A Config rule that checks if Application Load Balancers and Network Load Balancers have listeners that are configured to use certificates from AWS Certificate Manager (ACM). This rule is NON_COMPLIANT if at least 1 load balancer has at least 1 listener that is configured without a certificate from ACM or is configured with a certificate different from an ACM certificate.

This config rule supports the following parameters:

  • AcmCertificatesAllowed
    • Required: No
    • Type: CSV
    • Description:Comma-separated list of certificate Amazon Resource Names (ARNs).

CloudFormation Template