Merge pull request #1292 from aligent/fix/DO-1608_bump_up_CloudFront_…

…SecurityPolicy DO-1608: use most recent cipher suite for CloudFront distribution security policy
aligent · Jan 30, 2024 · 45c56b0 · 45c56b0
2 parents 8f1789b + d0f9af2
commit 45c56b0
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/packages/static-hosting/lib/static-hosting.ts b/packages/static-hosting/lib/static-hosting.ts
@@ -386,7 +386,7 @@ export class StaticHosting extends Construct {
       logBucket: props.enableCloudFrontAccessLogging
         ? loggingBucket
         : undefined,
-      minimumProtocolVersion: SecurityPolicyProtocol.TLS_V1_2_2018,
+      minimumProtocolVersion: SecurityPolicyProtocol.TLS_V1_2_2021,
       certificate: Certificate.fromCertificateArn(
         this,
         "DomainCertificate",