diff --git a/en/aws/elb/insecure-ciphers.md b/en/aws/elb/insecure-ciphers.md index 97f5fee67..c19e260db 100644 --- a/en/aws/elb/insecure-ciphers.md +++ b/en/aws/elb/insecure-ciphers.md @@ -15,11 +15,11 @@ | **Recommended Action** | Update your ELBs to use the recommended cipher suites | ## Detailed Remediation Steps -1. Log into the AWS Management Console. +1. Log in to the AWS Management Console. 2. Select the "Services" option and search for EC2.
-3. In the "EC2 Dashboard" scroll down and look for "Load Balancers" and click on "Load Balancers" to get into "Load Balancers" dashboard.
+3. In the "EC2 Dashboard" scroll down and look for "Load Balancing" and click on "Load Balancers" to get into "Load Balancers" dashboard.
4. Select the "Load Balancer" which needs to be verified.
5. Select the "Listeners" tab from the bottom panel and scroll down to the "Cipher" column of HTTPS Listener and click on "Change" option.
-6. From "Select a Cipher" panel select either of "Predefined Security Policy" and "Custom Security Policy".
-7. Scan the "SSL Cipher Section" from selected "Security Policy" for any insecure ciphers. Refer to the link for all secure ciphers. https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-ssl-security-policy.html#ssl-ciphers
+6. If you are using a "Predefined Security Policy" select the latest from the dropdown.
+7. If you are using "Custom Security Policy" then ensure that only the recommended ciphers are used. Refer to the link for all secure ciphers. https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-ssl-security-policy.html#ssl-ciphers
8. Scroll down and click on "Save" button to make the changes.
diff --git a/resources/aws/elb/insecure-ciphers/step2.png b/resources/aws/elb/insecure-ciphers/step2.png index 64243ca1b..1c5fc211a 100644 Binary files a/resources/aws/elb/insecure-ciphers/step2.png and b/resources/aws/elb/insecure-ciphers/step2.png differ diff --git a/resources/aws/elb/insecure-ciphers/step3.png b/resources/aws/elb/insecure-ciphers/step3.png index 0d285ce0c..6ba28a2c2 100644 Binary files a/resources/aws/elb/insecure-ciphers/step3.png and b/resources/aws/elb/insecure-ciphers/step3.png differ diff --git a/resources/aws/elb/insecure-ciphers/step4.png b/resources/aws/elb/insecure-ciphers/step4.png index 1b61b8221..e01d8338b 100644 Binary files a/resources/aws/elb/insecure-ciphers/step4.png and b/resources/aws/elb/insecure-ciphers/step4.png differ diff --git a/resources/aws/elb/insecure-ciphers/step5.png b/resources/aws/elb/insecure-ciphers/step5.png index c2d5434fc..f5ab1fb2e 100644 Binary files a/resources/aws/elb/insecure-ciphers/step5.png and b/resources/aws/elb/insecure-ciphers/step5.png differ diff --git a/resources/aws/elb/insecure-ciphers/step6.png b/resources/aws/elb/insecure-ciphers/step6.png index c20298272..af184d455 100644 Binary files a/resources/aws/elb/insecure-ciphers/step6.png and b/resources/aws/elb/insecure-ciphers/step6.png differ diff --git a/resources/aws/elb/insecure-ciphers/step7.png b/resources/aws/elb/insecure-ciphers/step7.png index 70f1adcab..39d0d9081 100644 Binary files a/resources/aws/elb/insecure-ciphers/step7.png and b/resources/aws/elb/insecure-ciphers/step7.png differ