A hardening script took an ALB offline and still exited successfully
I wrote a Bash script to retrofit a default-deny posture onto existing AWS Application Load Balancers. It forces HTTPS, rejects invalid headers, enables defensive desynchronization protections, and changes…