Back to All Checks
Medium APIGateway Regional

API Gateway domain names should use recommended security policies

Description

Flags API Gateway custom domain names that are configured with the legacy TLS_1_0 security policy. TLS_1_0 is deprecated and exposes client traffic to known protocol-level weaknesses; recommended policies enforce TLS 1.2 or higher.

Remediation

Reconfigure each affected API Gateway custom domain to use a recommended security policy of TLS_1_2 or higher.

Steps

  1. Open the API Gateway console and select Custom domain names.
  2. Choose the affected domain and edit the configuration.
  3. Set the minimum TLS version (security policy) to TLS_1_2.
  4. Save the change and verify clients can still negotiate TLS 1.2.
Start Your Free Security Check