github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/aws/elasticsearch/AVD-AWS-0126/Terraform.md (about)

     1  
     2  Use the most modern TLS/SSL policies available
     3  
     4  ```hcl
     5   resource "aws_elasticsearch_domain" "good_example" {
     6     domain_name = "domain-foo"
     7   
     8     domain_endpoint_options {
     9       enforce_https = true
    10       tls_security_policy = "Policy-Min-TLS-1-2-2019-07"
    11     }
    12   }
    13   
    14  ```
    15  
    16  #### Remediation Links
    17   - https://registry.terraform.io/providers/hashicorp/aws/latest/docs/resources/elasticsearch_domain#tls_security_policy
    18