title: AWS ALB - prevent usage of TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
body: <p>I use AWS ALB. I configured it to the strictest security policy which is &quot;FS 1.2 res&quot; and as described <a href="https://docs.aws.amazon.com/elasticloadbalancing/latest/network/create-tls-listener.html" rel="nofollow noreferrer">here</a> it still supports <code>ECDHE-RSA-AES128-SHA256</code> and <code>ECDHE-RSA-AES256-SHA384</code></p>
  <p>(<code>TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256</code> and <code>TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384</code>)</p>
  <p>These are considered weak. Is there a way to avoid supporting them while using AWS?</p>
  <p><strong>Update: AWS added ELBSecurityPolicy-FS-1-2-Res-2020-10 that answers the need</strong></p>