AWS CDK Reference

Appearance

v2.274.0

SecurityPolicy Enum ​

The minimum version of the SSL protocol that you want API Gateway to use for HTTPS connections.

Source
aws-apigateway/lib/domain-name.ts
Type last changed
v2.242.0 · 10 Mar 2026

Example ​

ts
declare const acmCertificateForExampleCom: any;

new apigateway.DomainName(this, 'custom-domain', {
  domainName: 'example.com',
  certificate: acmCertificateForExampleCom,
  endpointType: apigateway.EndpointType.EDGE, // default is REGIONAL
  securityPolicy: apigateway.SecurityPolicy.TLS_1_2
});

Members ​

MemberDescription
TLS_1_0Cipher suite TLS 1.0.
TLS_1_2Cipher suite TLS 1.2.
TLS13_1_3_2025_09Cipher suite TLS 1.3 for regional/private endpoints.
TLS13_1_3_FIPS_2025_09Cipher suite TLS 1.3 (FIPS compliant) for regional/private endpoints.
TLS13_1_2_PQ_2025_09Cipher suite TLS 1.3 and TLS 1.2 with post-quantum cryptography for regional/private endpoints.
TLS13_1_2_PFS_PQ_2025_09Cipher suite TLS 1.3 and TLS 1.2 with Perfect Forward Secrecy and post-quantum cryptography for regional/private endpoints.
TLS13_2025_EDGECipher suite TLS 1.3 for edge-optimized endpoints.
TLS12_PFS_2025_EDGECipher suite TLS 1.2 with Perfect Forward Secrecy for edge-optimized endpoints.
TLS12_2018_EDGECipher suite TLS 1.2 for edge-optimized endpoints (legacy).

Referenced by ​

  • DomainNameOptions.securityPolicysecurity_policysecurityPolicySecurityPolicySecurityPolicy