AWS API Gateway Domain does not use a modern security policy misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_AWS_206
Category - Subcategory	Public Exposure - APIs
Provider	AWS
Severity	LOW
Framework	Terraform

Impact

AWS API Gateway Domain allows you to set the security policy. Using TLS 1_0 allows you to use insecure cypher suites.

How to Fix

[source,go]

---

resource "aws_api_gateway_domain_name" "example" {

...

... }

---