From eeefc4bbe225a323ad525094e725015a33bf7091 Mon Sep 17 00:00:00 2001
From: vincentwschau <99756290+vincentwschau@users.noreply.github.com>
Date: Wed, 16 Oct 2024 11:29:43 -0400
Subject: [PATCH] Update load balancer SSL policy. (#146)

* Update load balancer SSL policy.

* Remove extra lines.
---
 indexer/load_balancer.tf | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/indexer/load_balancer.tf b/indexer/load_balancer.tf
index ebdfeddc..c6a912cf 100644
--- a/indexer/load_balancer.tf
+++ b/indexer/load_balancer.tf
@@ -44,6 +44,8 @@ resource "aws_lb_listener" "public_https" {
   certificate_arn   = aws_acm_certificate.cert[0].arn
   port              = "443"
   protocol          = "HTTPS"
+  // Refer to https://docs.aws.amazon.com/elasticloadbalancing/latest/application/describe-ssl-policies.html
+  ssl_policy = "ELBSecurityPolicy-TLS13-1-2-2021-06"
 
   default_action {
     type = "fixed-response"