Need to disable ECDHE ciphers per security vendor

Hello, we're following security compliance on a site we manage and we've been told by a vendor that the following two cipher types have been found when scanning against the site, and they need to be disabled:

• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

I see no ciphersuite option provided by AWS that excludes these values while maintaining modern ones.

We're using ELBSecurityPolicy-TLS13-1-2-2021-06 now, please advise as to what I can do.

Thanks