chore: update ALB to recommended TLS policy

awslabs · Feb 6, 2025 · 9e6a791 · 9e6a791
1 parent 69f6d19
commit 9e6a791
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/tests/cognito/lib/cognito-stack.ts b/tests/cognito/lib/cognito-stack.ts
@@ -298,6 +298,7 @@ export class CognitoStack extends cdk.Stack {
       open: true,
       certificates: [cert],
       protocol: cdk.aws_elasticloadbalancingv2.ApplicationProtocol.HTTPS,
+      sslPolicy: cdk.aws_elasticloadbalancingv2.SslPolicy.RECOMMENDED_TLS, // This enforces TLS 1.2 and higher
       defaultAction:
         new cdk.aws_elasticloadbalancingv2_actions.AuthenticateCognitoAction({
           userPool: cup,