AWS Security ChangesHomeSearch

AWS elasticloadbalancing medium security documentation change

Service: elasticloadbalancing · 2026-05-07 · Security-related medium

File: elasticloadbalancing/latest/network/tls-listener-certificates.md

Summary

Increased maximum supported RSA key size from 2048-bit to 3072-bit

Security assessment

Key size increase directly addresses cryptographic strength vulnerability by supporting stronger 3072-bit RSA keys, mitigating weaker encryption risks. Concrete security improvement against brute-force attacks.

Diff

diff --git a/elasticloadbalancing/latest/network/tls-listener-certificates.md b/elasticloadbalancing/latest/network/tls-listener-certificates.md
index 7aa73c49b..7394e2512 100644
--- a//elasticloadbalancing/latest/network/tls-listener-certificates.md
+++ b//elasticloadbalancing/latest/network/tls-listener-certificates.md
@@ -44 +44 @@ Note that if your listener has a previously working certificate configured, traf
-To avoid this, verify the key size of your certificate before importing it into IAM. For RSA certificates, the maximum supported key size for NLB TLS listeners is 2048-bit.
+To avoid this, verify the key size of your certificate before importing it into IAM. For RSA certificates, the maximum supported key size for NLB TLS listeners is 3072-bit.