Reply To: Question on Bank implementing separation of duties between security and dev team

[Irene-TutorialsDojo]

Hi Segan,

The answer still meets the requirement because SSL termination at the ELB only affects who controls and manages the certificate; it does not restrict or interfere with EC2 administration. The DevOps team can continue to perform all their responsibilities such as logging in to instances, deploying applications, configuring servers, monitoring, and handling operations at the compute layer.

Meanwhile, the cybersecurity team maintains exclusive access to the X.509 certificate in ACM, ensuring the private key never reaches the instances. In short, SSL termination at the ELB isolates certificate control without impacting EC2 access permissions, allowing both teams to operate within their intended scope.

Best,

Irene @ Tutorials Dojo