Try TLS 1.3

stevebux · stevebux · commit fabd648c67ee · 2026-03-24T11:13:28.000Z
diff --git a/infrastructure/terraform/components/api/api_gateway_rest_api_tls.tf b/infrastructure/terraform/components/api/api_gateway_rest_api_tls.tf
@@ -5,7 +5,7 @@
 # aws_api_gateway_rest_api whenever the desired security policy changes, ensuring
 # the new API is always created with the correct TLS version.
 locals {
-  rest_api_security_policy = "TLS_1_2"
+  rest_api_security_policy = "SecurityPolicy_TLS13_1_2_2021_06"
 }
 
 resource "terraform_data" "rest_api_security_policy" {

Original file line number	Diff line number	Diff line change
`@@ -5,7 +5,7 @@`
`5`	`5`	`# aws_api_gateway_rest_api whenever the desired security policy changes, ensuring`
`6`	`6`	`# the new API is always created with the correct TLS version.`
`7`	`7`	`locals {`
`8`		`- rest_api_security_policy = "TLS_1_2"`
	`8`	`+ rest_api_security_policy = "SecurityPolicy_TLS13_1_2_2021_06"`
`9`	`9`	`}`
`10`	`10`
`11`	`11`	`resource "terraform_data" "rest_api_security_policy" {`