How to resolve TLS 1.0 1nd 1.1 connection AWS API

0

Hi, We are getting mails regarding the use of AWS API with TLS version 1.0 1nd 1.1 will be deprecated and we must resolve the services to use TLS version 1.2. " We have identified TLS 1.0 or TLS 1.1 connections to AWS APIs from your account that must be updated for you to maintain AWS connectivity. Please update your client software as soon as possible to use TLS 1.2 or higher to avoid an availability impact. " We are using S3, SES SMTP, Load balancer and EC2 services in our account. As I understand if we update the AWS SDK in our application to access SES and S3 resource , the TLS version 1.2 can be updated.
Please correct me if I'm wrong? Also help me to understand how we can resolve the TLS update on all our services affected ?

Thanks and Regards, Sudhanshu Shekhar

  • Could you add the AWS SDK version you are using?

質問済み 6ヶ月前313ビュー
2回答
1

Hi,

I would start by identifying the source of the calls (to S3, SES, etc) and then review the host configuration. You may have to upgrade your OS, upgrade .Net if using .Net, enable TLS1.2, upgrade the AWS SDK...

Our blog post is a good starting point to get started. We also have other references I am including below, hopefully it helps getting started:

[1] Enabling TLS 1.2 EC2 Windows Server 2012 to 2022: https://repost.aws/articles/ARZhgX8RY2Qm6KL1IDpkMv_g/enabling-tls-1-2-client-side-support-on-ec2-windows-server-2012-to-2022

[2] Continued support of TLS 1.0/1.1 for my S3 buckets: https://repost.aws/knowledge-center/s3-access-old-tls

[3] Enforcing TLS 1.2 for S3: https://repost.aws/knowledge-center/s3-enforce-modern-tls

[4] How do I find the SMTP clients using deprecated TLS versions?: https://repost.aws/articles/ARpq6we7zwQNCbkGL5IhAarg/how-do-i-find-the-smtp-clients-using-deprecated-tls-versions

[5] How do I find IP addresses of SMTP Clients behind a NAT gateway?: https://repost.aws/articles/ARevUPGDKvRyant5D1MA7yZg/how-do-i-find-ip-addresses-of-smtp-clients-behind-a-nat-gateway

Please note the deadline was June 28, 2023 and our service teams have been gradually rolling out to changes to all endpoints since that date.

profile pictureAWS
エキスパート
回答済み 6ヶ月前
0
profile pictureAWS
エキスパート
David
回答済み 6ヶ月前

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