s3 tls update still, getting email from aws that s3 tls is 1 instaed of 1.2

This article provides information on the changes and how to find what is still making TLS 1.0 and 1.1 calls.

https://aws.amazon.com/blogs/security/tls-1-2-required-for-aws-endpoints/

AWS CloudTrail records are especially useful to identify if you are using the outdated TLS versions. You can now search for the TLS version used for your connections by using the recently added tlsDetails field. The tlsDetails structure in each CloudTrail record contains the TLS version, cipher suite, and the client-provided host name used in the service API call, which is typically the fully qualified domain name (FQDN) of the service endpoint. You can then use the data in the records to help you pinpoint your client software that is responsible for the TLS 1.0 or 1.1 call, and update it accordingly. Over half of AWS services currently provide the TLS information in the CloudTrail tlsDetails field, and we are continuing to roll this out for the remaining services in the coming months.