#!/bin/bash

# List application load balancers by ARN

load_balancer_arns=$(aws elbv2 describe-load-balancers \
  --query 'sort_by(LoadBalancers[?contains(LoadBalancerArn,`:loadbalancer/app/`)],&LoadBalancerArn)[].[LoadBalancerArn]' \
  --output text)

# For each ALB describe listeners with an SSL policy

for arn in $load_balancer_arns
do
  aws elbv2 describe-listeners \
    --load-balancer-arn "$arn" \
    --query 'Listeners[?SslPolicy!=`null`].{LoadBalancerArn:LoadBalancerArn,ListenerArn:ListenerArn,Protocol:Protocol,Port:Port,SslPolicy:SslPolicy}' \
    --output text
done

exit 0