AWS elasticloadbalancing documentation change

Service: elasticloadbalancing · 2025-05-22 · Documentation medium

File: elasticloadbalancing/latest/classic/elb-ssl-security-policy.md

Summary

Added new 'Cipher suite for back-end connections' section listing supported ciphers

Security assessment

While this adds security-related documentation about secure cipher configuration, there's no evidence it addresses a specific security vulnerability. It provides general guidance for proper TLS configuration.

Diff

diff --git a/elasticloadbalancing/latest/classic/elb-ssl-security-policy.md b/elasticloadbalancing/latest/classic/elb-ssl-security-policy.md
index 4e4b52986..2afffc821 100644
--- a//elasticloadbalancing/latest/classic/elb-ssl-security-policy.md
+++ b//elasticloadbalancing/latest/classic/elb-ssl-security-policy.md
@@ -5 +5 @@
-Security policiesSSL protocolsServer Order PreferenceSSL ciphers
+Security policiesSSL protocolsServer Order PreferenceSSL ciphersCipher suite for back-end connections
@@ -20,0 +21,2 @@ Elastic Load Balancing uses a Secure Socket Layer (SSL) negotiation configuratio
+  * Cipher suite for back-end connections
+
@@ -250,0 +253,69 @@ Elastic Load Balancing supports the following ciphers for use with Classic Load
+## Cipher suite for back-end connections
+
+Classic Load Balancers uses a static cipher suite for back-end connections. If your Classic Load Balancer and registered instances can't negotiate a connection, include one of the following ciphers.
+
+  * AES256-GCM-SHA384
+
+  * AES256-SHA256
+
+  * AES256-SHA
+
+  * CAMELLIA256-SHA
+
+  * AES128-GCM-SHA256
+
+  * AES128-SHA256
+
+  * AES128-SHA
+
+  * CAMELLIA128-SHA
+
+  * RC4-SHA
+
+  * DES-CBC3-SHA
+
+  * DES-CBC-SHA
+
+  * DHE-DSS-AES256-GCM-SHA384
+
+  * DHE-RSA-AES256-GCM-SHA384
+
+  * DHE-RSA-AES256-SHA256
+
+  * DHE-DSS-AES256-SHA256
+
+  * DHE-RSA-AES256-SHA
+
+  * DHE-DSS-AES256-SHA
+
+  * DHE-RSA-CAMELLIA256-SHA
+
+  * DHE-DSS-CAMELLIA256-SHA
+
+  * DHE-DSS-AES128-GCM-SHA256
+
+  * DHE-RSA-AES128-GCM-SHA256
+
+  * DHE-RSA-AES128-SHA256
+
+  * DHE-DSS-AES128-SHA256
+
+  * DHE-RSA-AES128-SHA
+
+  * DHE-DSS-AES128-SHA
+
+  * DHE-RSA-CAMELLIA128-SHA
+
+  * DHE-DSS-CAMELLIA128-SHA
+
+  * EDH-RSA-DES-CBC3-SHA
+
+  * EDH-DSS-DES-CBC3-SHA
+
+  * EDH-RSA-DES-CBC-SHA
+
+  * EDH-DSS-DES-CBC-SHA
+
+
+
+