elb.tf

elb.tf

resource "aws_lb_ssl_negotiation_policy" "tls_policy" {
  name          = "${aws_elb.elb.name}-policy"
  load_balancer = "${aws_elb.elb.id}"
  lb_port       = 443

  attribute {
    name  = "Protocol-TLSv1"
    value = "true"
  }

  attribute {
    name  = "Protocol-TLSv1.1"
    value = "true"
  }

  attribute {
    name  = "Protocol-TLSv1.2"
    value = "true"
  }

  attribute {
    name  = "Server-Defined-Cipher-Order"
    value = "true"
  }

  attribute {
    name  = "ECDHE-ECDSA-AES128-GCM-SHA256"
    value = "true"
  }

  attribute {
    name  = "ECDHE-RSA-AES128-GCM-SHA256"
    value = "true"
  }

  attribute {
    name  = "ECDHE-ECDSA-AES128-SHA256"
    value = "true"
  }

  attribute {
    name  = "ECDHE-RSA-AES128-SHA256"
    value = "true"
  }

  attribute {
    name  = "ECDHE-ECDSA-AES128-SHA"
    value = "true"
  }

  attribute {
    name  = "ECDHE-RSA-AES128-SHA"
    value = "true"
  }

  attribute {
    name  = "DHE-RSA-AES128-SHA"
    value = "false"
  }

  attribute {
    name  = "ECDHE-ECDSA-AES256-GCM-SHA384"
    value = "true"
  }

  attribute {
    name  = "ECDHE-RSA-AES256-GCM-SHA384"
    value = "true"
  }

  attribute {
    name  = "ECDHE-ECDSA-AES256-SHA384"
    value = "true"
  }

  attribute {
    name  = "ECDHE-RSA-AES256-SHA384"
    value = "true"
  }

  attribute {
    name  = "ECDHE-RSA-AES256-SHA"
    value = "true"
  }

  attribute {
    name  = "ECDHE-ECDSA-AES256-SHA"
    value = "true"
  }

  attribute {
    name  = "AES128-GCM-SHA256"
    value = "true"
  }

  attribute {
    name  = "AES128-SHA256"
    value = "true"
  }

  attribute {
    name  = "AES128-SHA"
    value = "true"
  }

  attribute {
    name  = "AES256-GCM-SHA384"
    value = "true"
  }

  attribute {
    name  = "AES256-SHA256"
    value = "true"
  }

  attribute {
    name  = "AES256-SHA"
    value = "true"
  }

  attribute {
    name  = "DHE-DSS-AES128-SHA"
    value = "false"
  }

  attribute {
    name  = "CAMELLIA128-SHA"
    value = "false"
  }

  attribute {
    name  = "EDH-RSA-DES-CBC3-SHA"
    value = "false"
  }

  attribute {
    name  = "DES-CBC3-SHA"
    value = "false"
  }

  attribute {
    name  = "ECDHE-RSA-RC4-SHA"
    value = "false"
  }

  attribute {
    name  = "RC4-SHA"
    value = "false"
  }

  attribute {
    name  = "ECDHE-ECDSA-RC4-SHA"
    value = "false"
  }

  attribute {
    name  = "DHE-DSS-AES256-GCM-SHA384"
    value = "false"
  }

  attribute {
    name  = "DHE-RSA-AES256-GCM-SHA384"
    value = "false"
  }

  attribute {
    name  = "DHE-RSA-AES256-SHA256"
    value = "false"
  }

  attribute {
    name  = "DHE-DSS-AES256-SHA256"
    value = "false"
  }

  attribute {
    name  = "DHE-RSA-AES256-SHA"
    value = "false"
  }

  attribute {
    name  = "DHE-DSS-AES256-SHA"
    value = "false"
  }

  attribute {
    name  = "DHE-RSA-CAMELLIA256-SHA"
    value = "false"
  }

  attribute {
    name  = "DHE-DSS-CAMELLIA256-SHA"
    value = "false"
  }

  attribute {
    name  = "CAMELLIA256-SHA"
