diff --git a/packages/@aws-cdk/aws-apigateway/lib/domain-name.ts b/packages/@aws-cdk/aws-apigateway/lib/domain-name.ts
index ed3904dcf459c..ac6126eb50860 100644
--- a/packages/@aws-cdk/aws-apigateway/lib/domain-name.ts
+++ b/packages/@aws-cdk/aws-apigateway/lib/domain-name.ts
@@ -35,8 +35,8 @@ export interface DomainNameOptions {
 
   /**
    * The Transport Layer Security (TLS) version + cipher suite for this domain name.
-   * @default undefined. This field is optional in AWS::ApiGateway::DomainName SecurityPolicy
    * @see https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-domainname.html
+   * @default SecurityPolicy.TLS_1_0
    */
   readonly securityPolicy?: SecurityPolicy
 }