Does the TLS version upgrade to 1.2 also effect CloudFront distributions

0

Will the AWS TLS Version change also change the default TLS Version of a CloudFront distribution, which using the Default CloudFront Certificate(*.cloudfront.net) ? Currently, TLSv1 is used for this one.

Some background from the terraform docs: https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/cloudfront_distribution#minimum_protocol_version

Daniel
已提问 1 年前686 查看次数
1 回答
0
已接受的回答

No, it doesn't apply to CloudFront distributions. The announcement you've linked to is all about AWS API endpoints. So if you were calling EC2, SQS or even CloudFront to perform some action to modify/launch/configure something in those services then TLS 1.2 is becoming the default.

For CloudFront distributions, you get to control the ciphers for your distributions. We encourage the use of newer, more secure protocols but also appreciate that there might be some clients for your applications that don't support them.

profile pictureAWS
专家
已回答 1 年前

您未登录。 登录 发布回答。

一个好的回答可以清楚地解答问题和提供建设性反馈,并能促进提问者的职业发展。

回答问题的准则