diff --git a/cdk/lib/__snapshots__/braze-components.test.ts.snap b/cdk/lib/__snapshots__/braze-components.test.ts.snap
index 44592070..c81e30a4 100644
--- a/cdk/lib/__snapshots__/braze-components.test.ts.snap
+++ b/cdk/lib/__snapshots__/braze-components.test.ts.snap
@@ -78,6 +78,7 @@ Object {
                 ],
               ],
             },
+            "MinimumProtocolVersion": "TLSv1.2_2018",
             "SslSupportMethod": "sni-only",
           },
         },
diff --git a/cdk/lib/braze-components.ts b/cdk/lib/braze-components.ts
index 00a9b6c8..b2acb0d3 100644
--- a/cdk/lib/braze-components.ts
+++ b/cdk/lib/braze-components.ts
@@ -7,6 +7,7 @@ import { Certificate } from 'aws-cdk-lib/aws-certificatemanager';
 import {
     CloudFrontWebDistribution,
     OriginAccessIdentity,
+    SecurityPolicyProtocol,
     ViewerCertificate,
 } from 'aws-cdk-lib/aws-cloudfront';
 import { Bucket } from 'aws-cdk-lib/aws-s3';
@@ -52,6 +53,7 @@ export class BrazeComponents extends GuStack {
             ],
             viewerCertificate: ViewerCertificate.fromAcmCertificate(certificate, {
                 aliases: [props.domainName],
+                securityPolicy: SecurityPolicyProtocol.TLS_V1_2_2018,
             }),
         });