    value = "false"
  }

  attribute {
    name  = "EDH-DSS-DES-CBC3-SHA"
    value = "false"
  }

  attribute {
    name  = "DHE-DSS-AES128-GCM-SHA256"
    value = "false"
  }

  attribute {
    name  = "DHE-RSA-AES128-GCM-SHA256"
    value = "false"
  }

  attribute {
    name  = "DHE-RSA-AES128-SHA256"
    value = "false"
  }

  attribute {
    name  = "DHE-DSS-AES128-SHA256"
    value = "false"
  }

  attribute {
    name  = "DHE-RSA-CAMELLIA128-SHA"
    value = "false"
  }

  attribute {
    name  = "DHE-DSS-CAMELLIA128-SHA"
    value = "false"
  }

  attribute {
    name  = "ADH-AES128-GCM-SHA256"
    value = "false"
  }

  attribute {
    name  = "ADH-AES128-SHA"
    value = "false"
  }

  attribute {
    name  = "ADH-AES128-SHA256"
    value = "false"
  }

  attribute {
    name  = "ADH-AES256-GCM-SHA384"
    value = "false"
  }

  attribute {
    name  = "ADH-AES256-SHA"
    value = "false"
  }

  attribute {
    name  = "ADH-AES256-SHA256"
    value = "false"
  }

  attribute {
    name  = "ADH-CAMELLIA128-SHA"
    value = "false"
  }

  attribute {
    name  = "ADH-CAMELLIA256-SHA"
    value = "false"
  }

  attribute {
    name  = "ADH-DES-CBC3-SHA"
    value = "false"
  }

  attribute {
    name  = "ADH-DES-CBC-SHA"
    value = "false"
  }

  attribute {
    name  = "ADH-RC4-MD5"
    value = "false"
  }

  attribute {
    name  = "ADH-SEED-SHA"
    value = "false"
  }

  attribute {
    name  = "DES-CBC-SHA"
    value = "false"
  }

  attribute {
    name  = "DHE-DSS-SEED-SHA"
    value = "false"
  }

  attribute {
    name  = "DHE-RSA-SEED-SHA"
    value = "false"
  }

  attribute {
    name  = "EDH-DSS-DES-CBC-SHA"
    value = "false"
  }

  attribute {
    name  = "EDH-RSA-DES-CBC-SHA"
    value = "false"
  }

  attribute {
    name  = "IDEA-CBC-SHA"
    value = "false"
  }

  attribute {
    name  = "RC4-MD5"
    value = "false"
  }

  attribute {
    name  = "SEED-SHA"
    value = "false"
  }

  attribute {
    name  = "DES-CBC3-MD5"
    value = "false"
  }

  attribute {
    name  = "DES-CBC-MD5"
    value = "false"
  }
}

elb.tf.out

module.foo.bar.load_balancer.aws_lb_ssl_negotiation_policy.tls_policy: Creating...
  attribute.#:                "" => "68"
  attribute.102668229.name:   "" => "DHE-RSA-AES256-SHA"
  attribute.102668229.value:  "" => "0"
  attribute.1085973437.name:  "" => "Server-Defined-Cipher-Order"
  attribute.1085973437.value: "" => "true"
  attribute.1145972638.name:  "" => "EDH-DSS-DES-CBC3-SHA"
  attribute.1145972638.value: "" => "0"
  attribute.120217849.name:   "" => "AES256-SHA256"
  attribute.120217849.value:  "" => "1"
  attribute.1244856755.name:  "" => "DHE-RSA-AES256-SHA256"
  attribute.1244856755.value: "" => "0"
  attribute.1340670500.name:  "" => "Protocol-TLSv1.2"
  attribute.1340670500.value: "" => "true"
  attribute.1341652313.name:  "" => "ECDHE-RSA-AES128-SHA256"
  attribute.1341652313.value: "" => "1"
  attribute.1346490628.name:  "" => "ADH-AES128-SHA256"
  attribute.1346490628.value: "" => "0"
