スキップしてコンテンツを表示

Disable CBC and AES Ciphers

0

I am using a Classic Load Balancer and when I look at my available security policies, I do not have anything after 2017. When looking online to disable these ciphers, I am told to use ELBSecurityPolicy-TLS13-1-2-Res-2021-06

How can I get this security policy into my account?

Thanks!

1回答
1
承認された回答

Hello Chris,

what you’re seeing isn’t something missing in your account, it’s the "nature" of Classic Load Balancers (CLB).

Classic Load Balancer stopped receiving new TLS/Security policy updates after 2017. Only Application Load Balancers and Network Load Balancers continue to get new SSL/TLS security policies. CLB simply doesn't support TLS v1.3 or the post-2017 hardened policies.

Your options are:

  1. Stay on CLB with limitation of having policies that end 2017
  2. Migrate to ALB / NLB which are getting ongoing security updates. This is strongly recommended, because CLB is considered "legacy"

Best regards, Neven

AWS

回答済み 1年前

AWS
エキスパート

レビュー済み 1年前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

関連するコンテンツ