Add security policy property to CloudFront

guardian · Nov 8, 2024 · 44a3aea · 44a3aea
1 parent cc5c6d0
commit 44a3aea
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/cdk/lib/__snapshots__/braze-components.test.ts.snap b/cdk/lib/__snapshots__/braze-components.test.ts.snap
@@ -78,6 +78,7 @@ Object {
                 ],
               ],
             },
+            "MinimumProtocolVersion": "TLSv1.2_2018",
             "SslSupportMethod": "sni-only",
           },
         },

diff --git a/cdk/lib/braze-components.ts b/cdk/lib/braze-components.ts
@@ -7,6 +7,7 @@ import { Certificate } from 'aws-cdk-lib/aws-certificatemanager';
 import {
     CloudFrontWebDistribution,
     OriginAccessIdentity,
+    SecurityPolicyProtocol,
     ViewerCertificate,
 } from 'aws-cdk-lib/aws-cloudfront';
 import { Bucket } from 'aws-cdk-lib/aws-s3';
@@ -52,6 +53,7 @@ export class BrazeComponents extends GuStack {
             ],
             viewerCertificate: ViewerCertificate.fromAcmCertificate(certificate, {
                 aliases: [props.domainName],
+                securityPolicy: SecurityPolicyProtocol.TLS_V1_2_2018,
             }),
         });
-Original file line number
+Diff line change
@@ Expand Up / @@ -78,6 +78,7 @@ Object { @@
                     ],
                   ],
                 },
+                "MinimumProtocolVersion": "TLSv1.2_2018",
                 "SslSupportMethod": "sni-only",
               },
             },
@@ Expand Down @@