SSL/TLS termination in AWS - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to specify the protocol for SSL termination on the load balancer.

AWS

LoadBalancerProtocol: [1]

Drag options to blanks, or click blank then click option'

AHTTPS

BHTTP

CTCP

DUDP

Attempts:

3 left

💡 Hint

Common Mistakes

Using HTTP instead of HTTPS for SSL termination.

Choosing TCP or UDP which do not handle SSL termination directly.

The load balancer must use HTTPS protocol to handle SSL/TLS termination.

2fill in blank

medium

Complete the code to specify the certificate ARN for SSL termination in AWS Elastic Load Balancer.

AWS

CertificateArn: [1]

Drag options to blanks, or click blank then click option'

Aarn:aws:iam::account:user/username

Barn:aws:acm:region:account:certificate/12345678

Carn:aws:ec2:region:account:instance/i-12345678

Darn:aws:s3:::mybucket/certificate.pem

Attempts:

3 left

💡 Hint

Common Mistakes

Using an ARN from S3 or EC2 instead of ACM.

Using an IAM user ARN instead of a certificate ARN.

The certificate ARN must be from AWS Certificate Manager (ACM) to enable SSL termination.

3fill in blank

hard

Fix the error in the listener configuration to enable SSL termination on port 443.

AWS

Listener: {
  Protocol: [1],
  Port: 443
}

Drag options to blanks, or click blank then click option'

ATCP

BHTTP

CHTTPS

DUDP

Attempts:

3 left

💡 Hint

Common Mistakes

Using HTTP protocol on port 443.

Using TCP or UDP which do not handle SSL termination.

The listener protocol must be HTTPS to handle SSL termination on port 443.

4fill in blank

hard

Fill both blanks to configure the target group protocol and port for decrypted traffic after SSL termination.

AWS

TargetGroup: {
  Protocol: [1],
  Port: [2]
}

Drag options to blanks, or click blank then click option'

AHTTP

BHTTPS

C80

D443

Attempts:

3 left

💡 Hint

Common Mistakes

Using HTTPS and port 443 for target group when SSL is terminated at the load balancer.

Mixing protocols and ports incorrectly.

After SSL termination, traffic to targets is usually unencrypted HTTP on port 80.

5fill in blank

hard

Fill all three blanks to complete the AWS CLI command for creating a listener with SSL termination.

AWS

aws elbv2 create-listener --load-balancer-arn [1] --protocol [2] --port [3] --certificates CertificateArn=arn:aws:acm:region:account:certificate/12345678 --default-actions Type=forward,TargetGroupArn=targetgroup-arn

Drag options to blanks, or click blank then click option'

Aarn:aws:elasticloadbalancing:region:account:loadbalancer/app/my-loadbalancer/50dc6c495c0c9188

BHTTPS

C443

DHTTP

Attempts:

3 left

💡 Hint

Common Mistakes

Using HTTP protocol or port 80 for SSL termination listener.

Using incorrect ARN formats.

The command requires the load balancer ARN, HTTPS protocol, and port 443 for SSL termination listener.