From fcbb449b86666b38690cd71b0dca076ed5890ef6 Mon Sep 17 00:00:00 2001
From: Kusanagi <a1225674957@163.com>
Date: Fri, 19 Dec 2025 17:52:27 +0800
Subject: [PATCH] Improve Configuration to Enhance Security

---
 configuration/exodus-lambda-deploy.yaml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/configuration/exodus-lambda-deploy.yaml b/configuration/exodus-lambda-deploy.yaml
index 2251bfdd..77922ca3 100644
--- a/configuration/exodus-lambda-deploy.yaml
+++ b/configuration/exodus-lambda-deploy.yaml
@@ -94,6 +94,8 @@ Resources:
           ViewerProtocolPolicy: redirect-to-https
         Enabled: true
         HttpVersion: http2
+        ViewerCertificate:
+          MinimumProtocolVersion: TLSv1.2_2021
         Origins:
           - DomainName: !Sub "${project}-cdn-${env}.s3.amazonaws.com"
             Id: !Sub "S3-${project}-cdn-${env}"