minimumProtocolVersion property
Specify the minimum version of the SSL/TLS protocol that you want CloudFront
to use for HTTPS connections between viewers and CloudFront:
SSLv3
or TLSv1
. CloudFront serves your objects
only to viewers that support SSL/TLS version that you specify and later
versions. The TLSv1
protocol is more secure, so we recommend
that you specify SSLv3
only if your users are using browsers or
devices that don't support TLSv1
. Note the following:
-
If you specify
<CloudFrontDefaultCertificate>true<CloudFrontDefaultCertificate>,
the minimum SSL protocol version is
TLSv1
and can't be changed. -
If you're using a custom certificate (if you specify a value for
ACMCertificateArn
or forIAMCertificateId
) and if you're using SNI (if you specifysni-only
forSSLSupportMethod
), you must specifyTLSv1
forMinimumProtocolVersion
.
Implementation
final MinimumProtocolVersion? minimumProtocolVersion;