(aws-elasticloadbalancingv2): Please add post-quantum security policies #36283
Description
Describe the feature
Add post-quantum security policies available for Network Load Balancer (NLB) and/or Application Load Balancer (ALB), eg. ELBSecurityPolicy-TLS13-1-3-PQ-2025-09.
Announcement: https://aws.amazon.com/about-aws/whats-new/2025/11/network-load-balancers-post-quantum-key-exchange-tls/
Use Case
“I'm always frustrated when…” I cannot use the best security available. I'd love to be able to use ELBSecurityPolicy-TLS13-1-3-PQ-2025-09 and other PQ policies.
Proposed Solution
Add PQ security policies to enum SslPolicy.
Other Information
Adding a custom NetworkListener to our code seems a bit much and others won't be able to benefit from PQ security policies.
Acknowledgements
- I may be able to implement this feature request
- This feature might incur a breaking change
AWS CDK Library version (aws-cdk-lib)
AWS CDK CLI version
2.1033.0 (build 1ec3310)
Environment details (OS name and version, etc.)
Linux :) (but it doesn't really matter)