Error: Amazon S3 will stop supporting TLS 1.0 and TLS 1.1 connections. Please update your client to use TLS version 1.2 or above. To learn more and to update your client, see https://go.aws/3AUlVSb. F

0

Even though, i have update the my system to tls 1.2 & 1.3, i am still getting this error during deployment into AWS "Error: Amazon S3 will stop supporting TLS 1.0 and TLS 1.1 connections. Please update your client to use TLS version 1.2 or above. To learn more and to update your client, see https://go.aws/3AUlVSb. For further assistance, contact AWS support." can you anybody help me on what exactly needs to be configured to fix this issue?

Enter image description here

asked 9 months ago6132 views
2 Answers
0

Hi, what you want to update is not only your own system but the configuration of TLS in your s3 buckets: see https://repost.aws/knowledge-center/s3-enforce-modern-tls to get guidance about doing it. Best, Didier

profile pictureAWS
EXPERT
answered 9 months ago
profile picture
EXPERT
reviewed 9 months ago
0

Without a Request ID and a support case, it's difficult to see what request s3 received on our end.

The link shared above (https://repost.aws/knowledge-center/s3-enforce-modern-tls) will enforce tls 1.2 for requests to your bucket though in your case, it appears your system (or one dependency) is still defaulting to tls 1.0/1.1. You can definitely gives the policy a try and revert the policy if that does not work.

You can also disable TLS 1.0/1.1 client at the Windows registry level (you can use a tool like IIS Crypto for instance or manipulate the registry) to ensure TLS 1.0/1.1 is not used anymore. This will impact all other applications, so please be mindful of registry changes. While at it, you should ensure TLS 1.2 is enabled. Guidance to prepare a Windows host (on EC2 but applicable to your laptop) is available here: https://repost.aws/articles/ARZhgX8RY2Qm6KL1IDpkMv_g/enabling-tls-1-2-client-side-support-on-ec2-windows-server-2012-to-2022

I believe you know this already but the guidance to enforce to TLS 1.2 for AWS SDK for Javascript is available here: https://docs.aws.amazon.com/sdk-for-javascript/v2/developer-guide/enforcing-tls.html. Note that AWS SDK for Javascript v2 is in maintenance and it is recommended to upgrade to v3. This should not be your issue since the AWS SDK for JavaScript v2 automatically negotiates the highest level TLS version supported by a given AWS Service endpoint.

profile pictureAWS
EXPERT
answered 9 months ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions