CRITICAL
Source
Trivy
ID
AVD-GCP-0039

SSL policies should enforce secure versions of TLS

TLS versions prior to 1.2 are outdated and insecure. You should use 1.2 as aminimum version.

Impact

Follow the appropriate remediation steps below to resolve the issue.

Enforce a minimum TLS version of 1.2

1
2
3
4
5
resource "google_compute_ssl_policy" "good_example" {
  name            = "production-ssl-policy"
  profile         = "MODERN"
  min_tls_version = "TLS_1_2"
}