From d0f9af202335b38f05d244cd7ae9a5e389e3ae46 Mon Sep 17 00:00:00 2001
From: Chris Park <chris.park@aligent.com.au>
Date: Tue, 30 Jan 2024 09:33:10 +1030
Subject: [PATCH] DO-1608: use most recent cipher suite for CloudFront
 distribution security policy

---
 packages/static-hosting/lib/static-hosting.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/packages/static-hosting/lib/static-hosting.ts b/packages/static-hosting/lib/static-hosting.ts
index f94db8aa..756d354c 100644
--- a/packages/static-hosting/lib/static-hosting.ts
+++ b/packages/static-hosting/lib/static-hosting.ts
@@ -386,7 +386,7 @@ export class StaticHosting extends Construct {
       logBucket: props.enableCloudFrontAccessLogging
         ? loggingBucket
         : undefined,
-      minimumProtocolVersion: SecurityPolicyProtocol.TLS_V1_2_2018,
+      minimumProtocolVersion: SecurityPolicyProtocol.TLS_V1_2_2021,
       certificate: Certificate.fromCertificateArn(
         this,
         "DomainCertificate",