Description

An ELB listener is using an outdated security policy to negotiate SSL connections between the ELB and its clients. Outdated security policies may have known SSL/TLS flaws that an adversary can use to intercept HTTPS connections between the ELB and its clients.

• 

  Recommended Mitigation

  Ensure that all Elastic Load Balancers are using the latest predefined security policies. Find more information here: https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/elb-security-policy-table.html