More Info:

Load Balancer regional urlmaps should be configured to block HTTP connection and allow only HTTPS connections.

Risk Level

High

Address

Security

Compliance Standards

GDPR, PCIDSS

Triage and Remediation

Remediation

To remediate the misconfiguration “Load Balancer Regional Urlmaps Should Accept Https Connections” for GCP using GCP console, you can follow the steps below:

  1. Open the GCP console and navigate to the Load Balancing menu.

  2. Select the load balancer that you want to update.

  3. Click on the “Edit” button at the top of the page.

  4. Scroll down to the “Frontend configuration” section and click on the “Edit” button next to it.

  5. In the “Protocol” drop-down menu, select “HTTPS”.

  6. Under “Certificate”, select the SSL certificate that you want to use for the load balancer.

  7. In the “Port numbers” section, enter the port numbers that you want to use for HTTPS connections.

  8. Click on the “Update” button to save the changes.

After following these steps, your Load Balancer Regional Urlmaps should accept HTTPS connections and the misconfiguration will be remediated.

Additional Reading: