Elasticsearch domain endpoint is using outdated TLS policy TF-AWS034
Security
Major
It is not recommended to use outdated/insecure TLS versions for encryption.
You should be using TLS v1.2+.
Examples
Bad practice
resource "aws_elasticsearch_domain" "my_elasticsearch_domain" {
domain_name = "domain-foo"
domain_endpoint_options {
enforce_https = true
tls_security_policy = "Policy-Min-TLS-1-0-2019-07"
}
}
Recommended
resource "aws_elasticsearch_domain" "my_elasticsearch_domain" {
domain_name = "domain-foo"
domain_endpoint_options {
enforce_https = true
tls_security_policy = "Policy-Min-TLS-1-2-2019-07"
}
}