  attribute.1372587923.name:  "" => "ADH-DES-CBC3-SHA"
  attribute.1372587923.value: "" => "0"
  attribute.1373423960.name:  "" => "CAMELLIA256-SHA"
  attribute.1373423960.value: "" => "0"
  attribute.1473813686.name:  "" => "DHE-RSA-AES128-GCM-SHA256"
  attribute.1473813686.value: "" => "0"
  attribute.1475664019.name:  "" => "ECDHE-ECDSA-AES128-SHA"
  attribute.1475664019.value: "" => "1"
  attribute.1484509447.name:  "" => "RC4-MD5"
  attribute.1484509447.value: "" => "0"
  attribute.1541195275.name:  "" => "DHE-RSA-AES256-GCM-SHA384"
  attribute.1541195275.value: "" => "0"
  attribute.1599023990.name:  "" => "DHE-DSS-CAMELLIA128-SHA"
  attribute.1599023990.value: "" => "0"
  attribute.1644130816.name:  "" => "DHE-RSA-CAMELLIA256-SHA"
  attribute.1644130816.value: "" => "0"
  attribute.1678883781.name:  "" => "ADH-AES256-SHA"
  attribute.1678883781.value: "" => "0"
  attribute.1690587623.name:  "" => "Protocol-TLSv1.1"
  attribute.1690587623.value: "" => "true"
  attribute.1816625573.name:  "" => "IDEA-CBC-SHA"
  attribute.1816625573.value: "" => "0"
  attribute.191625939.name:   "" => "DHE-DSS-AES256-SHA256"
  attribute.191625939.value:  "" => "0"
  attribute.1963490131.name:  "" => "ADH-RC4-MD5"
  attribute.1963490131.value: "" => "0"
  attribute.1963805552.name:  "" => "AES256-GCM-SHA384"
  attribute.1963805552.value: "" => "1"
  attribute.1984987954.name:  "" => "ECDHE-ECDSA-AES128-GCM-SHA256"
  attribute.1984987954.value: "" => "1"
  attribute.2000474072.name:  "" => "DHE-RSA-AES128-SHA"
  attribute.2000474072.value: "" => "0"
  attribute.2030637517.name:  "" => "AES128-GCM-SHA256"
  attribute.2030637517.value: "" => "1"
  attribute.2052381071.name:  "" => "ECDHE-ECDSA-AES256-GCM-SHA384"
  attribute.2052381071.value: "" => "1"
  attribute.2089550464.name:  "" => "SEED-SHA"
  attribute.2089550464.value: "" => "0"
  attribute.2119814407.name:  "" => "ECDHE-RSA-AES256-SHA384"
  attribute.2119814407.value: "" => "1"
  attribute.2122431529.name:  "" => "ECDHE-RSA-AES256-SHA"
  attribute.2122431529.value: "" => "1"
  attribute.2453686625.name:  "" => "AES256-SHA"
  attribute.2453686625.value: "" => "1"
  attribute.2498083200.name:  "" => "EDH-DSS-DES-CBC-SHA"
  attribute.2498083200.value: "" => "0"
  attribute.252860954.name:   "" => "ECDHE-ECDSA-RC4-SHA"
  attribute.252860954.value:  "" => "0"
  attribute.258656047.name:   "" => "ECDHE-RSA-AES256-GCM-SHA384"
  attribute.258656047.value:  "" => "1"
  attribute.262399028.name:   "" => "ECDHE-RSA-AES128-SHA"
  attribute.262399028.value:  "" => "1"
  attribute.265702221.name:   "" => "Protocol-TLSv1"
  attribute.265702221.value:  "" => "true"
  attribute.27642846.name:    "" => "DES-CBC-SHA"
  attribute.27642846.value:   "" => "0"
  attribute.279438535.name:   "" => "ADH-SEED-SHA"
  attribute.279438535.value:  "" => "0"
  attribute.2794395195.name:  "" => "EDH-RSA-DES-CBC-SHA"
  attribute.2794395195.value: "" => "0"
  attribute.2796450947.name:  "" => "ADH-CAMELLIA128-SHA"
