If you're using AWS Elastic Load Balancer, then the quick fix is: 1) Select the load balancer you want to edit 2) Click the "Listeners" tab 3) Click "change" u

If you're using AWS Elastic Load Balancer, then the quick fix is: 1) Select the load balancer you want to edit 2) Click the "Listeners" tab 3) Click "change" under the "Cipher" column for the HTTPS row 4) Select the most recent pre-defined security policy, from 2015-02. This should get you an A on SSL Lab's test[1] https://www.ssllabs.com/ssltest/ https://www.ssllabs.com/ssltest/