AWS elasticloadbalancing documentation change
Summary
Added documentation about Forward Secrecy (FS) support in TLS 1.3 and specific TLS 1.2 policies
Security assessment
Enhances documentation about encryption security features (Forward Secrecy) but does not address a specific vulnerability. Provides guidance for secure configuration.
Diff
diff --git a/elasticloadbalancing/latest/application/describe-ssl-policies.md b/elasticloadbalancing/latest/application/describe-ssl-policies.md index dd2e6735d..59700e1de 100644 --- a//elasticloadbalancing/latest/application/describe-ssl-policies.md +++ b//elasticloadbalancing/latest/application/describe-ssl-policies.md @@ -32,0 +33,2 @@ Elastic Load Balancing uses a Secure Socket Layer (SSL) negotiation configuratio + * Policies that support only TLS 1.3 support Forward Secrecy (FS). Policies that support TLS 1.3 and TLS 1.2 that have only ciphers of the form TLS_* and ECDHE_* also provide FS. + @@ -74,0 +77,2 @@ You can use the TLS security policies to meet compliance and security standards +Policies that support only TLS 1.3 support Forward Secrecy (FS). Policies that support TLS 1.3 and TLS 1.2 that have only ciphers of the form TLS_* and ECDHE_* also provide FS. + @@ -980,0 +985,2 @@ FS (Forward Secrecy) supported security policies provide additional safeguards a +The policies in this section support FS, and "FS" is included in their names. However, these are not the only policies that support FS. Policies that support only TLS 1.3 support FS. Policies that support TLS 1.3 and TLS 1.2 that have only ciphers of the form TLS_* and ECDHE_* also provide FS. +