lacework-global-226

Elastic Load Balancer (ELB) SSL Certificate expires in 45 Days

Description

The Elastic Load Balancer SSL certificates expire in less than 45 days.

Remediation

1. Sign in to the AWS Management Console.

2. Navigate to EC2 dashboard at https://console.aws.amazon.com/ec2/.

3. Select Load Balancing > Load Balancers.

4. Select the Load Balancer that has a violating certificate attached.

5. Select the Listeners tab.

6. On the Listeners tab, for SSL Certificate, choose Change.

   • If you created or imported a certificate using AWS Certificate Manager, select Choose an existing certificate from AWS Certificate Manager (ACM), select the certificate from Certificate, and then choose Save.

   • If you imported a certificate using Identity and Access Management (IAM), select Choose an existing certificate from AWS Identity and Access Management (IAM), select the certificate from Certificate, and then choose Save.

   • If you have a certificate to import but ACM is not supported in the Region, select Upload a new SSL Certificate to AWS Identity and Access Management (IAM). Type a name for the certificate, copy the required information to the form, and then choose Save. Note that the certificate chain is not required if the certificate is a self-signed certificate.