Disable CBC and AES Ciphers

Hello Chris,

what you’re seeing isn’t something missing in your account, it’s the "nature" of Classic Load Balancers (CLB).

Classic Load Balancer stopped receiving new TLS/Security policy updates after 2017. Only Application Load Balancers and Network Load Balancers continue to get new SSL/TLS security policies. CLB simply doesn't support TLS v1.3 or the post-2017 hardened policies.

Your options are:

1. Stay on CLB with limitation of having policies that end 2017
2. Migrate to ALB / NLB which are getting ongoing security updates. This is strongly recommended, because CLB is considered "legacy"

Best regards, Neven