github.com/aquasecurity/trivy-iac@v0.8.1-0.20240127024015-3d8e412cf0ab/avd_docs/aws/elasticsearch/AVD-AWS-0126/Terraform.md (about)

     1  
     2  Use the most modern TLS/SSL policies available
     3  
     4  ```hcl
     5   resource "aws_elasticsearch_domain" "good_example" {
     6     domain_name = "domain-foo"
     7   
     8     domain_endpoint_options {
     9       enforce_https = true
    10       tls_security_policy = "Policy-Min-TLS-1-2-2019-07"
    11     }
    12   }
    13   
    14  ```
    15  
    16  #### Remediation Links
    17   - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticsearch_domain#tls_security_policy
    18