remove setting TLS by default

aws · Mar 3, 2021 · dc18d74 · dc18d74
1 parent 89533c3
commit dc18d74
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 4 deletions.
diff --git a/packages/@aws-cdk/aws-apigateway/lib/domain-name.ts b/packages/@aws-cdk/aws-apigateway/lib/domain-name.ts
@@ -122,7 +122,7 @@ export class DomainName extends Resource implements IDomainName {
       regionalCertificateArn: edge ? undefined : props.certificate.certificateArn,
       endpointConfiguration: { types: [endpointType] },
       mutualTlsAuthentication: mtlsConfig,
-      securityPolicy: props.securityPolicy ?? SecurityPolicy.TLS_1_2,
+      securityPolicy: props.securityPolicy,
     });
 
     this.domainName = resource.ref;

diff --git a/packages/@aws-cdk/aws-apigateway/test/domains.test.ts b/packages/@aws-cdk/aws-apigateway/test/domains.test.ts
@@ -1,3 +1,4 @@
+import { ABSENT } from '@aws-cdk/assert';
 import '@aws-cdk/assert/jest';
 import * as acm from '@aws-cdk/aws-certificatemanager';
 import { Bucket } from '@aws-cdk/aws-s3';
@@ -105,7 +106,7 @@ describe('domains', () => {
       'DomainName': 'default.example.com',
       'EndpointConfiguration': { 'Types': ['REGIONAL'] },
       'RegionalCertificateArn': { 'Ref': 'Cert5C9FAEC1' },
-      'SecurityPolicy': 'TLS_1_2',
+      'SecurityPolicy': ABSENT,
     });
   });
 
@@ -331,8 +332,6 @@ describe('domains', () => {
         'Ref': 'apiDeploymentStageprod896C8101',
       },
     });
-
-
   });
 
   test('"addBasePathMapping" can be used to add base path mapping to the domain with specific stage', () => {