AWS Load Balancers Get RFC 9151 Security Boost
AWS Application and Network Load Balancers now support RFC 9151 compliant TLS security policies, meeting NSA's Commercial National Security Algorithm (CNSA) 1.0 requirements. You can enforce these stricter crypto standards while keeping backward compatibility with non-CNSA clients—perfect for gradual migration without breaking stuff. The feature rolls out across all AWS regions at no extra cost, so just update your HTTPS/TLS listeners through the console, CLI, or API to get started.