SecurityPolicy

class aws_cdk.aws_apigateway.SecurityPolicy(*values)

Bases: Enum

The minimum version of the SSL protocol that you want API Gateway to use for HTTPS connections.

ExampleMetadata:

infused

Example:

# acm_certificate_for_example_com: Any


apigateway.DomainName(self, "custom-domain",
    domain_name="example.com",
    certificate=acm_certificate_for_example_com,
    endpoint_type=apigateway.EndpointType.EDGE,  # default is REGIONAL
    security_policy=apigateway.SecurityPolicy.TLS_1_2
)

Attributes

TLS12_2018_EDGE

Cipher suite TLS 1.2 for edge-optimized endpoints (legacy).

See:

https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-custom-domain-tls-version.html

TLS12_PFS_2025_EDGE

Cipher suite TLS 1.2 with Perfect Forward Secrecy for edge-optimized endpoints.

See:

https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-custom-domain-tls-version.html

TLS13_1_2_PFS_PQ_2025_09

Cipher suite TLS 1.3 and TLS 1.2 with Perfect Forward Secrecy and post-quantum cryptography for regional/private endpoints.

See:

https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-custom-domain-tls-version.html

TLS13_1_2_PQ_2025_09

Cipher suite TLS 1.3 and TLS 1.2 with post-quantum cryptography for regional/private endpoints.

See:

https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-custom-domain-tls-version.html

TLS13_1_3_2025_09

Cipher suite TLS 1.3 for regional/private endpoints.

See:

https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-custom-domain-tls-version.html

TLS13_1_3_FIPS_2025_09

Cipher suite TLS 1.3 (FIPS compliant) for regional/private endpoints.

See:

https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-custom-domain-tls-version.html

TLS13_2025_EDGE

Cipher suite TLS 1.3 for edge-optimized endpoints.

See:

https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-custom-domain-tls-version.html

TLS_1_0

Cipher suite TLS 1.0.

TLS_1_2

Cipher suite TLS 1.2.