chore: upgrade ALB to recommend SSL policy (#683)

Update to the latest recommend ALB SSL policy which is FIPS 140-3 compliant.
cds-snc · Oct 15, 2024 · ccb16d3 · ccb16d3
1 parent b283a94
commit ccb16d3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/terraform/alb.tf b/terraform/alb.tf
@@ -30,7 +30,7 @@ resource "aws_lb_listener" "sre_bot_listener" {
   load_balancer_arn = aws_lb.sre_bot.arn
   port              = "443"
   protocol          = "HTTPS"
-  ssl_policy        = "ELBSecurityPolicy-FS-1-2-Res-2020-10"
+  ssl_policy        = "ELBSecurityPolicy-TLS13-1-2-FIPS-2023-04"
   certificate_arn   = aws_acm_certificate.sre_bot.arn
 
   default_action {