554 Access denied: Amazon SES no longer supports TLS 1.0 and TLS 1.1 connections. You must update your client to use TLS version 1.2 or above

Hi,

Yes, upgrade to TLS 1.2 is now enforced: see https://aws.amazon.com/blogs/security/tls-1-2-required-for-aws-endpoints/

So, you must upgrade your LB and/or webserver so that they work at this newer version of TLS. You application code should remain unchanged.

I don't know all details of your Tomcat config, but usually you enforce TLS v1.2 with -Dhttps.protocols=TLSv1.2 as a config parameter of your setenv.sh script

Best,

Didier