Move minimum_protocol_version to TLS 1.2

grupoboticario · May 15, 2020 · 7e1a649 · 7e1a649
1 parent 4f46d1e
commit 7e1a649
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/site-main/main.tf b/site-main/main.tf
@@ -99,7 +99,7 @@ resource "aws_cloudfront_distribution" "website_cdn" {
       origin_protocol_policy = "http-only"
       http_port              = "80"
       https_port             = "443"
-      origin_ssl_protocols   = ["TLSv1"]
+      origin_ssl_protocols   = ["TLSv1.2"]
     }
 
     custom_header {
@@ -150,7 +150,7 @@ resource "aws_cloudfront_distribution" "website_cdn" {
   viewer_certificate {
     acm_certificate_arn      = var.acm-certificate-arn
     ssl_support_method       = "sni-only"
-    minimum_protocol_version = "TLSv1"
+    minimum_protocol_version = "TLSv1.2"
   }
 
   aliases = [var.domain]