检查以下代码:
resource "aws_lb_listener" "test" {
load_balancer_arn = aws_lb.test.arn
port = "80"
protocol = "HTTP"
default_action {
type = "redirect"
redirect {
protocol = "HTTPS"
port = "443"
status_code = "HTTP_301"
}
}
}
必须为上述代码提供以下参数:
ssl_policy:用于指定负载均衡器使用的协议和密码套件。在这里,使用ELBSecurityPolicy-TLS-1-0-2015-04。resource "aws_lb" "test" {
name = "test-lb"
internal = false
load_balancer_type = "application"
subnets = [aws_subnet.test1.id, aws_subnet.test2.id]
security_groups = [aws_security_group.test.id]
enable_deletion_protection = false
access_logs {
enabled = false
}
// Add this line
ssl_policy = "ELBSecurityPolicy-TLS-1-0-2015-04"
}
certificate_arn:用于指定负载均衡器中的证书。在这里,为负载均衡器提供了证书的ARN。resource "aws_lb_listener" "test" {
load_balancer_arn = aws_lb.test.arn
port = "443"
protocol = "HTTPS"
// Add these lines
ssl_policy = "ELBSecurityPolicy-TLS-1-0-2015-04"
certificate_arn = var.cert_arn
default_action {
type = "redirect"
redirect {
protocol = "HTTPS"
port = "443"
status_code = "HTTP_301"
}
}
}
确保在aws_lb_listener资源块中针对HTTPS端口指定了ssl_policy和certificate_arn参数,并使用针