  attribute.2796450947.value: "" => "0"
  attribute.2799063518.name:  "" => "DHE-DSS-AES128-GCM-SHA256"
  attribute.2799063518.value: "" => "0"
  attribute.282929693.name:   "" => "DHE-RSA-CAMELLIA128-SHA"
  attribute.282929693.value:  "" => "0"
  attribute.2865892195.name:  "" => "DHE-DSS-AES256-GCM-SHA384"
  attribute.2865892195.value: "" => "0"
  attribute.2868163645.name:  "" => "RC4-SHA"
  attribute.2868163645.value: "" => "0"
  attribute.3033974291.name:  "" => "AES128-SHA256"
  attribute.3033974291.value: "" => "1"
  attribute.3034435561.name:  "" => "DHE-DSS-AES256-SHA"
  attribute.3034435561.value: "" => "0"
  attribute.3096927289.name:  "" => "DHE-DSS-AES128-SHA256"
  attribute.3096927289.value: "" => "0"
  attribute.3321862132.name:  "" => "DHE-DSS-AES128-SHA"
  attribute.3321862132.value: "" => "0"
  attribute.3355974431.name:  "" => "DES-CBC3-SHA"
  attribute.3355974431.value: "" => "0"
  attribute.3464839660.name:  "" => "DHE-DSS-SEED-SHA"
  attribute.3464839660.value: "" => "0"
  attribute.3504930269.name:  "" => "ADH-DES-CBC-SHA"
  attribute.3504930269.value: "" => "0"
  attribute.355722200.name:   "" => "ADH-AES128-SHA"
  attribute.355722200.value:  "" => "0"
  attribute.356256588.name:   "" => "ECDHE-ECDSA-AES128-SHA256"
  attribute.356256588.value:  "" => "1"
  attribute.3616287902.name:  "" => "ADH-CAMELLIA256-SHA"
  attribute.3616287902.value: "" => "0"
  attribute.3814855036.name:  "" => "AES128-SHA"
  attribute.3814855036.value: "" => "1"
  attribute.3820845038.name:  "" => "ADH-AES256-SHA256"
  attribute.3820845038.value: "" => "0"
  attribute.4079660772.name:  "" => "DES-CBC-MD5"
  attribute.4079660772.value: "" => "0"
  attribute.416229173.name:   "" => "EDH-RSA-DES-CBC3-SHA"
  attribute.416229173.value:  "" => "0"
  attribute.4191135577.name:  "" => "DHE-RSA-AES128-SHA256"
  attribute.4191135577.value: "" => "0"
  attribute.553554245.name:   "" => "CAMELLIA128-SHA"
  attribute.553554245.value:  "" => "0"
  attribute.57580946.name:    "" => "ECDHE-RSA-AES128-GCM-SHA256"
  attribute.57580946.value:   "" => "1"
  attribute.613563154.name:   "" => "ECDHE-ECDSA-AES256-SHA384"
  attribute.613563154.value:  "" => "1"
  attribute.651591822.name:   "" => "ECDHE-ECDSA-AES256-SHA"
  attribute.651591822.value:  "" => "1"
  attribute.754796001.name:   "" => "DHE-RSA-SEED-SHA"
  attribute.754796001.value:  "" => "0"
  attribute.778924907.name:   "" => "DHE-DSS-CAMELLIA256-SHA"
  attribute.778924907.value:  "" => "0"
  attribute.885649826.name:   "" => "ADH-AES128-GCM-SHA256"
  attribute.885649826.value:  "" => "0"
  attribute.953002783.name:   "" => "ADH-AES256-GCM-SHA384"
  attribute.953002783.value:  "" => "0"
  attribute.97075874.name:    "" => "ECDHE-RSA-RC4-SHA"
  attribute.97075874.value:   "" => "0"
  attribute.981958181.name:   "" => "DES-CBC3-MD5"
  attribute.981958181.value:  "" => "0"
  lb_port:                    "" => "443"
  load_balancer:              "" => "foo-elb"
  name:                       "" => "foo-elb-policy"