The service can re-encrypt traffic to backend targets after terminating TLS at the load balancer, so that data stays encrypted end to end.
Backend Re-encryption
CCC.LB.CP25
Related Threats
| ID | Title | Description |
|---|---|---|
| CCC.LB.TH09 | Traffic to Backend Targets Is Forwarded Unencrypted | When TLS is terminated at the load balancer and backend re-encryption is not configured, requests are forwarded to targets in cleartext. Any entity with access to the internal network path between the load balancer and the targets can read or alter the traffic, compromising the confidentiality and integrity of the data. |