Open sumiat opened 8 months ago
The security scans against that endpoint don't show any critical or high vulnerabilities. However, this is an http endpoint and the security controls say we need to block all insecure ports going into the environment.
However, this is an http endpoint and the security controls say we need to block all insecure ports going into the environment.
We have a separate ticket for that! https://github.com/HHS/simpler-grants-gov/issues/961
Summary
The current configuration of the load balancer URL presents a security risk as it is accessible without restrictions. To enhance security, we need to implement access controls to either block public access entirely or limit access to users connected via VPN.
Acceptance criteria