software.amazon.awscdk.services.elasticloadbalancingv2

Enum SslPolicy

java.lang.Object

java.lang.Enum<SslPolicy>

software.amazon.awscdk.services.elasticloadbalancingv2.SslPolicy

All Implemented Interfaces:

Serializable, Comparable<SslPolicy>

@Generated(value="jsii-pacmak/1.30.0 (build adae23f)",
           date="2021-06-30T10:01:19.821Z")
 @Stability(value=Experimental)
public enum SslPolicy
extends Enum<SslPolicy>

(experimental) Elastic Load Balancing provides the following security policies for Application Load Balancers.

We recommend the Recommended policy for general use. You can use the ForwardSecrecy policy if you require Forward Secrecy (FS).

You can use one of the TLS policies to meet compliance and security standards that require disabling certain TLS protocol versions, or to support legacy clients that require deprecated ciphers.

See Also:

https://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-https-listener.html

Enum Constant Summary

Enum Constants

Enum Constant and Description
FORWARD_SECRECY (experimental) Forward secrecy ciphers only.
FORWARD_SECRECY_TLS11 (experimental) Forward secrecy ciphers only with TLS1.1 and higher.
FORWARD_SECRECY_TLS12 (experimental) Forward secrecy ciphers and TLS1.2 only.
FORWARD_SECRECY_TLS12_RES (experimental) Strong forward secrecy ciphers and TLS1.2 only.
FORWARD_SECRECY_TLS12_RES_GCM (experimental) Strong foward secrecy ciphers and TLV1.2 only (2020 edition).
LEGACY (experimental) Support for DES-CBC3-SHA.
RECOMMENDED (experimental) The recommended security policy.
TLS11 (experimental) TLS1.1 and higher with all ciphers.
TLS12 (experimental) TLS1.2 only and no SHA ciphers.
TLS12_EXT (experimental) TLS1.2 only with all ciphers.

Method Summary

Modifier and Type	Method and Description
static SslPolicy	valueOf(String name) Returns the enum constant of this type with the specified name.
static SslPolicy[]	values() Returns an array containing the constants of this enum type, in the order they are declared.

Methods inherited from class java.lang.Enum

clone, compareTo, equals, finalize, getDeclaringClass, hashCode, name, ordinal, toString, valueOf

Methods inherited from class java.lang.Object

getClass, notify, notifyAll, wait, wait, wait

Enum Constant Detail

RECOMMENDED

@Stability(value=Experimental)
public static final SslPolicy RECOMMENDED

(experimental) The recommended security policy.

FORWARD_SECRECY_TLS12_RES_GCM

@Stability(value=Experimental)
public static final SslPolicy FORWARD_SECRECY_TLS12_RES_GCM

(experimental) Strong foward secrecy ciphers and TLV1.2 only (2020 edition). Same as FORWARD_SECRECY_TLS12_RES, but only supports GCM versions of the TLS ciphers.

FORWARD_SECRECY_TLS12_RES

@Stability(value=Experimental)
public static final SslPolicy FORWARD_SECRECY_TLS12_RES

(experimental) Strong forward secrecy ciphers and TLS1.2 only.

FORWARD_SECRECY_TLS12

@Stability(value=Experimental)
public static final SslPolicy FORWARD_SECRECY_TLS12

(experimental) Forward secrecy ciphers and TLS1.2 only.

FORWARD_SECRECY_TLS11

@Stability(value=Experimental)
public static final SslPolicy FORWARD_SECRECY_TLS11

(experimental) Forward secrecy ciphers only with TLS1.1 and higher.

FORWARD_SECRECY

@Stability(value=Experimental)
public static final SslPolicy FORWARD_SECRECY

(experimental) Forward secrecy ciphers only.

TLS12

@Stability(value=Experimental)
public static final SslPolicy TLS12

(experimental) TLS1.2 only and no SHA ciphers.

TLS12_EXT

@Stability(value=Experimental)
public static final SslPolicy TLS12_EXT

(experimental) TLS1.2 only with all ciphers.

TLS11

@Stability(value=Experimental)
public static final SslPolicy TLS11

(experimental) TLS1.1 and higher with all ciphers.

LEGACY

@Stability(value=Experimental)
public static final SslPolicy LEGACY

(experimental) Support for DES-CBC3-SHA.

Do not use this security policy unless you must support a legacy client that requires the DES-CBC3-SHA cipher, which is a weak cipher.

Method Detail

values

public static SslPolicy[] values()

Returns an array containing the constants of this enum type, in the order they are declared. This method may be used to iterate over the constants as follows:

for (SslPolicy c : SslPolicy.values())
    System.out.println(c);

Returns:

an array containing the constants of this enum type, in the order they are declared

valueOf

public static SslPolicy valueOf(String name)

Returns the enum constant of this type with the specified name. The string must match exactly an identifier used to declare an enum constant in this type. (Extraneous whitespace characters are not permitted.)

Parameters:

name - the name of the enum constant to be returned.

Returns:

the enum constant with the specified name

Throws:

IllegalArgumentException - if this enum type has no constant with the specified name

NullPointerException - if the argument is null