Ravi Sir's Cards › AWS
Enforce HTTPS
This revision card explains Enforce HTTPS. It starts from the need that HTTP leaks tokens and bodies on the wire. On the card, the building blocks include Explicit Deny when aws — SecureTransport is false on bucket and object ARNs. The how-to section covers how to put Deny statement , then HTTPS allow test , then HTTP deny test. An example on the card is priya Nair blocks http:// put-object in the clinic docs bucket.
Read card text
What this card says
Why do we need it?
HTTP leaks tokens and bodies on the wire.
What is it?
Explicit Deny when aws:SecureTransport is false on bucket and object ARNs.
SecureTransport
How to do it
Put Deny statement → HTTPS allow test → HTTP deny test.
Example
Priya Nair blocks http:// put-object in the clinic docs bucket.