CC-2605: ssl_policy ELBSecurityPolicy-TLS-1-2-2017-01 -> ELBSecurityP…

…olicy-TLS13-1-2-2021-06
ministryofjustice · Aug 9, 2024 · c53d2b5 · c53d2b5
1 parent 5c28eb9
commit c53d2b5
Show file tree

Hide file tree

Showing 4 changed files with 12 additions and 12 deletions.
diff --git a/terraform/environments/ccms-ebs-upgrade/ec2-oracle_ebs_apps-alb.tf b/terraform/environments/ccms-ebs-upgrade/ec2-oracle_ebs_apps-alb.tf
@@ -26,7 +26,7 @@ resource "aws_lb_listener" "ebsapps_listener" {
   load_balancer_arn = aws_lb.ebsapps_lb.arn
   port              = "443"
   protocol          = "HTTPS"
-  ssl_policy        = "ELBSecurityPolicy-2016-08"
+  ssl_policy        = "ELBSecurityPolicy-TLS13-1-2-2021-06"
   certificate_arn   = aws_acm_certificate.external.arn
 
   default_action {

diff --git a/terraform/environments/ccms-ebs-upgrade/ec2-oracle_webgate-alb.tf b/terraform/environments/ccms-ebs-upgrade/ec2-oracle_webgate-alb.tf
@@ -26,7 +26,7 @@ resource "aws_lb_listener" "webgate_listener" {
   load_balancer_arn = aws_lb.webgate_lb.arn
   port              = "443"
   protocol          = "HTTPS"
-  ssl_policy        = "ELBSecurityPolicy-2016-08"
+  ssl_policy        = "ELBSecurityPolicy-TLS13-1-2-2021-06"
   certificate_arn   = aws_acm_certificate.external.arn
 
   default_action {

diff --git a/terraform/environments/laa-oem/oem_ec2_app_lb.tf b/terraform/environments/laa-oem/oem_ec2_app_lb.tf
@@ -13,7 +13,7 @@ resource "aws_lb_listener" "oem_app" {
   port              = 443
   protocol          = "HTTPS"
 
-  ssl_policy      = "ELBSecurityPolicy-TLS-1-2-2017-01"
+  ssl_policy      = "ELBSecurityPolicy-TLS13-1-2-2021-06"
   certificate_arn = aws_acm_certificate.laa_cert.arn
 
   default_action {
@@ -27,7 +27,7 @@ resource "aws_lb_listener" "oem_app_3872" {
   port              = 3872
   protocol          = "HTTPS"
 
-  ssl_policy      = "ELBSecurityPolicy-TLS-1-2-2017-01"
+  ssl_policy      = "ELBSecurityPolicy-TLS13-1-2-2021-06"
   certificate_arn = aws_acm_certificate.laa_cert.arn
 
   default_action {
@@ -41,7 +41,7 @@ resource "aws_lb_listener" "oem_app_4903" {
   port              = 4903
   protocol          = "HTTPS"
 
-  ssl_policy      = "ELBSecurityPolicy-TLS-1-2-2017-01"
+  ssl_policy      = "ELBSecurityPolicy-TLS13-1-2-2021-06"
   certificate_arn = aws_acm_certificate.laa_cert.arn
 
   default_action {
@@ -55,7 +55,7 @@ resource "aws_lb_listener" "oem_app_7102" {
   port              = 7102
   protocol          = "HTTPS"
 
-  ssl_policy      = "ELBSecurityPolicy-TLS-1-2-2017-01"
+  ssl_policy      = "ELBSecurityPolicy-TLS13-1-2-2021-06"
   certificate_arn = aws_acm_certificate.laa_cert.arn
 
   default_action {
@@ -69,7 +69,7 @@ resource "aws_lb_listener" "oem_app_7803" {
   port              = 7803
   protocol          = "HTTPS"
 
-  ssl_policy      = "ELBSecurityPolicy-TLS-1-2-2017-01"
+  ssl_policy      = "ELBSecurityPolicy-TLS13-1-2-2021-06"
   certificate_arn = aws_acm_certificate.laa_cert.arn
 
   default_action {

diff --git a/terraform/environments/laa-oem/oem_ec2_app_lb_internal.tf b/terraform/environments/laa-oem/oem_ec2_app_lb_internal.tf
@@ -13,7 +13,7 @@ resource "aws_lb_listener" "oem_app_internal" {
   port              = 443
   protocol          = "HTTPS"
 
-  ssl_policy      = "ELBSecurityPolicy-TLS-1-2-2017-01"
+  ssl_policy      = "ELBSecurityPolicy-TLS13-1-2-2021-06"
   certificate_arn = aws_acm_certificate.laa_cert.arn
 
   default_action {
@@ -27,7 +27,7 @@ resource "aws_lb_listener" "oem_app_3872_internal" {
   port              = 3872
   protocol          = "HTTPS"
 
-  ssl_policy      = "ELBSecurityPolicy-TLS-1-2-2017-01"
+  ssl_policy      = "ELBSecurityPolicy-TLS13-1-2-2021-06"
   certificate_arn = aws_acm_certificate.laa_cert.arn
 
   default_action {
@@ -41,7 +41,7 @@ resource "aws_lb_listener" "oem_app_4903_internal" {
   port              = 4903
   protocol          = "HTTPS"
 
-  ssl_policy      = "ELBSecurityPolicy-TLS-1-2-2017-01"
+  ssl_policy      = "ELBSecurityPolicy-TLS13-1-2-2021-06"
   certificate_arn = aws_acm_certificate.laa_cert.arn
 
   default_action {
@@ -55,7 +55,7 @@ resource "aws_lb_listener" "oem_app_7102_internal" {
   port              = 7102
   protocol          = "HTTPS"
 
-  ssl_policy      = "ELBSecurityPolicy-TLS-1-2-2017-01"
+  ssl_policy      = "ELBSecurityPolicy-TLS13-1-2-2021-06"
   certificate_arn = aws_acm_certificate.laa_cert.arn
 
   default_action {
@@ -69,7 +69,7 @@ resource "aws_lb_listener" "oem_app_7803_internal" {
   port              = 7803
   protocol          = "HTTPS"
 
-  ssl_policy      = "ELBSecurityPolicy-TLS-1-2-2017-01"
+  ssl_policy      = "ELBSecurityPolicy-TLS13-1-2-2021-06"
   certificate_arn = aws_acm_certificate.laa_cert.arn
 
   default_action {