search

cloudposse / terraform-aws-cloudfront-cdn

Terraform Module that implements a CloudFront Distribution (CDN) for a custom origin.
https://cloudposse.com/accelerate
Apache License 2.0
99 stars 121 forks source link

Update default minimum viewer protocol to TLSv1.2_2021 #117

Closed venkatamutyala closed 6 months ago

venkatamutyala commented 6 months ago

what

By default deprecated protocols are being supported:

image

This change would disable support for viewers using TLS 1.1 and TLS 1.0.

why

1.0 and 1.1 are known to be deprecated/insecure. To save folks trouble by their security teams using the latest version seems the most appropriate.

references

https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.html

joe-niland commented 6 months ago

Thanks @venkatamutyala

Could you please run the following and commit the result?

make init
make readme
venkatamutyala commented 6 months ago

Done. Let me know if you folks need anything else.

joe-niland commented 6 months ago

/terratest

joe-niland commented 6 months ago

Thanks @venkatamutyala the latest change will require the readme to be updated again

joe-niland commented 6 months ago

/terratest

joe-niland commented 6 months ago

Thanks for your contribution @venkatamutyala