SSL policies should enforce secure versions of TLS
TLS versions prior to 1.2 are outdated and insecure. You should use 1.2 as aminimum version.
Impact
Data in transit is not sufficiently secured
Recommended Actions
Follow the appropriate remediation steps below to resolve the issue.
Enforce a minimum TLS version of 1.2
1
2
3
4
5
6
|
resource "google_compute_ssl_policy" "good_example" {
name = "production-ssl-policy"
profile = "MODERN"
min_tls_version = "TLS_1_2"
}
|