title: Set the minimum TLS version as 1.2 for API Gateway
body: <p>I have api gateway for lambda such as</p>
  <pre><code>https://x6c5e11xkc.execute-api.ap-northeast-1.amazonaws.com/prod/c
  </code></pre>
  <p>Now I want to set this TLS for more than 1.2 only.</p>
  <p>I found the document here below, but I am not sure what the custom-domain... my url is custom-domain???</p>
  <p><a href="https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-custom-domain-tls-version.html" rel="nofollow noreferrer">https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-custom-domain-tls-version.html</a></p>
  <p>Where should I set??</p>
  <p>my curl response is here</p>
  <pre><code>$curl -s -v --tlsv1.1  https://x6c5e11xkc.execute-api.ap-northeast-1.amazonaws.com/prod/c
  
  *   Trying 65.9.17.XX:443...
  * Connected to x6c5e11xkc.execute-api.ap-northeast-1.amazonaws.com (65.9.17.49) port 443 (#0)
  * ALPN, offering h2
  * ALPN, offering http/1.1
  * successfully set certificate verify locations:
  *  CAfile: /etc/ssl/cert.pem
  *  CApath: none
  * (304) (OUT), TLS handshake, Client hello (1):
  * (304) (IN), TLS handshake, Server hello (2):
  * (304) (IN), TLS handshake, Unknown (8):
  * (304) (IN), TLS handshake, Certificate (11):
  * (304) (IN), TLS handshake, CERT verify (15):
  * (304) (IN), TLS handshake, Finished (20):
  * (304) (OUT), TLS handshake, Finished (20):
  * SSL connection using TLSv1.3 / AEAD-AES128-GCM-SHA256
  * ALPN, server accepted to use h2
  * Server certificate:
  *  subject: CN=*.execute-api.ap-northeast-1.amazonaws.com
  *  start date: Sep 27 00:00:00 2021 GMT
  *  expire date: Oct 26 23:59:59 2022 GMT
  *  subjectAltName: host &quot;x6c5e11xkc.execute-api.ap-northeast-1.amazonaws.com&quot; matched cert's &quot;*.execute-api.ap-northeast-1.amazonaws.com&quot;
  *  issuer: C=US; O=Amazon; OU=Server CA 1B; CN=Amazon
  *  SSL certificate verify ok.
  * Using HTTP2, server supports multiplexing
  * Connection state changed (HTTP/2 confirmed)
  * Copying HTTP/2 data in stream buffer to connection buffer after upgrade: len=0
  * Using Stream ID: 1 (easy handle 0x11f80b600)
  &gt; GET /prod/c HTTP/2
  &gt; Host: x6c5e11xkc.execute-api.ap-northeast-1.amazonaws.com
  &gt; user-agent: curl/7.79.1
  &gt; accept: */*
  &gt; 
  * Connection state changed (MAX_CONCURRENT_STREAMS == 128)!
  
  &lt; HTTP/2 400 
  &lt; content-type: application/json
  &lt; content-length: 0
  &lt; date: Thu, 26 May 2022 02:41:55 GMT
  &lt; x-amzn-requestid: 73059bd5-7dae-4366-9a43-22fa50a331f2
  &lt; x-amz-apigw-id: StlUpHXeNjMFlww=
  &lt; x-amzn-trace-id: Root=1-628ee8ea-4bac852e062cd9bc28c64bf8;Sampled=0
  &lt; x-cache: Error from cloudfront
  &lt; via: 1.1 1eb001a93e05e8dbbe3865b069b8c264.cloudfront.net (CloudFront)
  &lt; x-amz-cf-pop: BKK50-C1
  &lt; x-amz-cf-id: T3RAkLW5HAdfnuxcVXlRHniwdNiI2JMyMzPxkAqcof1AkMTmJ7r0TQ==
  &lt; 
  </code></pre>