Updates ALB Test env to Drop Invalid headers
Load balancers should drop invalid headers - Application load balancer is not set to drop invalid headers.
ID - aws-elb-drop-invalid-headers
Severity - High
Impact - Invalid headers being passed through to the target of the load balance may exploit vulnerabilities
Resolution - Set drop_invalid_header_fields to true
tfsec finding - https://aquasecurity.github.io/tfsec/v1.26.0/checks/aws/elb/drop-invalid-headers/ - Passing unknown or invalid headers through to the target poses a potential risk of compromise.
AWS - https://docs.aws.amazon.com/elasticloadbalancing/latest/application/application-load-balancers.html
By setting drop_invalid_header_fields to true, anything that doe not conform to well known, defined headers will be removed by the load balancer.