Amazon has updated its instructions for how customers should more securely implement AWS’s traffic-routing service known as Application Load Balancer, but it’s not clear everyone will get the memo.
https://www.wired.com/story/aws-application-load-balancer-implementation-compromise/