Update ALB to use RECOMMENDED_TLS SslPolicy to remove TLS1.1

Signed-off-by: Peter Zhu <zhujiaxi@amazon.com>
peterzhuamazon · Feb 5, 2025 · 56cf100 · 56cf100
1 parent e22aee3
commit 56cf100
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/network/ci-external-load-balancer.ts b/lib/network/ci-external-load-balancer.ts
@@ -43,7 +43,7 @@ export class JenkinsExternalLoadBalancer {
     });
 
     this.listener = this.loadBalancer.addListener('JenkinsListener', {
-      sslPolicy: props.useSsl ? SslPolicy.RECOMMENDED : undefined,
+      sslPolicy: props.useSsl ? SslPolicy.RECOMMENDED_TLS : undefined,
       port: accessPort,
       open: false,
       certificates: props.useSsl ? [props.listenerCertificate] : undefined,