On: Summary of the USA federal government's zero-trust memo

[y-curious]

We were explicitly told that terminating at the ALB was unacceptable by the 3PAO. We had to build NGINX+ into the containers to terminate there.

I think your approach is valid, and I would have preferred to do it that way. Whatever passes the audit, I guess.