From dc938179a29f553bbdf2c7bdb9b183104285499c Mon Sep 17 00:00:00 2001 From: Nick Lynch Date: Tue, 26 Jan 2021 17:49:13 +0000 Subject: [PATCH] feat(elbv2): add new 2020 SSL policy Adds the new 'ELBSecurityPolicy-FS-1-2-Res-2020-10' SSL policy. closes #12595 --- .../@aws-cdk/aws-elasticloadbalancingv2/lib/shared/enums.ts | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/packages/@aws-cdk/aws-elasticloadbalancingv2/lib/shared/enums.ts b/packages/@aws-cdk/aws-elasticloadbalancingv2/lib/shared/enums.ts index 89f2c88d7ad7e..be25c49b96513 100644 --- a/packages/@aws-cdk/aws-elasticloadbalancingv2/lib/shared/enums.ts +++ b/packages/@aws-cdk/aws-elasticloadbalancingv2/lib/shared/enums.ts @@ -82,6 +82,12 @@ export enum SslPolicy { */ RECOMMENDED = 'ELBSecurityPolicy-2016-08', + /** + * Strong foward secrecy ciphers and TLV1.2 only (2020 edition). + * Same as FORWARD_SECRECY_TLS12_RES, but only supports GCM versions of the TLS ciphers + */ + FORWARD_SECRECY_TLS12_RES_GCM = 'ELBSecurityPolicy-FS-1-2-Res-2020-10', + /** * Strong forward secrecy ciphers and TLS1.2 only */