cloudposse/terraform-aws-alb 0.30.0

v0.30.0

on GitHub

What

This change adds support for the drop_invalid_header_fields variable, which was added to the AWS provider, in version 2.54.0 [0].

Why

• Currently, it is not possible to set up this option, which is recommended by the AWS Foundational Security Best Practices controls [1].
• However, it does require the aws provider to be at least v2.54.0. If there's any way to maintain the current constraint, and only apply this variable when the version supports it, I'm happy to change the current approach.

References

• [0] hashicorp/terraform-provider-aws@956f2e6
• [1] https://docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-fsbp-controls.html#fsbp-elb-4