Checks whether an Application Load Balancer (ALB) instance has a TLS handshake failure rate at or above a specified threshold for at least 8 hours. Detects potential certificate misconfigurations or encrypted communication failures.
Scenarios
Detects persistently high TLS handshake failure rates on ALB instances, helping you identify encrypted communication anomalies or certificate misconfigurations early.
Risk level
Default risk level: High.
You can change the risk level.
Detection logic
-
An ALB instance is non-compliant if its TLS handshake failure rate is at or above a specified value for at least 8 hours within a given time range. Not applicable if the instance is not connected to Cloud Monitor or has no monitoring data. Default detection range: last 7 days. This check uses the Cloud Monitor monitoring data API and consumes the Basic Cloud Monitor free quota. To ensure detection quality, enable Hybrid Cloud Monitoring. Hybrid Cloud Monitoring billing is described in the Cloud Monitor billing documentation.
Rule details
|
Parameter |
Description |
|
Rule name |
ALB instance TLS handshake failure rate check |
|
Rule identifier |
|
|
Tag |
ALB |
|
Automatic remediation |
Not supported |
|
Rule trigger |
Periodic |
|
Trigger frequency |
24 hours |
|
Supported resource types |
ACS::ALB::LoadBalancer |
|
Input parameters |
relativeTime (Default: 168) |