Setting up CloudFront service

0

Hi there,

I need help setting up a CloudFront service to redirect traffic from my TLS 1.0 application to a TLS 1.2

Thanks!

Tarik
asked a year ago210 views
3 Answers
2

Clients will negotiate the highest level they can support.
https://aws.amazon.com/about-aws/whats-new/2022/05/amazon-cloudfront-tls-version-cipher-suite-viewer-header/ can let your application make decisions based on client TLS level. Alternatively, you can set a security policy on CloudFront https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/secure-connections-supported-viewer-protocols-ciphers.html that denies the lower level of TLS, however there's no mechanism to redirect clients at that point -- they'll get kicked out before they are able to issue a request or receive a response.

So, you can either allow the lower TLS level and have your application make a decision to redirect based on the header, or deny the lower TLS version and disallow clients that don't support it.

profile picture
answered a year ago
profile picture
EXPERT
reviewed a year ago
0

To set up a CloudFront service to redirect traffic from a TLS 1.0 application to TLS 1.2, you create a new CloudFront distribution in the AWS Management Console and specify your origin server as the endpoint for the TLS 1.0 application. Configure the CloudFront distribution to use a custom SSL certificate that supports TLS 1.2. This certificate should be issued by a trusted CA. In the CloudFront distribution settings, enable the Minimum SSL Protocol Version option and set it to TLSv1.2 to ensure that only TLS 1.2 connections are allowed.

answered a year ago
0

After creating a new CloudFront distribution in the AWS Management Console, assigning the origin server as the TLS application's endpoint, and obtaining a trusted certificate from the CA. Make sure that only TLS connections are allowed in your CloudFront distribution settings.

profile pictureAWS
answered a year ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions