Update load balancer SSL policy.

dydxprotocol · Oct 16, 2024 · 6143127 · 6143127
1 parent a51b44f
commit 6143127
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/indexer/load_balancer.tf b/indexer/load_balancer.tf
@@ -44,6 +44,8 @@ resource "aws_lb_listener" "public_https" {
   certificate_arn   = aws_acm_certificate.cert[0].arn
   port              = "443"
   protocol          = "HTTPS"
+  // Refer to https://docs.aws.amazon.com/elasticloadbalancing/latest/application/describe-ssl-policies.html
+  ssl_policy = "ELBSecurityPolicy-TLS13-1-2-2021-06"
 
   default_action {
     type = "fixed-response"
@@ -154,3 +156,5 @@ resource "aws_lb_target_group" "services" {
     Environment = var.environment
   }
 }
+
+