about 1 year ago